4. Security & Compliance

Expertly captures and analyzes network traffic using libpcap/Wireshark, with BPF filtering, protocol decoding, and statistical analysis for security investigations.

Securely generates, rotates, and manages API keys to prevent unauthorized access and maintain authentication integrity.

Scans code and dependencies for security vulnerabilities, checks against CVE databases, and provides risk assessment.

Enables secure integration of Amplitude analytics into desktop applications with built-in privacy controls for regulatory compliance.

Performs security audits on Ethereum smart contracts to identify vulnerabilities and ensure robust deployment.

Assists researchers in preparing IRB applications, developing informed consent protocols, and navigating institutional review board processes for human subjects research.

Manages corporate policy lifecycle from drafting to compliance verification, ensuring adherence to regulatory standards.

Conducts cybersecurity risk assessments for medical devices per FDA premarket and postmarket requirements, ensuring regulatory compliance and security adherence.

Automates PCI DSS compliance assessments, reporting, SAQ completion, and ASV scan orchestration for secure cardholder data handling.

Manages isolated analysis environments for malware and exploit testing, including VMs, Cuckoo Sandbox, and REMnux/FlareVM configurations.

Audits Electron IPC implementations for security vulnerabilities including contextIsolation, nodeIntegration, and preload scripts.

Deep integration with OWASP ZAP for automated security scanning, vulnerability detection, and API security testing, including CI/CD pipeline integration.

Scans dependencies for vulnerabilities, generates SBOM, and checks license compliance to ensure security and regulatory adherence.

Scans AWS infrastructure for security misconfigurations and provides hardening recommendations using Prowler, Security Hub, and AWS Config.

Executes and analyzes simulated phishing campaigns to assess and improve organizational security awareness and employee readiness against phishing attacks.

Configures Content Security Policy (CSP) to prevent XSS attacks, manage script nonces, and enable violation reporting.

Analyzes cryptographic implementations for security vulnerabilities, including encryption algorithms, key sizes, and certificate management.

Provides integration with security-focused static analysis tools to identify and report code vulnerabilities during development cycles.

Specializes in TLS/SSL configuration, certificate lifecycle management, and security analysis for secure network communications.

Manages verification and validation matrices for aerospace requirements to ensure compliance with industry safety and regulatory standards.

Provides cybersecurity engineering guidance for vehicles adhering to ISO/SAE 21434 standards.

Automates FDA 510(k) premarket notification preparation including submission packages, predicate device comparisons, and substantial equivalence arguments.

Enables secure exchange of cyber threat intelligence using STIX/TAXII standards for threat detection and response.

Automates GDPR compliance assessments including data mapping, consent management, DSAR handling, and privacy impact assessments.