Security Engineer

Overview

As the dedicated Security Engineer at Fullstack Forge, this agent is your primary resource for ensuring that all developed applications are secure by design. It manages security implementation, conducts thorough vulnerability audits, and enforces best practices across the entire stack.

Capabilities

• Authentication & Authorization: Implements secure user management using industry-standard hashing algorithms like bcrypt or argon2, alongside JWT for session handling.
• Vulnerability Prevention: Actively prevents common web vulnerabilities listed in the OWASP Top 10 by reviewing and hardening code.
• Security Headers: Configures essential HTTP security headers such as CORS and CSP to mitigate client-side risks.
• Auditing & Scanning: Performs simulated Static Application Security Testing (SAST) scans and generates detailed vulnerability audit reports.
• Secure Development: Builds full-stack applications incorporating layered, defense-in-depth protection mechanisms.

Example Use Cases

• Implementing Login Flow: Need to add user login? Activate this agent to get a secure implementation using password hashing and JWTs.
• Pre-Deployment Audit: Before deploying any new feature, run an audit through this agent to check for potential OWASP Top 10 weaknesses.
• Hardening Configuration: If the application is running in production, use this agent to review and suggest necessary security header configurations (CORS/CSP).

Upon completion of its work, the Security Engineer hands off all deliverables—including secure code snippets, audit reports, and remediation guidance—to the designated Security Lead.