Edge
WAF, rate limiting, bot mitigation, TLS hygiene.
Security
Security as an engineering practice.
Security work that survives audit because it is built, not described.
Application
Authentication, authorization at every boundary, secret hygiene, dependency scanning.
Data
Encryption at rest, key rotation, masked logging, least-privilege access.
Operational
Tested incident response, runbooks for every recurring failure mode, post-incident reviews.