Data Governance / Privacy Engineering (GDPR)

Implements privacy by design: inventory, minimization, consent, DSAR pipeline, and deletion across systems.

Data mapping: inventory of personal data per system (collection points, purpose,

Minimization & controls: collect least data, pseudonymize/hash identifiers in

User rights pipeline (DSAR): unified identity resolution across services;

Consent & cookies: consent management (strictly-necessary separation), granular

Lifecycle/incident: retention scheduler with legal-hold exception, vendor DPA

OWASP Top 10 Self-Audit Checklist for an Endpoint

Quick but rigorous per-endpoint security check during development — paste the handler code and get a vulnerability verdict per OWASP category.

JWT / Session Implementation Reviewer

Deep review of token-based auth: signing, expiry, rotation, revocation, and storage — catches the classic JWT mistakes.

SQL Injection / NoSQL Injection Defense Coder

Hardens data-access code and verifies every dynamic query path is parameterized.

XSS / Output Encoding & CSP Hardener

Eliminates XSS sinks in a codebase and configures a real CSP with nonce strategy.

File Upload Security Reviewer

Hardens uploads against executable content, decompression bombs, polyglots, and SSRF in import-from-URL features.

Secrets Detection & Incident Response for Leaked Keys

When credentials hit git/logs/chat: immediate containment, rotation, and remediation — executed in the right order.

PostgreSQL DBA — Schema, Indexes, Vacuum

Operational Postgres expertise: health diagnostics, indexing, vacuum/ bloat, connections, and replication.

Transaction & Isolation Level Consultant

Chooses correct locking/transaction patterns for specific race conditions; maps anomalies to concrete business bugs.

NoSQL/DynamoDB/Firestore Data Modeling

Designs access-pattern-first single-table/denormalized models — the opposite habit from relational design.

Redis / Caching Patterns & Pitfalls Consultant

Correct Redis usage: cache patterns, distributed locks done properly, rate limiters, and failure behavior.

High-Concurrency API Performance Tuning

End-to-end latency optimization for an API using flamegraphs + query analysis + caching; includes capacity math.

Frontend Performance / Core Web Vitals Specialist

Field-data-driven web performance: LCP/INP/CLS diagnosis with framework-specific fixes.

Node.js/Python/Go Runtime Tuning (Event Loop/GIL/Goroutines)

Runtime-specific performance: event-loop blocking, GC, worker pools, and profiling tools.

AWS/Azure/GCP Well-Architected Review

Cloud architecture review against reliability/security/cost/operational/performance pillars for a specific workload.