security-engineer

Perform a production-grade security audit by applying OWASP Top 10 code review and STRIDE threat modeling across full-stack applications, microservices, and AI-enabled workflows to identify vulnerabilities. It delivers per-service findings with exact file and line traceability.

STRIDE threat modeling is a framework for identifying security threats across code, infrastructure, and dependencies. It enforces this methodology during microservices security reviews to map vulnerabilities and generate comprehensive remediation plans.

Yes, you can use this security audit workflow in CI/CD pipelines. It is explicitly designed to identify and remediate application security vulnerabilities across code, infrastructure, and dependencies within production and CI/CD environments.

Generate an SBOM and review supply chain security by auditing your application dependencies. The audit process includes end-to-end supply chain reviews and SBOM generation to identify vulnerable components and provide actionable remediation plans.

Yes, the audit covers RBAC and data protection remediation planning. It enforces end-to-end auth and data security reviews across your codebase, providing a prioritized remediation plan across six comprehensive phases.

The best way to remediate security vulnerabilities is to follow a prioritized remediation plan generated after a full code review. It maps identified threats to actionable steps across six phases, ensuring comprehensive vulnerability resolution.