Senior SecOps Engineer
Senior SecOps Engineer is a comprehensive security operations skill that scans source code for vulnerabilities, assesses dependencies for known CVEs, verifies compliance against SOC2, PCI-DSS, HIPAA, and GDPR, and provides workflows for security audits, CI/CD gates, CVE triage, and incident response. It produces security reports, remediation plans, and compliance checklists.
✨ What it does
- Runs SAST scans for hardcoded secrets, SQL injection, XSS, command injection, and path traversal.
- Assesses dependencies for known CVEs across npm, Python, and Go ecosystems.
- Checks compliance against SOC2, PCI-DSS, HIPAA, and GDPR frameworks.
- Generates CVE remediation plans with severity-based prioritization.
- Provides secure coding checklists and best practices for secrets, SQL, XSS, and authentication.
- Includes workflows for security audits, CI/CD security gates, CVE triage, and incident response.
🎯 When to use it
- Conducting a security audit or review of a codebase.
- Responding to a CVE or security incident.
- Hardening infrastructure or implementing authentication and secrets management.
- Preparing for penetration testing or checking OWASP Top 10 exposure.
- Enforcing security controls in CI/CD pipelines.
🚀 How to use
Trigger the skill by asking for a security review, vulnerability assessment, compliance check, or CVE remediation. Provide the path to the project directory. The skill runs Python scripts (security_scanner.py, vulnerability_assessor.py, compliance_checker.py) with options for severity filtering and JSON output. Example prompts:
Run a security audit on /path/to/project
Check compliance with SOC2 for /path/to/project
Assess vulnerabilities in /path/to/project
📄 Output: Security reports (JSON or text) detailing vulnerabilities, CVEs, compliance gaps, and remediation steps.
📦 Add this skill to Claude Code
# 1. Get the skills repo
git clone --depth 1 https://github.com/alirezarezvani/claude-skills /tmp/claude-skills
# 2. Copy this skill into your project (or ~/.claude/skills for all projects)
mkdir -p .claude/skills
cp -r /tmp/claude-skills/engineering-team/skills/senior-secops .claude/skills/senior-secopsSkill source: engineering-team/skills/senior-secops/SKILL.md
⚠️ Good to know
Requires Python environment and the skill's scripts to be present; does not perform dynamic analysis or penetration testing (hand off to security-pen-testing skill for deep OWASP coverage).
❓ FAQ
What exit codes does the security scanner return?
Exit code 0 means no critical/high findings, 1 means high severity findings, and 2 means critical severity findings.
Which compliance frameworks are supported?
SOC2, PCI-DSS, HIPAA, and GDPR are supported, and you can check all frameworks at once with --framework all.
What does the compliance checker verify?
It verifies access control, encryption at rest and in transit, audit logging, authentication strength, security documentation, and CI/CD security controls.
🤖 Overview, features, install steps and FAQ were generated from the project's SKILL.md on Sep 4, 2026. Always check the original source before running commands.