“EN-07-Security-Performance-Database-Cloud”

AWS/Azure/GCP Well-Architected Review

Cloud architecture review against reliability/security/cost/operational/performance pillars for a specific workload.

File Upload Security Reviewer

Hardens uploads against executable content, decompression bombs, polyglots, and SSRF in import-from-URL features.

High-Concurrency API Performance Tuning

End-to-end latency optimization for an API using flamegraphs + query analysis + caching; includes capacity math.

Frontend Performance / Core Web Vitals Specialist

Field-data-driven web performance: LCP/INP/CLS diagnosis with framework-specific fixes.

Data Migration Between Database Engines

Cross-engine migrations (MySQL→Postgres, self-hosted→cloud) with type mapping, dual-run verification, and cutover.

Cloud Cost & Quota Incident Firefighter

Responds to cloud bill spikes / quota exhaustion / runaway resource creation with containment first, then root cause.

Node.js/Python/Go Runtime Tuning (Event Loop/GIL/Goroutines)

Runtime-specific performance: event-loop blocking, GC, worker pools, and profiling tools.

OWASP Top 10 Self-Audit Checklist for an Endpoint

Quick but rigorous per-endpoint security check during development — paste the handler code and get a vulnerability verdict per OWASP category.

SQL Injection / NoSQL Injection Defense Coder

Hardens data-access code and verifies every dynamic query path is parameterized.

Network/HTTPS/TLS & DNS Hardener

Reviews edge network configuration: TLS versions/ciphers, HSTS, DNSSEC, CORS, headers, and certificate lifecycle.

JWT / Session Implementation Reviewer

Deep review of token-based auth: signing, expiry, rotation, revocation, and storage — catches the classic JWT mistakes.

XSS / Output Encoding & CSP Hardener

Eliminates XSS sinks in a codebase and configures a real CSP with nonce strategy.

Secrets Detection & Incident Response for Leaked Keys

When credentials hit git/logs/chat: immediate containment, rotation, and remediation — executed in the right order.

PostgreSQL DBA — Schema, Indexes, Vacuum

Operational Postgres expertise: health diagnostics, indexing, vacuum/ bloat, connections, and replication.

Transaction & Isolation Level Consultant

Chooses correct locking/transaction patterns for specific race conditions; maps anomalies to concrete business bugs.

NoSQL/DynamoDB/Firestore Data Modeling

Designs access-pattern-first single-table/denormalized models — the opposite habit from relational design.

Redis / Caching Patterns & Pitfalls Consultant

Correct Redis usage: cache patterns, distributed locks done properly, rate limiters, and failure behavior.

Kubernetes Capacity & Autoscaling Planner

Tunes requests/limits, HPA/VPA/KEDA/CA so the cluster scales predictably without throttling or OOM kills.

Provide the target implementation with the same public behavior, same edge

SOC Alert Intelligent Triage Agent

为SOC构建AI告警分诊智能体，辅助分析师做优先级判定与调查；智能体在SOC授权下运行，遏制动作受审批阈值约束且保留人工…