Skip to content
Quest Training

Secure Software Development Lifecycle (SSDLC) & Application Security Training Course

Embeds security in every stage of software development, from secure requirements and threat modelling to secure coding, testing, deployment and maintenance.

ASDO · Application Security & DevSecOpsAll Levels#2502ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Sectors:Information Technology & CybersecurityCategories:Application Security & DevSecOps

Course Overview

This advanced practical course provides a comprehensive framework for integrating security throughout the Software Development Lifecycle (SDLC), from requirements and architecture through development, testing, deployment, and maintenance. It focuses on embedding security controls early in the development process rather than treating security as a final-stage activity. The programme addresses secure requirements engineering, threat modelling, secure architecture, secure coding, vulnerability management, security testing, code review, dependency and supply-chain security, secrets management, and secure deployment practices. Participants will examine how security risks can be identified and controlled at each stage of software development. Through practical scenarios, threat-modelling exercises, secure coding analysis, security testing activities, and application security case studies, participants will develop the ability to integrate security into development workflows, identify vulnerabilities, evaluate application risks, and establish practical SSDLC controls aligned with organisational security objectives.

Learning Objectives

  • Analyse the principles and business value of a Secure Software Development Lifecycle.
  • Evaluate security requirements throughout software planning, design, development, testing, deployment, and maintenance.
  • Apply threat modelling techniques to identify application threats, attack surfaces, and security risks.
  • Assess secure architecture and design principles for modern applications.
  • Apply secure coding practices to reduce common application vulnerabilities.
  • Evaluate source code, third-party components, libraries, and dependencies for security risks.
  • Apply security testing techniques throughout the development lifecycle.
  • Analyse vulnerabilities and prioritise remediation according to risk and business impact.
  • Strengthen application security through code reviews, automated controls, and development security practices.
  • Integrate security into continuous integration and continuous delivery workflows.
  • Establish practical controls for secrets, credentials, configurations, and software supply-chain security.
  • Develop an organisation-wide SSDLC and application security improvement roadmap.

Who Should Attend

This programme is designed for software developers, application developers, software architects, DevOps engineers, DevSecOps professionals, application security specialists, cybersecurity professionals, and IT managers responsible for secure software delivery. It is also suitable for penetration testers, security engineers, quality assurance professionals, system analysts, technical leads, project managers, and technology professionals involved in software development, application governance, security testing, and risk management. The programme is particularly relevant to organisations developing or managing business-critical applications, digital services, web and mobile platforms, cloud applications, enterprise systems, and software products.

Learning Outcomes

  • Explain the principles, stages, and security controls of the SSDLC.
  • Identify security requirements and risks throughout the software lifecycle.
  • Perform structured threat modelling for applications and software architectures.
  • Evaluate application architecture against key security principles.
  • Identify common application vulnerabilities and their underlying causes.
  • Apply secure coding and defensive programming practices.
  • Conduct structured security-focused code reviews.
  • Evaluate third-party libraries, dependencies, and software supply-chain risks.
  • Select and apply appropriate application security testing techniques.
  • Prioritise vulnerabilities using risk, exploitability, exposure, and business impact.
  • Integrate security controls into automated development and deployment pipelines.
  • Develop a practical application security and SSDLC improvement roadmap.

Course Outline

Day 1

SSDLC Fundamentals, Security Requirements & Risk Management

  • Secure Software Development Lifecycle principles
  • Security integration across the software lifecycle
  • Security responsibilities of development and technology teams
  • Security requirements engineering
  • Application assets, trust boundaries, and attack surfaces
  • Security risk identification and assessment
  • Common application threat categories
  • Security considerations during planning and requirements definition
  • Security acceptance criteria
  • Practical Application: Security requirements analysis and SSDLC risk assessment
Day 2

Threat Modelling, Secure Architecture & Application Design

  • Threat modelling principles and methodologies
  • Application attack surfaces and trust boundaries
  • Threat identification and attack-path analysis
  • Security design principles
  • Authentication and authorisation architecture
  • Input validation and secure data handling
  • Session and identity management
  • Secure API and service architecture
  • Data protection and encryption considerations
  • Practical Application: Threat modelling and secure architecture assessment
Day 3

Secure Coding, Code Review & Software Dependencies

  • Secure coding principles and defensive programming
  • Common application vulnerabilities and weaknesses
  • Injection and input-handling risks
  • Authentication, authorisation, and access-control weaknesses
  • Secure error handling and logging
  • Security-focused source-code review
  • Third-party libraries and open-source dependencies
  • Dependency vulnerability management
  • Secrets, credentials, keys, and configuration security
  • Practical Application: Secure code review and vulnerability identification workshop
Day 4

