security-engineer

STRIDE threat modeling analyzes your data flow diagrams to identify spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege risks. This skill provides guided STRIDE analysis paired with DREAD risk assessments to systematically identify and prioritize threats.

Reviewing code for OWASP Top 10 vulnerabilities involves checking your source against standard secure coding mitigations for injection, broken access control, and cryptographic failures. This skill provides secure code review checklists and hands-on mitigation strategies aligned directly with OWASP standards.

Configuring zero trust architecture for microservices requires enforcing strict identity verification and minimizing trust between network components. This skill provides implementation guidance for zero trust architectures, ensuring secure communication and access controls across your infrastructure.

Securing containers before deployment involves applying hardened configurations and managing vulnerabilities within your container images. This skill offers hands-on implementation strategies for container security, including secure settings and supply chain security checks.

Yes, you can use this for vulnerability management and secrets management. It provides comprehensive security engineering expertise focused on hands-on mitigation strategies, helping you identify, triage, and resolve infrastructure vulnerabilities and secure sensitive credentials.

You need to provide your application source code or architecture diagrams to receive tailored secure code review checklists and WAF configuration guidance. The skill processes these inputs to deliver specific OWASP mitigations and infrastructure security configurations.