II.
Role overview
Reference · liverole:security-engineer
Security Engineer overview
Protects the organization's systems and data by embedding security practices throughout the software development lifecycle. Conducts threat modeling, security reviews, and penetration tests; builds security automation into CI/CD pipelines; and responds to security incidents. Educates engineering teams on secure coding practices and drives remediation of identified vulnerabilities.
Attributes
displayName
Security Engineer
isAgentic
false
automatability
0.7
description
Protects the organization's systems and data by embedding security practices
throughout the software development lifecycle. Conducts threat modeling, security
reviews, and penetration tests; builds security automation into CI/CD pipelines;
and responds to security incidents. Educates engineering teams on secure coding
practices and drives remediation of identified vulnerabilities.
seniority
senior
Outgoing edges
holds_responsibility5
- responsibility:security-audit·Responsibility
- responsibility:access-control·Responsibility
- responsibility:incident-response·Responsibility
- responsibility:risk-assessment·ResponsibilityRisk Assessment
- responsibility:compliance-monitoring·ResponsibilityCompliance Monitoring
requires_expertise7
- skill-area:threat-modeling·SkillAreaThreat Modeling
- skill-area:sast·SkillAreaStatic Application Security Testing (SAST)
- skill-area:dast·SkillAreaDynamic Application Security Testing (DAST)
- skill-area:secret-scanning·SkillAreaSecret Scanning
- skill-area:supply-chain-security·SkillAreaSoftware Supply Chain Security
- skill-area:identity-security·SkillAreaIdentity & Access Security
- skill-area:network-security·SkillAreaNetwork Security
requires_skill4
- domain:security·DomainSecurity
- domain:cybersecurity·DomainCybersecurity
- specialization:security-research·Specialization
- specialization:cryptography-blockchain·Specialization
Incoming edges
escalates_to1
- human-checkpoint:dangerous-tool-approval·HumanCheckpointDangerous-tool approval
has_member2
- org-unit:application-security-team·OrgUnitApplication Security Team
- org-unit:security-team·OrgUnitSecurity Team
held_by10
- responsibility:vendor-evaluation·ResponsibilityVendor Evaluation
- responsibility:dependency-security·ResponsibilityDependency security
- responsibility:supply-chain-integrity·ResponsibilitySoftware supply chain integrity
- responsibility:zero-day-response·ResponsibilityZero-day response
- responsibility:soc2-compliance·ResponsibilitySOC 2 compliance
- responsibility:pci-compliance·ResponsibilityPCI DSS compliance
- responsibility:hipaa-compliance·ResponsibilityHIPAA compliance
- responsibility:secret-rotation-cadence·ResponsibilitySecret rotation cadence
- responsibility:security-review·ResponsibilitySecurity review
- responsibility:threat-modeling·ResponsibilityThreat modeling
involves_role15
- workflow:dependency-update·WorkflowDependency Update
- workflow:compliance-audit·WorkflowCompliance Audit
- workflow:vendor-evaluation·WorkflowVendor Evaluation
- workflow:vulnerability-management·WorkflowVulnerability Management Workflow
- workflow:access-review·WorkflowAccess Review
- workflow:security-audit·WorkflowSecurity Audit
- workflow:penetration-testing-cycle·WorkflowPenetration Testing Cycle
- workflow:firmware-release-cycle·WorkflowFirmware Release Cycle
- workflow:desktop-app-release·WorkflowDesktop App Release
- workflow:protocol-implementation-review·WorkflowProtocol Implementation Review
- workflow:crypto-protocol-review·WorkflowCryptographic Protocol Review
- workflow:cve-triage·WorkflowCVE Triage
- workflow:penetration-testing·WorkflowPenetration Testing Engagement
- workflow:vendor-evaluation-extended·WorkflowVendor Evaluation (Extended)
- workflow:artifact-signing-and-provenance·WorkflowArtifact Signing and Provenance
lib_involves_role178