Application Security Testing, DevSecOps & Secure Deployment

  • Application security testing throughout development
  • Static application security testing
  • Dynamic application security testing
  • Software composition analysis
  • Vulnerability validation and remediation
  • Security testing in continuous integration and delivery
  • DevSecOps principles and security automation
  • Secure build and deployment processes
  • Container, cloud, and configuration security considerations
  • Practical Application: Building an application security testing and DevSecOps workflow
Day 5

Application Security Governance, Risk & Continuous Improvement

  • Application security governance and accountability
  • Vulnerability management and remediation processes
  • Security metrics and application risk reporting
  • Security gates and release decision-making
  • Software supply-chain security
  • Security incident response for applications
  • Compliance and organisational security requirements
  • Measuring SSDLC maturity
  • Building a sustainable application security culture
  • Final Workshop: Developing an Integrated SSDLC & Application Security Improvement Roadmap

Upcoming Dates

Selected date

Dubai · 12 – 16 Sept 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
ManamaScheduled
2 – 6 Nov 2026€5,300—
SelectDownload Brochure
MarrakeshScheduled
9 – 13 Nov 2026€4,700—
SelectDownload Brochure
MilanScheduled
16 – 20 Nov 2026€7,000—
SelectDownload Brochure
MunichScheduled
23 – 27 Nov 2026€6,000€5,400until 2 Nov
SelectDownload Brochure
MuscatScheduled
23 – 27 Nov 2026€6,300€5,670until 2 Nov
SelectDownload Brochure
OnlineScheduled
29 Nov – 3 Dec 2026€2,700€2,430until 9 Nov
SelectDownload Brochure
ParisScheduled
7 – 11 Dec 2026€6,700€6,030until 16 Nov
SelectDownload Brochure
RiyadhScheduled
14 – 18 Dec 2026€4,800€4,320until 23 Nov
SelectDownload Brochure
RomeScheduled
21 – 25 Dec 2026€7,000€6,300until 30 Nov
SelectDownload Brochure
SalalahScheduled
28 Dec 2026 – 1 Jan 2027€6,300€5,670until 7 Dec
SelectDownload Brochure
SingaporeScheduled
4 – 8 Jan 2027€8,000€7,200until 14 Dec
SelectDownload Brochure
TrabzonScheduled
4 – 8 Jan 2027€5,300€4,770until 14 Dec
SelectDownload Brochure
TunisiaScheduled
11 – 15 Jan 2027€4,300€3,870until 21 Dec
SelectDownload Brochure
ViennaScheduled
18 – 22 Jan 2027€6,400€5,760until 28 Dec
SelectDownload Brochure
AmmanScheduled
24 – 28 Jan 2027€4,000€3,600until 4 Jan
SelectDownload Brochure
AmsterdamScheduled
1 – 5 Feb 2027€6,000€5,400until 11 Jan
SelectDownload Brochure
BakuScheduled
8 – 12 Feb 2027€5,300€4,770until 18 Jan
SelectDownload Brochure
BarcelonaScheduled
15 – 19 Feb 2027€6,000€5,400until 25 Jan
SelectDownload Brochure
CairoScheduled
22 – 26 Feb 2027€3,800€3,420until 1 Feb
SelectDownload Brochure
CasablancaScheduled
22 – 26 Feb 2027€4,700€4,230until 1 Feb
SelectDownload Brochure
DammamScheduled
1 – 5 Mar 2027€4,800€4,320until 8 Feb
SelectDownload Brochure
DohaScheduled
8 – 12 Mar 2027€4,700€4,230until 15 Feb
SelectDownload Brochure
DubaiScheduled
14 – 18 Mar 2027€4,700€4,230until 22 Feb
SelectDownload Brochure
GenevaScheduled
22 – 26 Mar 2027€7,300€6,570until 1 Mar
SelectDownload Brochure
IstanbulScheduled
29 Mar – 2 Apr 2027€5,300€4,770until 8 Mar
SelectDownload Brochure
Kuala LumpurScheduled
5 – 9 Apr 2027€4,700€4,230until 15 Mar
SelectDownload Brochure
LisbonScheduled
12 – 16 Apr 2027€6,000€5,400until 22 Mar
SelectDownload Brochure
LondonScheduled
12 – 16 Apr 2027€5,800€5,220until 22 Mar
SelectDownload Brochure
MadridScheduled
19 – 23 Apr 2027€6,000€5,400until 29 Mar
SelectDownload Brochure
MakkahScheduled
26 – 30 Apr 2027€4,800€4,320until 5 Apr
SelectDownload Brochure
DubaiScheduled
12 – 16 Sept 2027€4,700€4,230until 23 Aug
✓ SelectedDownload Brochure

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.

Download BrochureContact Our Team