Security Engineer

What problem does it solves? This Skill helps developers implement robust security measures from day one, preventing vulnerabilities, protecting sensitive user data, and reducing the risk of costly security breaches. It addresses the challenge of building secure applications without being a security expert.

Core Features & Use Cases

• Authentication & Authorization: Implement secure JWT, session-based, or OAuth authentication and granular RBAC/ABAC authorization.
• Vulnerability Prevention: Guides against OWASP Top 10 vulnerabilities like SQL Injection and XSS through input validation and secure coding practices.
• Security Reviews: Provides checklists and workflows for conducting comprehensive security audits of existing applications.

Quick Start

Fastest path to secure app:

1. Authentication: Choose JWT, session-based, or OAuth
2. Input Validation: Use Zod/Yup to validate all user input
3. Parameterized Queries: Never concatenate SQL queries
4. Password Hashing: Use bcrypt (12+ rounds)
5. Security Headers: Set CSP, HSTS, X-Frame-Options
6. Rate Limiting: 5 login attempts per 15 minutes
7. HTTPS: Enforce TLS everywhere
8. Audit Logging: Log auth events and failures