- lib-agent:code-migration-modernization--authentication-migration-agent·LibraryAgentauthentication-migration-agent
- lib-agent:code-migration-modernization--compliance-migration-agent·LibraryAgentcompliance-migration-agent
- lib-agent:code-migration-modernization--security-vulnerability-assessor·LibraryAgentsecurity-vulnerability-assessor
- lib-agent:cryptography-blockchain--bridge-architect·LibraryAgentbridge-architect
- lib-agent:cryptography-blockchain--crypto-engineer·LibraryAgentcrypto-engineer
- lib-agent:cryptography-blockchain--formal-methods·LibraryAgentformal-methods
- lib-agent:cryptography-blockchain--incident-response·LibraryAgentincident-response
- lib-agent:cryptography-blockchain--solidity-auditor·LibraryAgentsolidity-auditor
- lib-agent:cryptography-blockchain--token-standards·LibraryAgenttoken-standards
- lib-agent:cryptography-blockchain--zk-cryptographer·LibraryAgentzk-cryptographer
- lib-agent:devops-sre-platform--secops-expert·LibraryAgentsecops-expert
- lib-agent:biomedical-engineering--cybersecurity-specialist·LibraryAgentcybersecurity-specialist
- lib-agent:quantum-computing--pqc-analyst·LibraryAgentpqc-analyst
- lib-agent:qa-testing-automation--security-testing-expert·LibraryAgentsecurity-testing-expert
- lib-agent:security-compliance--forensic-analysis-agent·LibraryAgentforensic-analysis-agent
- lib-agent:security-compliance--incident-triage-agent·LibraryAgentincident-triage-agent
- lib-agent:security-compliance--patch-management-agent·LibraryAgentpatch-management-agent
- lib-agent:security-compliance--remediation-guidance-agent·LibraryAgentremediation-guidance-agent
- lib-agent:security-compliance--risk-scoring-agent·LibraryAgentrisk-scoring-agent
- lib-agent:security-compliance--secure-code-reviewer-agent·LibraryAgentsecure-code-reviewer-agent
- lib-agent:security-compliance--security-architecture-reviewer-agent·LibraryAgentsecurity-architecture-reviewer-agent
- lib-agent:security-compliance--security-requirements-agent·LibraryAgentsecurity-requirements-agent
- lib-agent:security-compliance--threat-intelligence-agent·LibraryAgentthreat-intelligence-agent
- lib-agent:security-compliance--threat-modeling-agent·LibraryAgentthreat-modeling-agent
- lib-agent:security-compliance--trojan-detection-agent·LibraryAgenttrojan-detection-agent
- lib-agent:security-compliance--vulnerability-triage-agent·LibraryAgentvulnerability-triage-agent
- lib-agent:security-research--cloud-security-researcher·LibraryAgentcloud-security-researcher
- lib-agent:security-research--ctf-creator·LibraryAgentCTF Challenge Creator Agent
- lib-agent:security-research--exploit-developer·LibraryAgentExploit Developer Agent
- lib-agent:security-research--fuzzing-engineer·LibraryAgentfuzzing-engineer
- lib-agent:security-research--hardware-security-researcher·LibraryAgenthardware-security-researcher
- lib-agent:security-research--malware-analyst·LibraryAgentMalware Analyst Agent
- lib-agent:security-research--mobile-researcher·LibraryAgentMobile Security Researcher Agent
- lib-agent:security-research--purple-team-coordinator·LibraryAgentPurple Team Coordinator Agent
- lib-agent:security-research--red-team-operator·LibraryAgentRed Team Operator Agent
- lib-agent:security-research--reverse-engineer·LibraryAgentReverse Engineer Agent
- lib-agent:security-research--security-report-writer·LibraryAgentSecurity Report Writer Agent
- lib-agent:security-research--smart-contract-auditor·LibraryAgentSmart Contract Auditor Agent
- lib-agent:security-research--threat-intel-analyst·LibraryAgentThreat Intelligence Analyst Agent
- lib-agent:security-research--vuln-researcher·LibraryAgentVulnerability Researcher Agent
- lib-agent:security-research--web-security-researcher·LibraryAgentWeb Security Researcher Agent
- lib-agent:software-architecture--compliance-auditor·LibraryAgentcompliance-auditor
- lib-agent:software-architecture--security-architect·LibraryAgentsecurity-architect
