Full bug hunt cycle — dispatch 4 sibling bug-hunter methodology skills in parallel, cross-validate findings, present design decisions, and…
Executes intelligent, incremental build checks and test verifications based on changed files and caching.
Audits, optimizes, and updates build and test verification configurations to ensure robust project validation.
Builds an automated malware submission and analysis pipeline that collects
Deploy and harden a Sliver C2 team server (BishopFox's Go-based adversary emulation framework) with multi-protocol listeners (mTLS…
Design identity governance and lifecycle (IGA) programs on platforms like SailPoint, Saviynt, or Entra ID Governance, covering…
Designs and documents structured incident response playbooks with step-by-step
Build collaborative forensic incident timelines using Timesketch to ingest,
Build an automated pipeline that ingests raw IOCs (URLs, IPs, domains,
Build structured communication templates for malware incidents (ransomware,
Implement a phishing report button (Microsoft 365 built-in Report button
Deploy and configure the Havoc C2 framework (teamserver, HTTPS/HTTP/SMB
Apply bottom-up and top-down role mining techniques, including clustering
Build threat actor profiles by collecting OSINT from vendor reports, paste sites, dark web forums, social media, and code repos…
Deploy MISP via Docker and configure feeds from sources like abuse.ch, AlienVault OTX, and CIRCL to aggregate, correlate, and distribute…
Implement a vulnerability aging dashboard and SLA tracking system that measures time-to-remediation against severity-based deadlines (e.g…
Deploy DefectDojo as a centralized vulnerability management dashboard that ingests findings from 200+ security scanners, deduplicates…
Build a vulnerability exception and risk acceptance tracking system covering approval workflows, compensating controls documentation, and…
Builds a structured vulnerability scanning workflow using tools like
Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and…
Discovering and accessing unprotected pages, APIs, and administrative