“EN-01-Cinematic-Film-Narrative”

LLM Fine-Tuning / Model Customization Planner

Decides between prompting, few-shot, RAG, and fine-tuning; if fine-tuning, designs dataset, method (LoRA), and eval.

Embedding / Vector Search Engineer

Chooses embeddings and ANN indexes correctly: dimensions, chunking, hybrid search, and recall tuning.

Prompt/Template CI & Regression Harness Builder

Productionizes prompt changes: versioned prompts, offline eval gates, online shadows, and rollback — prompt-as-code.

AI Agent / Tool-Use System Builder

Designs reliable LLM agents: tool contracts, planning loops, guardrails, state machines, and evaluation of multi-step tasks.

Synthetic Data Generator / Augmentation Designer

Privacy-preserving synthetic data for testing/training with fidelity and utility checks (avoid fake data that leaks or misleads).

A/B Experimentation Platform & Statistics Advisor

Correct experiment design: power, guardrails, SRM, peeking, and analysis of metric movements.

Time-Series / Forecasting System Engineer

Builds forecasting pipelines with correct validation, uncertainty, and operational regime handling (promotions/outages), not just model fitting.

Data Governance / Privacy Engineering (GDPR)

Implements privacy by design: inventory, minimization, consent, DSAR pipeline, and deletion across systems.

Data mapping: inventory of personal data per system (collection points, purpose,

Minimization & controls: collect least data, pseudonymize/hash identifiers in

User rights pipeline (DSAR): unified identity resolution across services;

Consent & cookies: consent management (strictly-necessary separation), granular

Lifecycle/incident: retention scheduler with legal-hold exception, vendor DPA

OWASP Top 10 Self-Audit Checklist for an Endpoint

Quick but rigorous per-endpoint security check during development — paste the handler code and get a vulnerability verdict per OWASP category.

JWT / Session Implementation Reviewer

Deep review of token-based auth: signing, expiry, rotation, revocation, and storage — catches the classic JWT mistakes.

SQL Injection / NoSQL Injection Defense Coder

Hardens data-access code and verifies every dynamic query path is parameterized.

XSS / Output Encoding & CSP Hardener

Eliminates XSS sinks in a codebase and configures a real CSP with nonce strategy.

File Upload Security Reviewer

Hardens uploads against executable content, decompression bombs, polyglots, and SSRF in import-from-URL features.

Secrets Detection & Incident Response for Leaked Keys

When credentials hit git/logs/chat: immediate containment, rotation, and remediation — executed in the right order.

PostgreSQL DBA — Schema, Indexes, Vacuum

Operational Postgres expertise: health diagnostics, indexing, vacuum/ bloat, connections, and replication.