-
ello everyone,
I recently signed up for this course after watching a captivating video on application security. Allow me to introduce myself: I am an Application Security Engineer with three years of experience working for a healthcare company. When I began my journey in this role, I had no idea what application security entailed, and unfortunately, I received no formal training. As a result, my work has largely been a process of trial and error.
My background in programming is quite limited, consisting mainly of self-paced classes that I have undertaken in my spare time. Despite these challenges, my commitment to learning and improving my skill set remains steadfast. I am particularly interested in understanding what to look for when securing an architectural design document, conducting secure code reviews, and developing a secure architecture design document.
Specifically, I am seeking to learn:
- What questions should I be asking during application security reviews?
- What steps should I take to develop a secure architecture design document?
- How should I conduct secure code reviews?
- What should I be looking for in the code to ensure security?
Moreover, I would like to gather resources and content that can guide me through these processes. This includes understanding the best practices, tools, and methodologies that are critical in application security.
One of my goals is to create How-To guides for developers with no security background, helping them understand and implement security measures effectively. Additionally, I aim to improve my communication with developers, ensuring that security considerations are integrated seamlessly into the development process.
I am eager to learn from this course and from all of you, to better secure applications and contribute more effectively to my organization. I look forward to sharing my knowledge and helping others succeed in the field of application security.
Thank you for having me here.