Security Skills
SAST, Vulnerability Scanning, Compliance, SecOps
sast-configuration
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code.
senior-secops
Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practices.
auth-implementation-patterns
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC.
k8s-security-policies
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC.
mtls-configuration
Configure mutual TLS (mTLS) for zero-trust service-to-service communication.
gdpr-data-handling
Implement GDPR-compliant data handling with consent management and data subject rights.
senior-security
Comprehensive security engineering skill for application security, penetration testing, security architecture.
information-security-manager-iso27001
Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation.
data-privacy-compliance
Data privacy and regulatory compliance specialist for GDPR, CCPA, HIPAA.
isms-audit-expert
Senior ISMS Audit Expert for internal and external information security management system auditing.
auditing-access-control
Audit access control implementations for security vulnerabilities and misconfigurations.
scanning-for-secrets
Scan for exposed secrets, API keys, and credentials in code.
validating-csrf-protection
Validate CSRF protection implementations for security gaps in web applications.
performing-security-testing
Automate security vulnerability testing covering OWASP Top 10, SQL injection, XSS, and CSRF.
analyzing-security-headers
Analyze HTTP security headers of web domains to identify vulnerabilities.
checking-infrastructure-compliance
Compliance monitoring and validation with comprehensive guidance and automation.