Learn to find weaknesses before they become problems.
What you’ll work on
- Assess authorised client applications for common vulnerabilities and security weaknesses
- Work with authentication, access control, secrets, servers, databases, and configuration
- Help introduce secure development practices across projects
- Investigate security issues and understand how they can affect real applications
- Develop penetration testing fundamentals using authorised targets and controlled processes
Professional capabilities you’ll develop
- Recognising common web application vulnerabilities
- Thinking about applications from an attacker’s perspective
- Secure coding and configuration practices
- Vulnerability assessment and reporting
- Security hardening
- Understanding access control and secrets management
- Communicating security findings clearly to developers and stakeholders
Technologies and practices you may work with
- OWASP Top 10
- Burp Suite
- Vulnerability assessment
- Secure coding practices
- Secrets management
- Security hardening
- Incident response fundamentals
Examples of real work
- Security assessments and hardening reports for authorised client applications
- Secure-by-default templates and practices for new projects
Who this suits
You’re curious about how systems fail, enjoy investigating edge cases, and want to understand how software can be made harder to break.
Prerequisites
Prerequisites are a starting point, not a promise that you already know everything. You're expected to learn during the experience — but you also need enough foundation to participate in real work and take responsibility for your own progress.
Security Engineer
- Basic programming or scripting knowledge
- Basic understanding of web applications
- Basic HTTP and networking knowledge
- Familiarity with Linux and Git
- Understanding of basic authentication concepts
- Strong willingness to learn and follow authorised security-testing practices
explore Not sure whether this is for you? Explore other programmes