sethdford
- 589 skills
- 0 followers
- last month last updated
- ▌ Tech Talk Preparation · sethdfordPrepare and deliver technical talks that educate, inspire, and represent your team and company. Use for conferences, internal knowledge sharing, or building credibility.
- ▌ Cloud Architecture · sethdfordDesign cloud infrastructure for AWS, GCP, or Azure. Plan compute, storage, networking, and compliance. Use when architecting cloud systems or migrating to cloud.
- ▌ Security Architecture · sethdfordDesign security architecture covering authentication, authorization, data protection, and threat models. Use when building security-critical systems.
- ▌ Reactive Patterns · sethdfordStreams, observables, event-driven reactive systems, backpressure, and reactive programming.
- ▌ Customer Interview Guide · sethdfordDesign and conduct structured customer interviews to uncover problems, motivations, and decision-making.
- ▌
- ▌ Opportunity Scoring · sethdfordApply Gibson Biddle's Importance/Satisfaction/Market Size framework.
- ▌
- ▌ Test Environment Management · sethdfordExpert approach to test-environment-management in QA operations. Use when working with .
- ▌ Root Cause Analysis QA · sethdfordExpert approach to root-cause-analysis-qa in quality measurement. Use when working with .
- ▌ Test Metrics Framework · sethdfordExpert approach to test-metrics-framework in quality measurement. Use when working with .
- ▌ Web Security Headers · sethdfordConfigure security HTTP headers to mitigate XSS, clickjacking, MIME sniffing, and other browser-based attacks.
- ▌ Data Classification · sethdfordClassify organizational data by sensitivity level and define handling, storage, and access requirements.
- ▌ Forensic Analysis Guide · sethdfordConduct forensic analysis to determine attack vectors, scope of compromise, and evidence for legal proceedings.
- ▌ Iam Policy Design · sethdfordDesign and implement least-privilege IAM policies for cloud and on-premise environments.
- ▌ Cryptography Selection · sethdfordSelect appropriate cryptographic algorithms and parameters for encryption, hashing, key derivation, and digital signatures.
- ▌ Detection Engineering · sethdfordBuild detection engineering capabilities including threat modeling, detection hypothesis development, and hypothesis testing.
- ▌ Log Analysis Security · sethdfordAnalyze logs to investigate security incidents, identify attack patterns, and build detection rules.
- ▌ Development Workflow · sethdfordDesign development workflows that balance speed, quality, and safety. Use when establishing team processes or improving delivery efficiency.
- ▌ Estimation Techniques · sethdfordApply evidence-based estimation methods (story points, t-shirt sizing, planning poker) to reduce uncertainty. Use when sizing work for sprints or releases.
- ▌ Sprint Planning Guide · sethdfordFacilitate effective sprint planning meetings that balance team capacity, business priorities, and technical health. Use when preparing for sprint planning.
- ▌ Deployment Topology · sethdfordPlan container orchestration, load balancing, high availability, and scaling. Design deployment topologies for production systems. Use when architecting deployment infrastructure or modernizing deployment practices.
- ▌ Multi Region Design · sethdfordDistribute globally across multiple regions for low latency, compliance, and resilience. Plan data replication, failover, and latency optimization. Use when designing global systems.
- ▌ Dockerfile Best Practices · sethdfordDockerfile best practices, layer optimization, multi-stage builds, security, and image size reduction.
- ▌ Algorithm Analysis · sethdfordBig O notation, time/space complexity analysis, and choosing efficient algorithms.
- ▌ Impact Effort Matrix · sethdfordVisualize features by impact and effort to prioritize quick wins and strategic bets.
- ▌
- ▌ Bottleneck Analysis · sethdfordExpert approach to bottleneck-analysis in performance testing. Use when working with .
- ▌ Endurance Test Plan · sethdfordExpert approach to endurance-test-plan in performance testing. Use when working with .
- ▌ Release Readiness Assessment · sethdfordExpert approach to release-readiness-assessment in QA operations. Use when working with .
- ▌ Escaped Defect Analysis · sethdfordExpert approach to escaped-defect-analysis in quality measurement. Use when working with .
