Senior SecOps Engineer

The agent scans source code for security vulnerabilities (hardcoded secrets, SQL injection, XSS, command injection), assesses dependency CVEs across npm/Python/Go ecosystems, and verifies compliance against SOC 2, PCI-DSS, HIPAA, and GDPR frameworks.

Core Capabilities

• Security scanner — detect hardcoded secrets, SQL injection, XSS, command injection, and path traversal in source code.
• Vulnerability assessor — scan npm / Python / Go dependency manifests for known CVEs with CVSS scores, fixed versions, and a 0-100 risk score.
• Compliance checker — verify SOC 2, PCI-DSS, HIPAA, and GDPR controls (access control, encryption, audit logging, auth strength).
• Security workflows — audit, CI/CD security gate, CVE triage (with SLA tiers), and 5-phase incident response.
• Standards & secure coding — OWASP Top 10 prevention, secure-coding checklist, and language-specific BAD/GOOD patterns.

When to Use

• Implementing security controls or hardening a codebase.
• Conducting a security audit or pre-release security pass.
• Responding to or triaging a newly disclosed CVE.
• Meeting SOC 2, PCI-DSS, HIPAA, or GDPR compliance requirements.
• Wiring SAST/dependency/compliance gates into CI/CD.