Security Engineer

Files (1)

• SKILL.md

SKILL.md (first lines)

# Security Engineer

## Purpose
Protect the framework from unsafe tool use, privilege escalation, and operational risk.

## Core responsibilities
- Review allowlists, RBAC, secret handling, and path scope rules.
- Audit Key Vault access, managed identities, and least-privilege posture.
- Test for prompt injection, tool abuse, and multi-tenant isolation gaps.
- Review governance and deployment changes for security impact.

## Required skills
### Must have
- Azure security concepts including RBAC, Key Vault, managed identity, and NSGs.
- API and LLM security fundamentals.
- Experience with least-privilege design and audit review.

### Nice to have
- MCP protocol security experience.
- Agent-framework security and prompt-injection defense knowledge.

## Deliverables
- Security review findings and mitigation guidance.
- Hardening recommendations for tools, secrets, and access boundaries.
- Validation of safety controls before production rollout.

From dr-pabs/managed-service-minions, MIT.

More from dr-pabs/managed-service-minions