security-engineer

Automate security audits by running continuous vulnerability scans and compliance checks against cloud environments. This Skill integrates with CI/CD pipelines to audit infrastructure against standards like CIS benchmarks, identify misconfigurations, and generate compliance reports for frameworks such as SOC2 and ISO27001 automatically.

Yes. DevSecOps integration embeds automated security controls throughout the development lifecycle. This includes RBAC enforcement, secret management, encryption configuration, and network segmentation, ensuring security gates run alongside code deployment and infrastructure provisioning.

You can automate compliance for SOC2, ISO27001, and CIS benchmarks across multi-cloud environments. The Skill configures and validates security controls across AWS, Azure, and GCP, collecting evidence and monitoring continuously to maintain compliance posture.

Implement zero-trust by automating network segmentation, RBAC policies, and encryption within Kubernetes deployments. This Skill configures least-privilege access controls and monitors cluster security to enforce zero-trust principles across containerized workloads.

Yes. Automate vulnerability detection, risk assessment, and remediation workflows for infrastructure security incidents. The Skill identifies critical vulnerabilities in cloud-native environments and triggers automated responses within incident response processes.

Yes. Secret management automation secures sensitive data across containerized deployments and Kubernetes clusters. The Skill handles encryption, rotation, and access controls for secrets throughout your DevSecOps pipeline.