Spring Security, CSRF, headers, rate limiting
Spring Boot security. Governed.
Exact least-privilege AWS IAM policies. No wildcards.
JUnit 5, Mockito, Testcontainers
Build, analysis, coverage, security scans