skills.rest
jshsakura
jshsakuraCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-engineer

Implement security controls across IAM, secrets, network, and hardening.

22|2|Updated Mar 24, 2026
Search Tags:#security#infrastructure#secrets#iam#network#hardening#least-privilege
One-click install
npx skills add https://github.com/jshsakura/awesome-opencode-skills --skill security-engineer-jshsakura
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-engineer
Source: https://github.com/jshsakura/awesome-opencode-skills/tree/main/skills/security-engineer
Command: npx skills add https://github.com/jshsakura/awesome-opencode-skills --skill security-engineer-jshsakura

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Own infrastructure and platform security engineering work as production-safety and operability engineering, not checklist completion.

Core Features & Use Cases

  • Identity and access boundaries with least-privilege enforcement
  • Secret lifecycle management: creation, rotation, storage, and usage paths
  • Network segmentation and exposure minimization for critical assets
  • Workload hardening controls across hosts, containers, and runtime policies
  • Logging, detection, and auditability coverage for high-risk operations
  • Supply-chain and artifact integrity concerns in build/deploy systems
  • Risk prioritization by exploitability, impact, and remediation cost

Quick Start

Propose the smallest safe IAM policy change to reduce blast radius for a given service.

Frequently Asked Questions about security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement least-privilege IAM policies to reduce blast radius?▼

Implement least-privilege IAM by proposing the smallest safe policy changes for a given service, ensuring identity and access boundaries strictly minimize blast radius while maintaining operational safety.

What is secret lifecycle management and how does it secure infrastructure?▼

Secret lifecycle management secures infrastructure by controlling the creation, rotation, storage, and usage paths of secrets, reducing exposure risk across cloud and on-prem environments.

How do I apply network segmentation to minimize exposure for critical assets?▼

Apply network segmentation by implementing controls that minimize exposure for critical assets, reducing the attack surface through targeted boundary enforcement and risk-based prioritization.

Does this approach work for both cloud and on-premises workload hardening?▼

Yes, workload hardening applies to both cloud and on-premises environments, covering hosts, containers, and runtime policies to deliver safe, measurable security improvements across diverse infrastructure.

What is the best way to prioritize infrastructure security controls by risk?▼

Prioritize security controls by evaluating exploitability, impact, and remediation cost, ensuring risk-based prioritization delivers safe, minimal security gains rather than checklist completion.

Why should I treat platform security as production-safety engineering instead of compliance?▼

Treating platform security as production-safety engineering focuses on operability and risk reduction, ensuring controls like auditability and supply-chain integrity deliver measurable improvements over checklist compliance.

Related Skills

Explore More Software Engineering Skills→
appownedgeappownedge

cloud-functions-security-performance-auditor

Audits Cloud Function deployments for security risks and performance bottlenecks.

Community
Advanced
ToXMonToXMon

domino-model-monitoring

Detect data drift and monitor model health for Domino-deployed models.

Community
Advanced
a-ng-da-ng-d
1

glab-attestation

Validate GitLab attestations for artifact provenance and integrity.

Community
Intermediate
balsm-healthbalsm-health
2

implementing-cloud-security-posture-management

Automate continuous security posture monitoring across AWS, Azure, and GCP.

Official
Advanced