- lib-agent:software-architecture--threat-modeler·LibraryAgentthreat-modeler
- lib-agent:web-development--auth-specialist·LibraryAgentauth-specialist
- lib-agent:web-development--dependency-audit·LibraryAgentdependency-audit
- lib-agent:web-development--security-auditor·LibraryAgentsecurity-auditor
- lib-agent:web-development--security-hardening·LibraryAgentsecurity-hardening
- lib-process:collaboration--pr-lifecycle-security·LibraryProcessspecializations/collaboration/github/pr-lifecycle-security
- lib-process:cryptography-blockchain--amm-pool-development·LibraryProcessspecializations/cryptography-blockchain/amm-pool-development
- lib-process:cryptography-blockchain--blockchain-indexer-development·LibraryProcessspecializations/cryptography-blockchain/blockchain-indexer-development
- lib-process:cryptography-blockchain--blockchain-node-setup·LibraryProcessspecializations/cryptography-blockchain/blockchain-node-setup
- lib-process:cryptography-blockchain--bug-bounty-program·LibraryProcessspecializations/cryptography-blockchain/bug-bounty-program
- lib-process:cryptography-blockchain--cross-chain-bridge·LibraryProcessspecializations/cryptography-blockchain/cross-chain-bridge
- lib-process:cryptography-blockchain--cryptographic-protocol-implementation·LibraryProcessspecializations/cryptography-blockchain/cryptographic-protocol-implementation
- lib-process:cryptography-blockchain--dapp-frontend-development·LibraryProcessspecializations/cryptography-blockchain/dapp-frontend-development
- lib-process:cryptography-blockchain--economic-simulation·LibraryProcessspecializations/cryptography-blockchain/economic-simulation
- lib-process:cryptography-blockchain--erc1155-multi-token·LibraryProcessspecializations/cryptography-blockchain/erc1155-multi-token
- lib-process:cryptography-blockchain--erc20-token-implementation·LibraryProcessspecializations/cryptography-blockchain/erc20-token-implementation
- lib-process:cryptography-blockchain--erc4626-tokenized-vault·LibraryProcessspecializations/cryptography-blockchain/erc4626-tokenized-vault
- lib-process:cryptography-blockchain--erc721-nft-collection·LibraryProcessspecializations/cryptography-blockchain/erc721-nft-collection
- lib-process:cryptography-blockchain--formal-verification·LibraryProcessspecializations/cryptography-blockchain/formal-verification
- lib-process:cryptography-blockchain--gas-optimization·LibraryProcessspecializations/cryptography-blockchain/gas-optimization
- lib-process:cryptography-blockchain--governance-system·LibraryProcessspecializations/cryptography-blockchain/governance-system
- lib-process:cryptography-blockchain--hd-wallet-implementation·LibraryProcessspecializations/cryptography-blockchain/hd-wallet-implementation
- lib-process:cryptography-blockchain--incident-response-exploits·LibraryProcessspecializations/cryptography-blockchain/incident-response-exploits
- lib-process:cryptography-blockchain--invariant-testing·LibraryProcessspecializations/cryptography-blockchain/invariant-testing
- lib-process:cryptography-blockchain--lending-protocol·LibraryProcessspecializations/cryptography-blockchain/lending-protocol
- lib-process:cryptography-blockchain--multi-signature-wallet·LibraryProcessspecializations/cryptography-blockchain/multi-signature-wallet
- lib-process:cryptography-blockchain--privacy-token-implementation·LibraryProcessspecializations/cryptography-blockchain/privacy-token-implementation
- lib-process:cryptography-blockchain--smart-contract-development-lifecycle·LibraryProcessspecializations/cryptography-blockchain/smart-contract-development-lifecycle
- lib-process:cryptography-blockchain--smart-contract-fuzzing·LibraryProcessspecializations/cryptography-blockchain/smart-contract-fuzzing
- lib-process:cryptography-blockchain--smart-contract-security-audit·LibraryProcessspecializations/cryptography-blockchain/smart-contract-security-audit
