Cloud Security Skills Gap Assessment

What the Cloud Security assessment covers

You answer yes or no to short statements about what you have actually done. Each statement belongs to one of 9 skill areas, and each area is weighted by how often employers ask for it, so the score reflects what jobs need.

Skill areas

• Cloud platform security and identity. AWS most often, then Azure and GCP; IAM and least privilege, networking, compute and storage controls.
• Posture management and hardening. CSPM and CNAPP tools such as Wiz and Prisma Cloud, CIS benchmarks, Linux hardening, security baselines.
• Infrastructure as code and security automation. Terraform first, then CloudFormation, Helm and Bicep; Python, Go or Bash for security automation.
• CI/CD security and guardrails as code. Static IaC scanning, policy-as-code, secrets detection and image scanning in pipelines, GitLab CI/CD mentioned.
• Container and Kubernetes security. Kubernetes and EKS security (RBAC, network policies, admission control), Docker, container scanning; CKS named often.
• Vulnerability management and incident response. Owning cloud vulnerability and exposure management, and leading containment and investigation for cloud incidents.
• Threat modeling and security architecture. Secure cloud architecture design and review, threat modeling, zero trust, reference architectures and landing zones.
• Communication, mentoring and documentation. Cross-functional and stakeholder communication, mentoring engineers, security documentation, team leadership.
• Compliance, frameworks and certifications. CISSP most often, then CCSP, CKS, AWS Security Specialty; SOC 2, ISO 27001, NIST, RMF, DoD STIGs and clearances for some roles.