- ▌ Security Champion Program · sethdfordEstablish security champion program to embed security expertise across teams and improve security culture.
- ▌ Data Flow Diagram Security · sethdfordCreate and analyze DFDs (Data Flow Diagrams) with security focus, identifying data flows across trust boundaries, storage, and processing points. Use when modeling system architecture for threat analysis.
- ▌ Security Practices · sethdfordEstablish security practices that protect systems and data without paralyzing development. Use when scaling security or responding to threats.
- ▌ Hiring Interview Design · sethdfordDesign interview processes that assess actual capability, reduce bias, and provide good candidate experience. Use when building hiring practices or expanding the team.
- ▌ Decision Matrix · sethdfordUse weighted criteria matrices to systematically compare options and make defensible technical decisions. Use when evaluating competing approaches or vendors.
- ▌ Transaction Management · sethdfordACID properties, isolation levels, locks, deadlocks, and transaction design.
- ▌ Monitoring Instrumentation · sethdfordMetrics, logs, traces (observability); choosing what to measure, dashboards, and incident response.
- ▌ Functional Patterns · sethdfordHigher-order functions, composition, monads, immutability, and functional programming idioms.
- ▌ Resource Management · sethdfordRAII (Resource Acquisition Is Initialization), cleanup patterns, resource leaks, and lifetime management.
- ▌ Moscow Prioritization · sethdfordCategorize features as Must-haves, Should-haves, Could-haves, and Won't-haves.
- ▌
- ▌ Capacity Planning QA · sethdfordExpert approach to capacity-planning-qa in performance testing. Use when working with .
- ▌ Performance Baseline · sethdfordExpert approach to performance-baseline in performance testing. Use when working with .
- ▌ Penetration Test Scope · sethdfordDefine penetration test scope, objectives, and constraints to align testing with business goals and compliance requirements.
- ▌ Kubernetes Security · sethdfordSecure Kubernetes clusters through RBAC, network policies, pod security, and runtime monitoring.
- ▌ Secure Architecture Review · sethdfordReview system architecture and design for security flaws, compliance gaps, and architectural improvements.
- ▌ Security Metrics Dashboard · sethdfordCreate security metrics dashboards to track program effectiveness, trends, and KPIs for leadership reporting.
- ▌ Monitoring Strategy · sethdfordDesign monitoring and alerting that catches production issues fast without creating alert fatigue. Use when establishing observability or improving incident response.
- ▌ Data Integrity Patterns · sethdfordConstraints, triggers, audit trails, referential integrity, and data validation.
- ▌ Concurrency Patterns · sethdfordActor model, CSP (Communicating Sequential Processes), lock-free patterns, async/await.
- ▌
- ▌ Decision Table Testing · sethdfordUse decision tables to test complex business logic with multiple conditions. Use when testing rules and workflows with many input combinations.
- ▌ Content Security Policy · sethdfordDesign and deploy Content-Security-Policy (CSP) to prevent XSS attacks and unauthorized resource loading.
- ▌ Network Segmentation · sethdfordDesign and implement network segmentation to limit lateral movement and contain breaches.
- ▌ Input Validation Patterns · sethdfordDesign and implement input validation patterns (whitelisting, boundary checks, type validation) to prevent injection and buffer overflow attacks.
- ▌ Security Awareness Training · sethdfordDevelop and deliver security awareness training to build organizational security culture and reduce human risk.
- ▌ Review Culture Guide · sethdfordBuild a review culture where feedback improves code and team relationships. Use when establishing review norms and psychological safety.
- ▌ Work Breakdown Structure · sethdfordDecompose complex initiatives into manageable work items with clear ownership and milestones. Use when planning large features or multi-team projects.
- ▌ Architecture Anti Patterns · sethdfordIdentify and avoid common architectural mistakes. Recognize patterns of failure. Use when reviewing designs or learning from mistakes.
- ▌ Compliance Framework · sethdfordImplement compliance requirements (SOC2, GDPR, HIPAA). Design architecture for regulations. Map technical controls to compliance requirements. Use when building regulated systems.
- ▌ Tech Debt Assessment · sethdfordMeasure, prioritize, and address technical debt. Classify debt by impact and effort. Build paydown roadmap. Use when evaluating system health or planning refactoring.
