skills.rest
saeed-vayghan
saeed-vayghanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-engineer

Automate vulnerability scanning and compliance verification for cloud infrastructure.

30|7|Updated Jan 13, 2026
Search Tags:#security#compliance#vulnerability management#devsecops#cloud security#zero trust
One-click install
npx skills add https://github.com/saeed-vayghan/gemini-agent-skills --skill security-engineer-saeed-vayghan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-engineer
Source: https://github.com/saeed-vayghan/gemini-agent-skills/tree/main/.gemini/skills/security-engineer
Command: npx skills add https://github.com/saeed-vayghan/gemini-agent-skills --skill security-engineer-saeed-vayghan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) components.

What problem does it solve?

This Skill addresses the complex and ever-evolving challenges of securing modern IT infrastructure, ensuring compliance, and integrating security seamlessly into development workflows.

Core Features & Use Cases

  • DevSecOps Integration: Embeds security practices early in the development lifecycle ("shift-left").
  • Cloud & Infrastructure Security: Specializes in securing cloud environments (AWS, Azure, GCP) and containerized applications (Kubernetes).
  • Vulnerability Management & Compliance: Automates scanning, prioritization, and remediation of vulnerabilities, ensuring adherence to compliance frameworks.
  • Use Case: A company needs to ensure its new microservice architecture deployed on AWS is compliant with SOC2 and free from critical vulnerabilities before going live. This Skill can automate the security analysis, implement necessary controls, and verify compliance.

Quick Start

Use the security-engineer skill to analyze the current security posture of the production environment.

Frequently Asked Questions about security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I integrate DevSecOps and automate vulnerability management into my development lifecycle?▼

DevSecOps integration embeds security practices early in the development lifecycle through shift-left automation. You can automate vulnerability scanning, prioritize remediation, and ensure adherence to compliance frameworks before deployment.

What is zero trust architecture implementation and how does it secure cloud infrastructure?▼

Zero trust architecture implementation secures cloud infrastructure by requiring strict identity verification for every person and device. It manages vulnerability assessment and incident response across AWS, Azure, and GCP environments.

Can I use this to ensure my Kubernetes microservices on AWS are SOC2 compliant?▼

Yes, you can secure containerized applications like Kubernetes on AWS and verify SOC2 compliance. It automates security analysis, implements necessary controls, and verifies compliance for new microservice architectures before going live.

How do I assess the current security posture of my production environment?▼

To assess your security posture, analyze the production environment using infrastructure security engineering. This evaluates cloud security configurations, identifies vulnerabilities, and tracks compliance status through operational context queries.

Does this approach require existing security context queries to function?▼

Yes, operational execution requires access to security context queries and progress tracking assets. These inputs enable the system to perform vulnerability assessments, compliance automation, and incident response effectively.

Related Skills

Explore More Software Engineering Skills→
ArdurAIArdurAI
1

god-security-cloud

Audit AWS, Azure, and GCP configurations for security misconfigurations.

Official
Advanced
voidrotvoidrot

threat-mitigation-mapping

Map threats to security controls and prioritize remediation efforts.

Community
Advanced
martinholovskymartinholovsky
45

devsecops-expert

Automate security gates for CI/CD pipelines with SAST, SCA, and secret scanning.

Community
Advanced
HemantSudarshanHemantSudarshan

security-auditor

Audit software security posture across code, pipelines, and deployments.

Community
Advanced