cybersecurity-analyst

Threat modeling uses frameworks like STRIDE to systematically identify vulnerabilities across system components. This skill analyzes your architecture, maps potential attack vectors, and prioritizes risks using the CIA triad and defense-in-depth principles to surface actionable threats before deployment.

Risk assessment evaluates vulnerabilities, threat likelihood, and impact using risk-based frameworks. This skill applies CIA triad and MITRE ATT&CK to prioritize findings by severity, then recommends concrete mitigations for networks, systems, and applications to improve overall security posture.

Cryptography validation and access control review examine whether encryption and authorization mechanisms meet functional and technical security requirements. This skill assesses these components against zero-trust and defense-in-depth principles to identify design weaknesses and recommend fixes.

Yes. This skill analyzes security events and designs incident response procedures by mapping threats to MITRE ATT&CK tactics. It delivers response frameworks and mitigations aligned with your system architecture and risk profile.

This skill applies STRIDE for threat modeling, CIA triad for risk assessment, MITRE ATT&CK for attack pattern mapping, and zero-trust and defense-in-depth for architecture review. These frameworks deliver standardized, actionable security findings.