secops-engineer

What problem does it solve?

This skill enables secure authentication and authorization for applications by implementing and configuring JWT/OAuth2 with best practices.

Core Features & Use Cases

• Authentication & Authorization: Design and implement robust access controls using JWT (RS256) and OAuth2/OIDC flows, including PKCE and token rotation.
• Security Posture & Compliance: Apply defense-in-depth practices, security headers, secret management, and GDPR/compliance considerations.
• Security Reviews & Hardening: Conduct security reviews and guide secure-by-design patterns for backend and APIs, rate limiting, and threat modeling.
• Use Case: For a new REST API with millions of users, configure secure auth, enforce access controls, and implement rate limiting to prevent abuse.

Quick Start

Provide a secure configuration outline for a new API, including JWT/OIDC setup and threat modeling.