| Cloud Identity & Access Management | AWS IAM, Microsoft Entra ID, GCP Cloud IAM, RBAC, ABAC, least privilege, MFA, federation, SSO, policy analysis, and privilege-escalation review. | IAM policy reviews, role-permission maps, access-control recommendations, identity architecture diagrams, and documented security findings. |
| Cloud Infrastructure & Network Security | VPC/VNet architecture, subnetting, security groups, NACLs, firewalls, WAF, VPNs, private connectivity, segmentation, and hybrid-cloud security. | Secure network diagrams, segmentation models, firewall-rule analysis, connectivity reviews, and cloud network security recommendations. |
| Data Protection & Key Management | Encryption at rest and in transit, AWS KMS, Azure Key Vault, Google Cloud KMS, TLS, certificate management, storage security, and data-loss prevention. | Encryption architectures, key-management plans, storage-security findings, data-protection matrices, and technical recommendations. |
| DevSecOps & IaC Security | Terraform, CloudFormation, Bicep, Checkov, KICS, CI/CD security, secret detection, SAST concepts, and shift-left security controls. | IaC security audits, remediation guidance, secure configuration templates, pipeline security recommendations, and vulnerability summaries. |
| Container & Kubernetes Security | Docker security, image scanning, Kubernetes RBAC, NetworkPolicies, Pod Security Standards, admission control, Falco, Trivy, Kyverno, and OPA. | Container-hardening recommendations, Kubernetes manifests, security-policy reviews, vulnerability reports, and architecture documentation. |
| Cloud Governance & Incident Response | CIS benchmarks, NIST controls, ISO 27017/27018, PCI DSS, cloud logging, CSPM, CloudTrail, Defender for Cloud, Security Command Center, and incident response. | Compliance mappings, security posture assessments, incident-response workflows, log-analysis reports, and remediation plans. |