Posts in
Cloud Security Engineering
5posts
Shift-Left → Auto-Remediation → Agentic Remediation: The 2026 Vendor Landscape and a Palo Alto Cortex Cloud Deep Dive
From Checkov blocking PRs in CI to AI agents executing one-click fixes across code, cloud, and SOC — a vendor-by-vendor map of how cloud security moved from finding issues to fixing them, and where Palo Alto's Cortex Cloud platform sits in the race.
9 min readCloud Security Engineering 2026
Field note series on Cloud Security Engineering — shifting skills, modern tooling, and how engineers navigate a landscape that has converged with AI and agentic systems.
1 min readCloud security baseline — the foundation that needs to be right from day one
Cloud Security Baseline (CSB) is the minimum set of controls that must exist before the first workload deploys. Here's the practical breakdown — from CIS Benchmarks, drift detection, to automatically enforcing baseline.
5 min readBecoming a cloud security engineer in 2026 — skills that have shifted
The role of cloud security engineer has changed more in 2 years than in the 5 years before. Here's an honest breakdown: what's stayed the same, what's changed, and what new skills you need now.
7 min read