security-engineer

Perform a security audit by running reconnaissance, static analysis, configuration reviews, and dependency assessments. This process identifies vulnerabilities across modern stacks and returns structured findings with severity, location, and recommended fixes.

Static analysis examines source code without executing it to locate security vulnerabilities. It enforces best practices like input validation and access control, generating actionable remediation guidance for identified flaws.

Yes, you can use it for IaC reviews and CI pipeline security checks. It supports pre-commit scanning and responds to security-review prompts or the /security-review command to harden applications during development.

The best way to audit dependencies is through an automated dependency assessment. This evaluates your project's libraries against known security risks, producing a prioritized report of vulnerabilities with remediation steps.

Yes, the security audit includes threat modeling to harden applications. It combines reconnaissance and configuration review to map potential threats and return structured findings with recommended fixes.

Remediate access control and secure configuration management issues by following the generated actionable remediation guidance. The audit enforces these best practices and highlights specific locations requiring fixes.