ProductEngineer.pro
04.6 · Capability in Engineering

Security and privacy engineering

Building products that protect users and their data, and knowing when to call in a specialist.

Map6 skills
04.6.1Authentication04.6.2Authorization04.6.3Threat modeling04.6.4Secure coding04.6.5Data protection04.6.6SecretsmanagementSoftware architectureData engineeringPerformance engineering04.6 Security and privacy engineeringDeveloper experienceExplore ↗
Not startedLearningComfortable
6 skillsClick a hexagon to set your status
  • 04.6.1AuthenticationVerifying who a user is.
  • 04.6.2AuthorizationControlling what each user is allowed to see and do.
  • 04.6.3Threat modelingThinking through how a system could be attacked before building it.
  • 04.6.4Secure codingWriting code that avoids common vulnerabilities.
  • 04.6.5Data protectionProtecting personal and sensitive data through its whole life.
  • 04.6.6Secrets managementHandling API keys, passwords and certificates safely.
Mark all 6

Where to start

3 resources
  • docsStart here
    OWASP Top 10 ↗
    OWASP · 30 min

    The most common serious web application risks, the shared starting point for secure coding.

  • docsStart here
    Threat modeling cheat sheet ↗
    OWASP · 13 min

    A lightweight way to ask what could go wrong with a design, using the STRIDE categories.

  • docsGo deeper
    Authentication cheat sheet ↗
    OWASP · 25 min

    What a sound login, password and session setup needs, checked by security practitioners.

Tools

1 tools
  • ToolFreemium
    Semgrep
    semgrep.dev ↗

    Static analysis for security bugs and code patterns, with an open-source core engine.

Also in Engineering

04