Find the perfect skill
Security Control Verification
Security
Verifies that security controls from a threat model are implemented in the codebase. Searches for control implementations using code patterns, validates configurations, and identifies missing or incomplete controls. Helps when validating a threat model against actual code or finding security gaps.
Threat Modeling Expert
Security
Expert in threat modeling and security architecture review. Masters STRIDE, PASTA, attack trees, and risk assessment for secure-by-design systems.
AI Guardrail Audit
Security
Audit AI guardrail coverage: bypass vectors, false positive rates, and policy gaps. Includes red-team scenarios to test filter robustness.
Implementing Canary Tokens for Network Intrusion Detection
Security
Deploys DNS, HTTP, and AWS API key canary tokens to detect unauthorized access, with webhook alerts for real-time intrusion notifications.
Python Jail Escape
Security
Techniques to bypass Python sandbox restrictions and execute arbitrary code in restricted environments.
Rust Safety Audit
Security
Safety audit focusing on unsafe blocks, memory leaks, UB, and Vulkan spec violations in a Rust codebase.
AI Prompt Engineering Safety Review & Improvement
Security
Comprehensive analysis of AI prompts for safety, bias, and effectiveness with detailed improvement recommendations.
Fix Review
Security
Verify that fix commits address audit findings without introducing new bugs or security vulnerabilities.
CIS OpenShift 1.3.3 Service Account Private Key
Security
Ensures the service account private key file is set for the controller manager as required by CIS OpenShift v1.9.0 control 1.3.3.
Analyzing Kubernetes Audit Logs
Security
Parses Kubernetes API server audit logs to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access. Builds SIEM detection rules from event patterns for investigating cluster compromise.
SIEM Correlation Rules for APT Detection
Security
Write multi-event correlation rules to detect APT lateral movement by chaining Windows authentication, process execution, and network logs using Splunk SPL and Sigma format.
Security Analyzer
Security
Scans codebases and infrastructure for vulnerabilities, fetches live CVE data, and generates remediation plans with TDD tests.