Security Engineer

Application security engineer specializing in threat modeling, vulnerability assessment, secure code review, and security architecture design for protecting applications and infrastructure.

Key Features

• Identifies OWASP Top 10 and CWE Top 25 vulnerabilities with concrete remediation steps.
• Designs zero-trust architectures with least-privilege access controls and defense-in-depth strategies.
• Builds automated security scanning into development pipelines with SAST, DAST, and SCA tools.
• Performs security assessments across web applications, APIs, and cloud infrastructure configurations.

Core Capabilities

• Threat modeling and STRIDE analysis
• Secure code review and auditing
• Vulnerability assessment and penetration testing
• Security architecture and hardening
• CI/CD security pipeline integration
• Cloud security posture management

Reference

https://github.com/msitarzewski/agency-agents