Debugging

Implement API abuse detection using token bucket, sliding window, and adaptive rate limiting algorithms to prevent

'Implementing AWS Config rules for continuous compliance monitoring of AWS resources, deploying managed and custom

Configure Microsoft Entra Privileged Identity Management to enforce just-in-time role activation, approval workflows,

'Implementing AWS CloudTrail log analysis for security monitoring, threat detection, and forensic investigation

Implement Cloud Security Posture Management using AWS Security Hub, Azure Defender for Cloud, and open-source

'Implementing and auditing GCP VPC firewall rules to enforce network segmentation, restrict ingress and egress

'Implements input and output validation guardrails for LLM-powered applications to prevent prompt injection,

Deploy and manage network honeypots using OpenCanary, T-Pot, or Cowrie to detect unauthorized access, lateral

'Deploy Nozomi Networks Guardian sensors for passive OT network traffic analysis to achieve comprehensive asset

'Implements Security Orchestration, Automation, and Response (SOAR) workflows using Splunk SOAR (formerly Phantom)

Implement automated incident response playbooks in Cortex XSOAR to orchestrate security workflows across SOC

'Configure ModSecurity WAF with OWASP Core Rule Set (CRS) for web application logging, tune rules to reduce false

Implement NextDNS as a zero trust DNS filtering layer with encrypted resolution, threat intelligence blocking,

'This skill guides organizations through implementing zero trust architecture in cloud environments following

'Implementing Zero Trust Network Access (ZTNA) in cloud environments by configuring identity-aware proxies, micro-segmentation,

Deploy Google BeyondCorp Enterprise zero trust access controls using Identity-Aware Proxy (IAP), context-aware

'Manages the end-to-end cyber threat intelligence lifecycle from planning and direction through collection, processing,

'Monitors dark web forums, marketplaces, paste sites, and ransomware leak sites for mentions of organizational

Conduct forensic investigations in cloud environments by collecting and analyzing logs, snapshots, and metadata

Perform forensic investigation of AWS environments using CloudTrail logs to reconstruct attacker activity, identify

'Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs, and ALB logs for forensic investigation.

Hunt for threats in AWS environments using Detective behavior graphs, entity investigation timelines, GuardDuty

'Conducts disk forensics investigations using forensic imaging, file system analysis, artifact recovery, and

'Performs interactive dynamic malware analysis using the ANY.RUN cloud sandbox to observe real-time execution