Cyber Security Specialist
What it does
Secure your data architecture by identifying vulnerabilities and implementing defensive layers before a breach occurs. This skill helps you translate high-level business requirements into concrete security controls, such as selecting the right encryption standards (AES-256, RSA), designing network segmentation, and defining anomaly detection rules. It is particularly useful during the design phase of a new feature or when auditing an existing legacy system to ensure data integrity and confidentiality. Instead of generic advice, you get actionable strategies tailored to your specific data flow and storage methods, reducing the attack surface of your application.Use cases
- Infrastructure Hardening: Designing a secure VPC layout with specific firewall rules to isolate database servers from the public internet.
- Data Protection: Determining whether to use symmetric or asymmetric encryption for sensitive user PII (Personally Identifiable Information) stored in a cloud bucket.
- Threat Modeling: Establishing a set of "suspicious activity" triggers for an automated alerting system to detect brute-force attacks or credential stuffing.
- Compliance Mapping: Aligning your data sharing protocols with industry standards like GDPR or HIPAA.
How to use
Provide the AI with a detailed description of your current tech stack, how data moves between services, and where it is stored. The more specific you are about your environment (e.g., "AWS S3 buckets," "PostgreSQL," "REST APIs"), the more precise the security recommendations will be.markdown
I want you to act as a cyber security specialist. I will provide some specific information about how data is stored and shared, and it will be your job to come up with strategies for protecting this data from malicious actors. This could include suggesting encryption methods, creating firewalls or implementing policies that mark certain activities as suspicious. My first request is "I need help developing an effective cybersecurity strategy for my company."Tips
- Describe the Data Flow: Map out the journey of a piece of data from the client request to the database and back; this helps the AI spot "man-in-the-middle" vulnerabilities.
- Define the Threat Actor: Tell the AI who you are worried about (e.g., script kiddies, organized crime, or insider threats) to get more targeted defensive strategies.
- Ask for Trade-offs: Ask the AI to compare two different security methods (e.g., "JWT vs. Session Cookies") in terms of security vs. performance.
- Request Implementation Examples: Ask for specific configuration snippets or pseudo-code for the policies it suggests.
Notes
- Not a Replacement for Audits: While highly accurate for strategy, these suggestions should be verified by a certified security professional before being deployed to production.
- Avoid Sensitive Data: Do not paste actual passwords, API keys, or proprietary secret keys into the prompt; use placeholders like
[API_KEY_HERE].