- lib-process:cryptography-blockchain--smart-contract-upgrade·LibraryProcessspecializations/cryptography-blockchain/smart-contract-upgrade
- lib-process:cryptography-blockchain--staking-contract·LibraryProcessspecializations/cryptography-blockchain/staking-contract
- lib-process:cryptography-blockchain--subgraph-development·LibraryProcessspecializations/cryptography-blockchain/subgraph-development
- lib-process:cryptography-blockchain--threshold-signature-scheme·LibraryProcessspecializations/cryptography-blockchain/threshold-signature-scheme
- lib-process:cryptography-blockchain--validator-node-operation·LibraryProcessspecializations/cryptography-blockchain/validator-node-operation
- lib-process:cryptography-blockchain--yield-aggregator·LibraryProcessspecializations/cryptography-blockchain/yield-aggregator
- lib-process:cryptography-blockchain--zk-circuit-development·LibraryProcessspecializations/cryptography-blockchain/zk-circuit-development
- lib-process:cryptography-blockchain--zk-rollup-development·LibraryProcessspecializations/cryptography-blockchain/zk-rollup-development
- lib-process:cryptography-blockchain--zk-snark-application·LibraryProcessspecializations/cryptography-blockchain/zk-snark-application
- lib-process:devops-sre-platform--secrets-management·LibraryProcessspecializations/devops-sre-platform/secrets-management
- lib-process:devops-sre-platform--security-scanning·LibraryProcessspecializations/devops-sre-platform/security-scanning
- lib-process:qa-testing-automation--security-testing·LibraryProcessspecializations/qa-testing-automation/security-testing
- lib-process:security-compliance--codebase-security-audit·LibraryProcessspecializations/security-compliance/codebase-security-audit
- lib-process:security-compliance--gdpr-compliance·LibraryProcessspecializations/security-compliance/gdpr-compliance
- lib-process:security-compliance--hipaa-compliance·LibraryProcesssecurity-compliance/hipaa-compliance
- lib-process:security-compliance--iac-security-review·LibraryProcessspecializations/security-compliance/iac-security-review
- lib-process:security-compliance--pci-dss-compliance·LibraryProcessspecializations/security-compliance/pci-dss-compliance
- lib-process:security-compliance--security-logging-monitoring·LibraryProcesssecurity-compliance/security-logging-monitoring
- lib-process:security-compliance--security-policies·LibraryProcessspecializations/security-compliance/security-policies
- lib-process:security-compliance--security-training·LibraryProcesssecurity-compliance/security-training
- lib-process:security-compliance--soc2-compliance·LibraryProcessspecializations/security-compliance/soc2-compliance
- lib-process:software-architecture--security-architecture-review·LibraryProcessspecializations/software-architecture/security-architecture-review
- lib-process:web-development--content-security-policy·LibraryProcessspecializations/web-development/content-security-policy
- lib-process:web-development--jwt-authentication·LibraryProcessspecializations/web-development/jwt-authentication
- lib-process:web-development--mfa-implementation·LibraryProcessspecializations/web-development/mfa-implementation
- lib-process:web-development--owasp-security-audit·LibraryProcessspecializations/web-development/owasp-security-audit
- lib-process:web-development--rbac-implementation·LibraryProcessspecializations/web-development/rbac-implementation
- lib-process:web-development--secrets-management·LibraryProcessspecializations/web-development/secrets-management
- lib-skill:code-migration-modernization--authentication-migrator·LibrarySkillauthentication-migrator
- lib-skill:code-migration-modernization--compliance-validator·LibrarySkillcompliance-validator
- lib-skill:code-migration-modernization--dependency-scanner·LibrarySkilldependency-scanner
- lib-skill:code-migration-modernization--static-code-analyzer·LibrarySkillstatic-code-analyzer
- lib-skill:code-migration-modernization--vulnerability-scanner·LibrarySkillvulnerability-scanner
