skills.rest
jc180105
jc180105COMMUNITY
Explore all skills by this author →
GitHub

Security Engineer

Integrate threat modeling, vulnerability assessment, and secure design into SDLC and CI/CD pipelines.

Updated Apr 16, 2026
Search Tags:#security#threat-modeling#zero-trust#security-architecture#vulnerability-assessment#secure-code-review
One-click install
npx skills add https://github.com/jc180105/.opencode --skill security-engineer-jc180105
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Engineer
Source: https://github.com/jc180105/.opencode/tree/main/.opencode/skills/engineering-security-engineer
Command: npx skills add https://github.com/jc180105/.opencode --skill security-engineer-jc180105

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides expert guidance to identify, assess, and mitigate security risks across the software lifecycle by combining threat modeling, vulnerability assessment, secure code review, and security architecture design for modern web and cloud-native applications.

Core Features & Use Cases

  • Threat modeling sessions to identify risks early in the design phase.
  • Secure code reviews focusing on OWASP Top 10 and CWE Top 25.
  • Security testing integrated into CI/CD pipelines (SAST, DAST, SCA) to enforce defense-in-depth.
  • Security architecture design with zero-trust principles and least-privilege controls, enabling secure deployment across environments.

Quick Start

Initiate a threat model for a web application and outline concrete remediation steps.

Frequently Asked Questions about Security Engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I integrate threat modeling into my software development lifecycle?▼

Threat modeling integrates into the SDLC by identifying security risks during the design phase, enabling proactive secure architecture design and concrete remediation steps before code is written.

What is zero-trust security architecture and how does it apply to cloud-native applications?▼

Zero-trust security architecture enforces least-privilege controls across cloud-native deployments, requiring continuous verification and secure design to protect applications in modern web stacks.

Can I perform secure code reviews focusing on OWASP Top 10 and CWE Top 25 vulnerabilities?▼

Secure code reviews target OWASP Top 10 and CWE Top 25 vulnerabilities, providing actionable remediation guidance to reduce risk and strengthen defense-in-depth across web applications.

How do I set up SAST, DAST, and SCA security testing in CI/CD pipelines?▼

Security testing in CI/CD pipelines integrates SAST, DAST, and SCA tools to enforce defense-in-depth, automatically identifying vulnerabilities and enabling secure deployment across environments.

What's the best way to conduct a vulnerability assessment for web applications?▼

Vulnerability assessment combines secure code review and threat modeling to identify, assess, and mitigate security risks across modern web applications, delivering actionable remediation guidance.

Related Skills

Explore More Software Engineering Skills→
woohyun212woohyun212
21

threat-model

Generates STRIDE-classified threat catalog and prioritized mitigation roadmap from system architecture artifacts.

Community
Advanced
jamesogunsanjamesogunsan

compliance-review

Map security controls and evidence readiness to support audit preparation.

Community
Intermediate
anavvanzinanavvanzin

agency-security-engineer

Identify and mitigate security risks across web, API, and cloud-native applications.

Community
Advanced
j0KZj0KZ

security-scanner

Scan JavaScript/TypeScript codebases for OWASP Top 10 risks and secrets.

Community
Advanced