“EN-04-Compliance-Governance-Risk”

Model Monitoring / Drift Detection Designer

Production ML monitoring: data/concept drift, staleness, fairness over time, and retraining triggers — with alert thresholds tied to impact.

Data Pipeline / ETL Engineer (Spark/dbt/SQL)

Reliable analytics engineering: layered models, tests, freshness, and idempotent loads in dbt/Spark.

Data Warehouse / Lakehouse Modeler

Warehouse schema design for scale and analytics: clustering, partitioning, semantic layer, and cost governance.

LLM Fine-Tuning / Model Customization Planner

Decides between prompting, few-shot, RAG, and fine-tuning; if fine-tuning, designs dataset, method (LoRA), and eval.

Embedding / Vector Search Engineer

Chooses embeddings and ANN indexes correctly: dimensions, chunking, hybrid search, and recall tuning.

Prompt/Template CI & Regression Harness Builder

Productionizes prompt changes: versioned prompts, offline eval gates, online shadows, and rollback — prompt-as-code.

AI Agent / Tool-Use System Builder

Designs reliable LLM agents: tool contracts, planning loops, guardrails, state machines, and evaluation of multi-step tasks.

Synthetic Data Generator / Augmentation Designer

Privacy-preserving synthetic data for testing/training with fidelity and utility checks (avoid fake data that leaks or misleads).

A/B Experimentation Platform & Statistics Advisor

Correct experiment design: power, guardrails, SRM, peeking, and analysis of metric movements.

Time-Series / Forecasting System Engineer

Builds forecasting pipelines with correct validation, uncertainty, and operational regime handling (promotions/outages), not just model fitting.

Data Governance / Privacy Engineering (GDPR)

Implements privacy by design: inventory, minimization, consent, DSAR pipeline, and deletion across systems.

Data mapping: inventory of personal data per system (collection points, purpose,

Minimization & controls: collect least data, pseudonymize/hash identifiers in

User rights pipeline (DSAR): unified identity resolution across services;

Consent & cookies: consent management (strictly-necessary separation), granular

Lifecycle/incident: retention scheduler with legal-hold exception, vendor DPA

OWASP Top 10 Self-Audit Checklist for an Endpoint

Quick but rigorous per-endpoint security check during development — paste the handler code and get a vulnerability verdict per OWASP category.

JWT / Session Implementation Reviewer

Deep review of token-based auth: signing, expiry, rotation, revocation, and storage — catches the classic JWT mistakes.

SQL Injection / NoSQL Injection Defense Coder

Hardens data-access code and verifies every dynamic query path is parameterized.

XSS / Output Encoding & CSP Hardener

Eliminates XSS sinks in a codebase and configures a real CSP with nonce strategy.