- lib-skill:cryptography-blockchain--bug-bounty·LibrarySkillbug-bounty
- lib-skill:cryptography-blockchain--certora-prover·LibrarySkillcertora-prover
- lib-skill:cryptography-blockchain--chain-forensics·LibrarySkillchain-forensics
- lib-skill:cryptography-blockchain--cross-chain·LibrarySkillcross-chain
- lib-skill:cryptography-blockchain--crypto-primitives·LibrarySkillcrypto-primitives
- lib-skill:cryptography-blockchain--defi-protocols·LibrarySkilldefi-protocols
- lib-skill:cryptography-blockchain--echidna-fuzzer·LibrarySkillechidna-fuzzer
- lib-skill:cryptography-blockchain--evm-analysis·LibrarySkillevm-analysis
- lib-skill:cryptography-blockchain--foundry-framework·LibrarySkillfoundry-framework
- lib-skill:cryptography-blockchain--gas-optimization·LibrarySkillgas-optimization
- lib-skill:cryptography-blockchain--hardhat-framework·LibrarySkillhardhat-framework
- lib-skill:cryptography-blockchain--mythril-symbolic·LibrarySkillmythril-symbolic
- lib-skill:cryptography-blockchain--openzeppelin·LibrarySkillopenzeppelin
- lib-skill:cryptography-blockchain--slither-analysis·LibrarySkillslither-analysis
- lib-skill:cryptography-blockchain--solidity-dev·LibrarySkillsolidity-dev
- lib-skill:cryptography-blockchain--wallet-integration·LibrarySkillwallet-integration
- lib-skill:cryptography-blockchain--zk-circuits·LibrarySkillzk-circuits
- lib-skill:devops-sre-platform--secrets-management·LibrarySkillsecrets-management
- lib-skill:biomedical-engineering--cybersecurity-risk-assessor·LibrarySkillcybersecurity-risk-assessor
- lib-skill:quantum-computing--pqc-evaluator·LibrarySkillpqc-evaluator
- lib-skill:game-development--anti-cheat·LibrarySkillanti-cheat
- lib-skill:qa-testing-automation--owasp-zap-security·LibrarySkillowasp-zap-security
- lib-skill:security-compliance--aws-security-scanner·LibrarySkillaws-security-scanner
- lib-skill:security-compliance--azure-security-scanner·LibrarySkillazure-security-scanner
- lib-skill:security-compliance--container-security-scanner·LibrarySkillcontainer-security-scanner
- lib-skill:security-compliance--crypto-analyzer·LibrarySkillcrypto-analyzer
- lib-skill:security-compliance--dast-scanner·LibrarySkilldast-scanner
- lib-skill:security-compliance--dependency-scanner·LibrarySkilldependency-scanner
- lib-skill:security-compliance--gcp-security-scanner·LibrarySkillgcp-security-scanner
- lib-skill:security-compliance--git-forensics-scanner·LibrarySkillgit-forensics-scanner
- lib-skill:security-compliance--homoglyph-detector·LibrarySkillhomoglyph-detector
- lib-skill:security-compliance--iac-security-scanner·LibrarySkilliac-security-scanner
- lib-skill:security-compliance--key-management-orchestrator·LibrarySkillkey-management-orchestrator
- lib-skill:security-compliance--multi-cloud-security-posture·LibrarySkillmulti-cloud-security-posture
- lib-skill:security-compliance--owasp-security-scanner·LibrarySkillowasp-security-scanner
- lib-skill:security-compliance--pci-dss-compliance-automator·LibrarySkillpci-dss-compliance-automator
- lib-skill:security-compliance--phishing-simulation-skill·LibrarySkillphishing-simulation-skill
- lib-skill:security-compliance--sast-analyzer·LibrarySkillsast-analyzer
- lib-skill:security-compliance--secret-detection-scanner·LibrarySkillsecret-detection-scanner
- lib-skill:security-compliance--secure-coding-training-skill·LibrarySkillsecure-coding-training-skill
- lib-skill:security-compliance--semantic-code-analyzer·LibrarySkillsemantic-code-analyzer
- lib-skill:security-compliance--soc2-compliance-automator·LibrarySkillsoc2-compliance-automator
- lib-skill:security-compliance--vendor-risk-monitor·LibrarySkillvendor-risk-monitor
- lib-skill:security-compliance--vendor-security-questionnaire·LibrarySkillvendor-security-questionnaire
- lib-skill:security-research--aiml-security·LibrarySkillaiml-security
- lib-skill:security-research--binary-exploitation·LibrarySkillBinary Exploitation Skill
