Skill UI

Guides security teams through deploying Microsoft Defender for Cloud across Azure, multi-cloud, and hybrid workloads, enabling Defender plans, Secure Score tuning, cross-cloud connectors, and adaptive controls for centralized threat management.

Guides teams on hardening managed Kubernetes clusters (EKS/AKS/GKE) by enforcing Pod Security Standards, workload identity, RBAC scoping, image admission controls, network policies, and runtime security monitoring tailored to each cloud provider.

Guides teams through securing serverless compute (AWS Lambda, Azure Functions, Google Cloud Functions) by enforcing least-privilege IAM, replacing hardcoded secrets with managed stores, embedding dependency scanning in CI/CD, validating inputs, and monitoring runtimes to block injections, credential theft, and supply-chain attacks.

Design scalable, cost-effective Google Cloud architectures for startups or enterprises by gathering requirements, selecting validated patterns, estimating costs and savings, producing IaC, configuring CI/CD, and reviewing IAM plus security posture.

Handles production-grade secret infrastructure by configuring Vault clusters or cloud secret stores, designing auth methods, implementing automated rotation, and auditing access for DevOps and security teams.

Use AWS Athena to build partitioned forensic tables over CloudTrail, VPC Flow, S3 access, and ALB logs, then run compliant SQL hunts for unauthorized access, data exfiltration, lateral movement, and privilege escalation during AWS security investigations.

Provides CSPM methodology and scripts to analyze AWS/Azure/GCP IAM privileges, S3 exposure, security groups, and IaC configs before exploitation, integrating with cloud APIs, severity modifiers, and remediation guidance.

Guides integrating Firebase Cloud Storage with Flutter apps, covering setup, uploads/downloads, metadata, error handling, and security best practices for file management workflows.