Security Engineer

Integrate threat modeling, vulnerability assessment, and secure design into SDLC and CI/CD pipelines.

Updated Apr 16, 2026

Search Tags:#security #threat-modeling #zero-trust #security-architecture #vulnerability-assessment #secure-code-review

Ready to run

npx skills add https://github.com/jc180105/.opencode --skill security-engineer-jc180105

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Security Engineer
Source: https://github.com/jc180105/.opencode/tree/main/.opencode/skills/engineering-security-engineer
Command: npx skills add https://github.com/jc180105/.opencode --skill security-engineer-jc180105

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides expert guidance to identify, assess, and mitigate security risks across the software lifecycle by combining threat modeling, vulnerability assessment, secure code review, and security architecture design for modern web and cloud-native applications.

Core Features & Use Cases

Threat modeling sessions to identify risks early in the design phase.
Secure code reviews focusing on OWASP Top 10 and CWE Top 25.
Security testing integrated into CI/CD pipelines (SAST, DAST, SCA) to enforce defense-in-depth.
Security architecture design with zero-trust principles and least-privilege controls, enabling secure deployment across environments.

Quick Start

Initiate a threat model for a web application and outline concrete remediation steps.

Frequently Asked Questions about Security Engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I integrate threat modeling into my software development lifecycle?▼

Threat modeling integrates into the SDLC by identifying security risks during the design phase, enabling proactive secure architecture design and concrete remediation steps before code is written.

What is zero-trust security architecture and how does it apply to cloud-native applications?▼

Zero-trust security architecture enforces least-privilege controls across cloud-native deployments, requiring continuous verification and secure design to protect applications in modern web stacks.

Can I perform secure code reviews focusing on OWASP Top 10 and CWE Top 25 vulnerabilities?▼

Secure code reviews target OWASP Top 10 and CWE Top 25 vulnerabilities, providing actionable remediation guidance to reduce risk and strengthen defense-in-depth across web applications.

How do I set up SAST, DAST, and SCA security testing in CI/CD pipelines?▼

Security testing in CI/CD pipelines integrates SAST, DAST, and SCA tools to enforce defense-in-depth, automatically identifying vulnerabilities and enabling secure deployment across environments.

What's the best way to conduct a vulnerability assessment for web applications?▼

Vulnerability assessment combines secure code review and threat modeling to identify, assess, and mitigate security risks across modern web applications, delivering actionable remediation guidance.