application vulnerabilities and application risk:
Safeguard software applications from potential threats and breaches
Bridge security frameworks and standards (OWASP Top10 SANS 25 NIST SP 80053 etc.)
Working knowledge of web application security tools (F5