skills.rest
belokonm
belokonmCOMMUNITY
Explore all skills by this author →
GitHub

security-engineer

Secure cloud infrastructure and CI/CD pipelines with security-by-design practices.

8|11|Updated Feb 15, 2026
Search Tags:#security#rbac#devsecops#infrastructure-as-code#zero-trust#cloud-security
One-click install
npx skills add https://github.com/belokonm/claude-supercode-skills --skill security-engineer-belokonm
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-engineer
Source: https://github.com/belokonm/claude-supercode-skills/tree/main/security-engineer-skill
Command: npx skills add https://github.com/belokonm/claude-supercode-skills --skill security-engineer-belokonm

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security and governance for cloud infrastructure are increasingly complex; this Skill provides security-by-design guidance, automated controls, and defensible architectures to secure cloud environments, identities, and deployment pipelines.

Core Features & Use Cases

  • Security-by-design for cloud architectures (IAM, networking, encryption) and governance.
  • DevSecOps integration with SAST/DAST, IaC scanning, and policy enforcement across CI/CD.
  • Kubernetes hardening (RBAC, Pod Security Standards, admission controllers) and secret management in pipelines.
  • Use Case: Design secure blueprints for multi-cloud deployments and automate security gates in CI/CD.

Quick Start

Describe your cloud environment and I will design a zero-trust security architecture and DevSecOps plan.

Frequently Asked Questions about security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a zero-trust security architecture for multi-cloud deployments?▼

Zero-trust security architecture is achieved by embedding security-by-design into cloud environments, securing identities, networking, and encryption, while enforcing governance across AWS, Azure, and GCP deployments.

How do I integrate IaC scanning and SAST into CI/CD pipelines?▼

IaC scanning and SAST integration within CI/CD pipelines applies DevSecOps practices to enforce security-as-code, automate security gates, and execute continuous SAST/DAST checks throughout operations.

What is the best way to harden Kubernetes RBAC and Pod Security Standards?▼

Hardening Kubernetes RBAC and Pod Security Standards involves configuring strict identity controls, applying admission controllers, and securing secret management within deployment pipelines to prevent unauthorized access.

Does this approach support security-as-code practices across AWS, Azure, and GCP?▼

Yes, security-as-code practices are fully supported by designing secure blueprints and automating security controls that apply consistently across AWS, Azure, and GCP cloud infrastructure environments.

When do I need automated security gates in DevSecOps pipelines?▼

Automated security gates in DevSecOps pipelines are needed when enforcing continuous IaC scanning, SAST/DAST validation, and policy compliance to secure deployment pipelines and prevent vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
dy9759dy9759
1

devops-expert

Design CI/CD pipelines and cloud-native infrastructure with Terraform and Kubernetes.

Community
Advanced
rajyeole6rajyeole6

agency-cloud-security-architect

Design and validate secure cloud-native architectures across AWS, Azure, and GCP.

Community
Advanced
daemon-blockint-techdaemon-blockint-tech
7

infrastructure-engineer

Design and implement scalable cloud infrastructure with Terraform and Pulumi.

Community
Advanced
mohitmishra786mohitmishra786

security

Scan code, dependencies, containers, and cloud configurations for security vulnerabilities.

Community
Advanced