mahipal

This skill covers implementing automated security scanning for Infrastructure as Code (IaC) templates using

This skill covers implementing North American Electric Reliability Corporation Critical Infrastructure Protection

This skill covers hardening managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards,

This skill covers deploying anomaly detection systems for industrial control environments using machine learning

This skill details how to conduct cloud security audits using Center for Internet Security benchmarks for AWS,

This skill covers analyzing Programmable Logic Controller (PLC) firmware for security vulnerabilities including

The NIST Cybersecurity Framework (CSF) 2.0, released in February 2024, provides a comprehensive taxonomy for managing cybersecurity risk through six core Functions - Govern,…

This skill covers implementing secure remote access to OT/ICS environments for operators, engineers, and vendors

This skill covers hardening and securing process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA

This skill covers deploying and tuning Web Application Firewall rules on AWS WAF, Azure WAF, and Cloudflare

This skill covers security hardening for serverless compute platforms including AWS Lambda, Azure Functions,

Implement SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end

This skill covers conducting cybersecurity assessments specific to oil and gas facilities including upstream

This skill covers implementing code signing for build artifacts to ensure integrity and authenticity throughout

This skill instructs security practitioners on deploying Microsoft Defender for Cloud as a cloud-native application

ISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS).

This skill guides organizations through implementing zero trust architecture in cloud environments following

This skill covers performing vulnerability assessments in OT environments using the Claroty xDome platform for

This skill covers detecting sophisticated cyber-physical attacks that follow the Stuxnet attack pattern of modifying

This skill covers detecting anomalies in Modbus/TCP and Modbus RTU communications in industrial control systems.

This skill covers detecting cyber attacks targeting Supervisory Control and Data Acquisition (SCADA) systems

This skill provides step-by-step procedures for identifying and remediating Amazon S3 bucket misconfigurations

This skill covers implementing a structured patch management program for OT/ICS environments where traditional

This skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub

This skill covers deploying AWS Security Hub as a centralized cloud security posture management platform that

This skill teaches security teams how to deploy and operationalize Amazon GuardDuty for continuous threat detection

This skill covers integrating Aqua Security''s Trivy scanner into CI/CD pipelines for comprehensive container

This skill covers implementing Open Policy Agent (OPA) and Gatekeeper for policy-as-code enforcement in Kubernetes

This skill covers designing and implementing security zones and conduits for industrial automation and control

This skill covers integrating OWASP ZAP (Zed Attack Proxy) for Dynamic Application Security Testing in CI/CD

This skill covers implementing Gitleaks for detecting and preventing hardcoded secrets in git repositories.

This skill covers implementing network segmentation in Operational Technology environments using VLANs, industrial

This skill covers implementing Software Composition Analysis (SCA) using Snyk to detect vulnerable open-source

This skill covers conducting cybersecurity assessments of electric power grid infrastructure including generation

This skill covers deploying HashiCorp Vault for centralized secrets management across cloud environments, including

This skill covers hardening GitHub Actions workflows against supply chain attacks, credential theft, and privilege