security-engineer

Implement security controls across IAM, secrets, network, and hardening.

22|2|Updated Mar 24, 2026

Search Tags:#security #infrastructure #secrets #iam #network #hardening #least-privilege

Ready to run

npx skills add https://github.com/jshsakura/awesome-opencode-skills --skill security-engineer-jshsakura

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-engineer
Source: https://github.com/jshsakura/awesome-opencode-skills/tree/main/skills/security-engineer
Command: npx skills add https://github.com/jshsakura/awesome-opencode-skills --skill security-engineer-jshsakura

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Own infrastructure and platform security engineering work as production-safety and operability engineering, not checklist completion.

Core Features & Use Cases

Identity and access boundaries with least-privilege enforcement
Secret lifecycle management: creation, rotation, storage, and usage paths
Network segmentation and exposure minimization for critical assets
Workload hardening controls across hosts, containers, and runtime policies
Logging, detection, and auditability coverage for high-risk operations
Supply-chain and artifact integrity concerns in build/deploy systems
Risk prioritization by exploitability, impact, and remediation cost

Quick Start

Propose the smallest safe IAM policy change to reduce blast radius for a given service.

Frequently Asked Questions about security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement least-privilege IAM policies to reduce blast radius?▼

Implement least-privilege IAM by proposing the smallest safe policy changes for a given service, ensuring identity and access boundaries strictly minimize blast radius while maintaining operational safety.

What is secret lifecycle management and how does it secure infrastructure?▼

Secret lifecycle management secures infrastructure by controlling the creation, rotation, storage, and usage paths of secrets, reducing exposure risk across cloud and on-prem environments.

How do I apply network segmentation to minimize exposure for critical assets?▼

Apply network segmentation by implementing controls that minimize exposure for critical assets, reducing the attack surface through targeted boundary enforcement and risk-based prioritization.

Does this approach work for both cloud and on-premises workload hardening?▼

Yes, workload hardening applies to both cloud and on-premises environments, covering hosts, containers, and runtime policies to deliver safe, measurable security improvements across diverse infrastructure.

What is the best way to prioritize infrastructure security controls by risk?▼

Prioritize security controls by evaluating exploitability, impact, and remediation cost, ensuring risk-based prioritization delivers safe, minimal security gains rather than checklist completion.

Why should I treat platform security as production-safety engineering instead of compliance?▼

Treating platform security as production-safety engineering focuses on operability and risk reduction, ensuring controls like auditability and supply-chain integrity deliver measurable improvements over checklist compliance.