- ▌ Architecture Decision Record · sethdfordDocument architectural decisions using ADR format. Use when making significant architectural choices that affect future development.
- ▌ Disaster Recovery Plan · sethdfordDefine recovery objectives (RTO/RPO), backup strategies, failover procedures, and testing protocols. Use when planning disaster recovery or establishing continuity practices.
- ▌
- ▌
- ▌ Boundary Value Analysis · sethdfordIdentify and test boundary values for input validation. Use when designing test cases for numeric ranges, dates, and string lengths.
- ▌ Code Review Standards · sethdford bundleEstablish clear, enforceable code review standards that balance quality with velocity, enabling asynchronous review and knowledge sharing. Use when creating or updating review expectations, scaling engineering teams, or improving code quality metrics.
- ▌ Constructive Feedback · sethdfordProvide code review feedback that improves code and team culture. Use when training reviewers or giving feedback guidelines.
- ▌ Dependency Governance · sethdfordManage and optimize system dependencies (libraries, services, data). Reduce coupling, track vulnerabilities, plan deprecation. Use when managing dependency sprawl or improving system modularity.
- ▌ Container Orchestration · sethdfordDesign Kubernetes clusters for scaling, service discovery, storage, and networking. Plan upgrades and multi-cluster strategies. Use when architecting container infrastructure.
- ▌ Maintainability Assessment · sethdfordAssess and design for maintainability. Evaluate code complexity, coupling, and testability. Use when evaluating codebase health or designing for long-term evolution.
- ▌ Screen Reader Testing · sethdfordExpert approach to screen-reader-testing in accessibility testing. Use when working with .
- ▌ Equivalence Partitioning · sethdfordPartition test input domain into equivalence classes to reduce test count. Use when testing multiple similar scenarios.
- ▌ State Transition Testing · sethdfordDesign tests from state machine models to verify correct transitions, guard conditions, and invalid state handling. Use for workflows, UI flows, protocols, and stateful components.
- ▌ Performance Test Report · sethdfordExpert approach to performance-test-report in performance testing. Use when working with .
- ▌ Security Policy Template · sethdfordDevelop organization-wide security policies covering access control, data handling, incident response, and vendor management.
- ▌ Root Cause Analysis Security · sethdfordConduct root-cause analysis (RCA) to identify underlying causes of security incidents and prevent recurrence.
- ▌ Certificate Management · sethdfordManage digital certificates for HTTPS, mutual TLS, code signing, and infrastructure security.
- ▌ Cloud Security Posture · sethdfordAssess and improve cloud infrastructure security posture through configuration review, access control, and compliance monitoring.
- ▌ Automated Review Setup · sethdfordSet up automated code review tools (linters, SAST, dependency scanning) to reduce manual review burden. Use when configuring CI/CD toolchains.
- ▌ Scope Negotiation · sethdfordNegotiate scope defensively when timelines are tight or requirements are vague. Use when facing unrealistic deadlines or unclear feature requests.
- ▌ Change Impact Analysis · sethdfordPredict impacts of architectural changes on dependent systems. Trace dependencies, assess risk, plan rollout. Use when making major changes or analyzing blast radius.
- ▌ Connection Pool Management · sethdfordPool sizing, connection lifetime, health checks, and resource exhaustion prevention.
- ▌
- ▌ Privacy Impact Assessment · sethdfordConduct Privacy Impact Assessments (PIA) to evaluate privacy risks and compliance for data processing activities.
- ▌ Zero Trust Architecture · sethdfordDesign and implement zero-trust architecture to authenticate and authorize all access, eliminating trust based on location.
- ▌ Architecture Decision Records · sethdfordCreate and maintain Architecture Decision Records (ADRs) in Confluence. Use when documenting technical decisions, architecture choices, technology selections, or when user mentions ADR, architecture decisions, technical choices, or design decisions.
- ▌ Release Notes Generator · sethdfordGenerate comprehensive release notes for Confluence from Jira issues, git commits, and pull requests. Use when preparing releases, creating changelogs, documenting version updates, or when user mentions release notes, changelog, version, or release documentation.