Expertise of Salman Tabrez
End-to-end security coverage.
Organized by where security matters in the software delivery lifecycle — not just a list of tools I've touched.
Threat modeling using STRIDE and MITRE ATT&CK frameworks. Data flow analysis, trust boundary mapping, and abuse case development to identify design-level vulnerabilities before code is written.
Security scanning embedded directly into CI/CD workflows with automated quality gates. Static analysis for code vulnerabilities, dependency scanning for supply chain risk, and dynamic testing against running applications.
Least-privilege IAM policy design, service account governance, network segmentation, and cloud misconfiguration detection. Multi-cloud security posture management across AWS, Azure, and GCP.
Detection-as-code workflows with correlation rules mapped to MITRE ATT&CK techniques. Log pipeline architecture, alert tuning to reduce noise, and automated response playbooks using SOAR platforms.
Python-based tooling for IAM auditing, cloud configuration assessment, log analysis, and automated remediation. Reducing manual security toil through scripting and serverless workflows.
Securing containerized workloads from build to runtime — image vulnerability scanning, RBAC enforcement, network policy implementation, pod security standards, and runtime anomaly detection.