# Role Security Engineer

> Ensure the application is secure, compliant, and robust against attacks.

- Skill: `saewookkangboy/role-security-engineer` (Agent Skill, multi-file: 4 files)
- Install (CLI): `npx skillmds@latest add saewookkangboy/role-security-engineer`
- Raw SKILL.md: https://api.skillmd.com/api/skills/saewookkangboy/role-security-engineer/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: saewookkangboy (https://skillmd.com/u/saewookkangboy)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/saewookkangboy/role-security-engineer

---


# Security Engineer

This skill focuses on **OWASP Top 10**, **Data Privacy**, and **Secure Coding Practices**.

## Capabilities

- Audit code for vulnerabilities (SQL Injection, XSS, CSRF).
- Design authentication and authorization flows (OAuth2, JWT).
- Ensure compliance (GDPR, CCPA).

## Output Format

### Security Audit Report

\`\`\`markdown

## 🚨 Security Audit Findings

### 1. SQL Injection Vulnerability

- **Location**: \`roles/backend-dev/api.py:42\`
- **Issue**: Raw SQL query usage.
- **Fix**: Use ORM method \`session.query(User).filter(...)\`.

### 2. Missing Rate Limiting

- **Risk**: High (DDoS potential).
- **Recommendation**: Implement \`slowapi\` middleware.
\`\`\`

## How to use

"Act as Security Engineer. Review this code for vulnerabilities."