Security and compliance
Coordinates security reviews, certifications, and control frameworks such as SOC 2, ISO 27001, and FedRAMP.
Also called: SOC 2, ISO 27001, FedRAMP, security programs, threat modeling
How the score was computed
- News signal1.00
News signal 1.00: 5 verified article(s) mention this skill, weighted by how recent they are, source type, and evidence level (3.85 of 3 needed for a full signal). Strong means at least 0.4.
- JD signal19%
JD signal 0.19: 3 of 16 job descriptions require it and 0 prefer it (preferred counts 0.5). Strong means at least 35%.
- Momentum+1.00
Momentum +1.00: 5 article(s) in the last 30 days vs 0 in the 180 days before, compared per day.
In the news 7
- AGNTCon + MCPCon 2026: Agentic AI Foundation Adds Four Projects as MCP Turns to Security
InfoQ · Trade press · Oct 26, 2026
“much of its program moved from new protocol features to security and identity”
Strong evidenceAI-generated · Shift ExtractionMCP conference sessions shifted from new protocol features toward security and identity, with security-focused conformance tests, enterprise-managed authorization, and per-agent identities.
- Vercel sets a deadline for vendors to move beyond long-lived keys
The New Stack · Trade press · Oct 23, 2026
“pushing OpenID Connect (OIDC) and short-lived, identity-based tokens as alternatives”
Strong evidenceAI-generated · Shift ExtractionVercel is pushing OIDC and short-lived, identity-based tokens in place of long-lived static API keys across its ecosystem and its own API and CLI.
- Vercel sets a deadline for vendors to move beyond long-lived keys
The New Stack · Trade press · Oct 23, 2026
“letting applications and agents use their deployment identity to request provider credentials at runtime”
Moderate evidenceAI-generated · Shift ExtractionVercel's Connect service lets apps and agents request provider credentials at runtime using their deployment identity instead of storing them, which addresses credential risk for AI agents.
- Vercel sets a deadline for vendors to move beyond long-lived keys
The New Stack · Trade press · Oct 23, 2026
“Vercel added GitHub OIDC authentication for its Container Registry.”
Strong evidenceAI-generated · Shift ExtractionVercel added GitHub OIDC authentication for its Container Registry and said it is mid rollout of OIDC for deployments, so some CI pipelines can drop stored tokens while others still need them.
- Localizing compliance at scale: Achieving South Korea’s ISMS certification
Cloudflare Blog · Primary source · Oct 22, 2026
“Cloudflare has now obtained South Korea's Information Security Management System (ISMS) certification”
Strong evidenceAI-generated · Shift ExtractionCloudflare obtained South Korea's ISMS certification under the ISMS-P framework after auditors from KISA reviewed 80 controls over ten days.
- ServiceNow and Nvidia launch Arc, a new AI agent for enterprise
ZDNET · Trade press · Oct 21, 2026
“moving enforcement beyond the software layer into the runtime and hardware layers”
Strong evidenceAI-generated · Shift ExtractionAgent security is being enforced at the runtime and hardware layers, with a control tower setting policies and Nvidia OpenShell restricting agent behavior at runtime.
- Managing open-weight model risk in enterprise deployments
Microsoft Azure Blog · Primary source · Oct 16, 2026
“enterprises that operate their own model deployments may take on controls”
Moderate evidenceAI-generated · Shift ExtractionEnterprises that run their own open-weight model deployments may take on safeguards that a managed service would otherwise provide, so ownership of controls must be defined and revisited as deployments change.
In job postings 3
- Figmarequired
Technical Program Manager - AI Tooling · Mid (5+ yrs) · captured Oct 27, 2026
“Coordinate security reviews, legal and procurement milestones”
- Databricksrequired
Staff Technical Program Manager- Security · Staff · captured Oct 27, 2026
“Oversee execution of complex security engineering multi-half initiatives”
- Redditrequired
Staff Technical Program Manager, Infrastructure · Staff (IC5) · captured Oct 27, 2026
“Core Platform, Ranking Platform, Security, and Compliance”
Waiting for an editor (not counted yet)
- ServiceNow and Nvidia launch Arc, a new AI agent for enterprise: Inadequate security controls are described as a main roadblock to companies adopting more autonomous AI systems, which is driving security-first agent offerings.
- Extractor confidence 0.65 is below 0.7; evidence level is Weak