Sanjeev Jaiswal
Community@jassics · Bangalore, India
A Seasoned security professional with 15+ years of experience. #ApplicationSecurity #CloudSecurity #Python #DevSecOps #ContainerSecurity #Pentest
Agent Skills by Sanjeev Jaiswal
Showing 96 vetted skills indexed across 1 GitHub repositories.
jassicssecure-pipeline
Review and secure CI/CD pipelines with automated security scanning gates.
jassicsalert-triage
Automate SIEM/EDR alert triage with validation, enrichment, and verdict decisions.
jassicssecurity-investigation
Correlate EDR, auth, network, and app logs into a security investigation timeline.
jassicsk8s-rbac-review
Audit Kubernetes RBAC configurations for excessive permissions and cluster-admin escalation paths.
jassicsk8s-workload-hardening
Review and apply Pod Security Standards to harden Kubernetes workloads.
jassicsk8s-cluster-review
Audit Kubernetes clusters against the CIS Kubernetes Benchmark and 4Cs model.
jassicsthreat-hunting
Formulate and test hypotheses on system and network logs to detect adversary activity.
jassicsdetection-coverage-review
Analyze detection coverage against the MITRE ATT&CK matrix to identify gaps.
jassicsdetection-rule-development
Develop and review detection rules mapped to MITRE ATT&CK with test cases.
jassicsforensic-triage
Automate forensic triage by collecting disk, memory, and log evidence to build an incident timeline.
jassicsincident-response
Orchestrate security incident response using NIST SP 800-61 and SANS PICERL.
jassicsioc-development
Extract and validate atomic, computed, and behavioral indicators from incident data.
jassicsadversary-emulation
Simulate cyber attacks using ATT&CK framework-based scenarios for red team exercises.
jassicsrecon
Coordinates passive and active enumeration of authorized attack surfaces for penetration testing.
jassicsartifact-provenance-verification
Verify build artifact provenance and integrity using SLSA guidelines.
jassicsdependency-supply-chain-review
Review third-party dependencies for typosquatting, dependency confusion, and malicious scripts.
jassicspipeline-integrity-review
Reviews CI/CD pipelines for supply-chain tampering risks and prioritizes fixes.
jassicsrisk-assessment
Automate ISO 27005 / NIST SP 800-30 risk assessments with a structured risk register.
jassicscompliance-assessment
Map controls to evidence and prioritize remediation actions for compliance frameworks.
jassicspolicy-management
Develop and review security governance documents aligned with frameworks and risk assessments.
jassicsframework-mapping
Map security findings across compliance frameworks like CWE and NIST CSF.
jassicsattack-lookup
Map observed behaviors to MITRE ATT&CK technique IDs and references.
jassicsowasp-reference
Map security findings to OWASP category IDs and names.
jassicsthreat-actor-profiling
Profile threat actors and campaigns with TTPs mapped to MITRE ATT&CK.