- lib-skill:security-research--burp-websec·LibrarySkillBurp Suite/Web Security Skill
- lib-skill:security-research--cloud-security-testing·LibrarySkillcloud-security-testing
- lib-skill:security-research--cve-cwe-db·LibrarySkillCVE/CWE Database Skill
- lib-skill:security-research--debugger-integration·LibrarySkillDebugger Integration Skill
- lib-skill:security-research--fuzzing-ops·LibrarySkillFuzzing Operations Skill
- lib-skill:security-research--ghidra-ida-re·LibrarySkillGhidra/IDA Reverse Engineering Skill
- lib-skill:security-research--hardware-security·LibrarySkillhardware-security
- lib-skill:security-research--incident-forensics·LibrarySkillincident-forensics
- lib-skill:security-research--mitre-attack·LibrarySkillMITRE ATT&CK Skill
- lib-skill:security-research--mobile-security·LibrarySkillMobile Security Testing Skill
- lib-skill:security-research--offensive-security·LibrarySkillOffensive Security Skill
- lib-skill:security-research--protocol-analysis·LibrarySkillNetwork Protocol Analysis Skill
- lib-skill:security-research--pwntools-exploit·LibrarySkillPwntools Exploitation Skill
- lib-skill:security-research--security-sandbox·LibrarySkillsecurity-sandbox
- lib-skill:security-research--smart-contract-analysis·LibrarySkillSmart Contract Analysis Skill
- lib-skill:security-research--static-analysis-tools·LibrarySkillStatic Analysis Tools Skill
- lib-skill:security-research--stix-taxii·LibrarySkillSTIX/TAXII Intelligence Skill
- lib-skill:security-research--yara-rules·LibrarySkillYARA Rules Skill
- lib-skill:software-architecture--compliance-checker·LibrarySkillcompliance-checker
- lib-skill:software-architecture--security-scanner·LibrarySkillsecurity-scanner
- lib-skill:software-architecture--threat-modeler·LibrarySkillthreat-modeler
- lib-skill:web-development--csp·LibrarySkillcsp
- lib-skill:web-development--jwt·LibrarySkilljwt
- lib-skill:web-development--oauth·LibrarySkilloauth
- lib-skill:web-development--secrets-management·LibrarySkillsecrets-management
- lib-skill:web-development--web-security·LibrarySkillweb-security
used_by_role15
- stack-profile:security-operations·StackProfileSecurity Operations Stack (Trivy, Falco, OPA, Vault, Snyk)
- stack-profile:blockchain-dapp·StackProfileBlockchain DApp (Solidity + Hardhat + ethers.js + React + IPFS)
- stack-profile:healthcare-hipaa-compliant·StackProfileHealthcare / HIPAA Compliant (Node.js + PostgreSQL + Vault + React)
- stack-profile:fintech-payments-platform·StackProfileFintech / Payments Platform Stack (Go, PostgreSQL, Redis, Kafka, Vault, gRPC)
- stack-profile:auth-identity-platform·StackProfileAuth & Identity Platform Stack (Node.js, Keycloak, PostgreSQL, Redis, OAuth2, Docker)
- stack-profile:ai-safety-guardrails·StackProfileAI Safety / Guardrails Stack (Python, OPA, FastAPI, Redis, Prometheus)
- stack-profile:terraform-landing-zone·StackProfileTerraform Landing Zone (Terraform, HCL, Vault, Go, OPA)
- stack-profile:service-mesh·StackProfileService Mesh (Istio, Kubernetes, Prometheus, Grafana, OpenTelemetry)
- stack-profile:container-registry-scanning·StackProfileContainer Registry & Scanning (Docker, Trivy, Kubernetes, Go, Snyk)
- stack-profile:secrets-management·StackProfileSecrets Management (Vault, Kubernetes, Terraform, Docker, Go)
- stack-profile:government-portal·StackProfileGovernment Portal (.NET, Blazor, PostgreSQL, Keycloak, Docker, Azure)
- stack-profile:compliance-audit-trail·StackProfileCompliance & Audit Trail (Go, PostgreSQL, RabbitMQ, Vault, Elasticsearch, Prometheus)
- stack-profile:siem-platform·StackProfileSIEM Platform (Elasticsearch, Python, RabbitMQ, Redis, React, PostgreSQL)
- stack-profile:vulnerability-management-platform·StackProfileVulnerability Management (Python, Trivy, Snyk, PostgreSQL, React, Docker)
- stack-profile:identity-governance·StackProfileIdentity Governance (Keycloak, PostgreSQL, React, Go, Docker)