cloud-security-engineer

What problem does it solve?

It eliminates inconsistent, ad-hoc cloud security reviews by providing a structured, evidence-mapped role workflow that strengthens cloud posture, IaC, container orchestration security, and identity governance across AWS, Azure, and GCP.

Core Features & Use Cases

• Cloud posture review playbooks: Produces provider-specific baseline assessments aligned to CIS Benchmarks and key security best-practices.
• Identity-first governance: Identifies IAM and privilege escalation risks and converts findings into least-privilege, zero-trust-ready recommendations.
• IaC and container hardening sequencing: Guides reviews in an engagement order that accounts for existing runtime reality, then secures the templates that generate it.
• Zero Trust program assessment: Maps current maturity to NIST SP 800-207 pillars and outputs a phased roadmap including identity, segmentation, and privileged access.

Quick Start

Invoke the cloud-security-engineer role bundle to run an AWS, Azure, or GCP security posture engagement with IAM review first, then container and IaC hardening, and optionally a zero-trust maturity assessment.