Browse QA Skills

Content Security Policy testing and validation to prevent XSS attacks, data injection, and clickjacking through proper CSP header configuration.

Testing HIPAA compliance for healthcare applications including PHI handling, audit logging, access controls, and data encryption verification.

Writing and testing YARA rules for malware detection, threat hunting, and file classification with rule validation and false-positive rate testing.

Perform language and framework specific security best-practice reviews, vulnerability detection, and secure-by-default coding guidance for Python, JavaScript/TypeScript, and Go applications.

Smart contract testing with Hardhat, Foundry, and Brownie including unit tests, gas optimization, reentrancy checks, and fork testing.

Testing SOC 2 compliance controls including security monitoring, change management, access reviews, and incident response procedures.

Analyze git repositories to build security ownership topology, compute bus factor for sensitive code, detect orphaned security-critical files, and export ownership graphs for visualization.