Application Security Engineering (AppSec)

Learn to build security into the SDLC rather than bolting it on after the fact: STRIDE threat modeling that catches systematic category gaps, taint-aware static analysis that distinguishes real injection risk from superficially similar safe code, continuous dependency/supply-chain scanning against known CVEs, automated security-review flagging for discrepancies a human reviewer needs to see, and a severity-weighted merge gate that combines every finding source into one consistent, auditable decision.

Builds on: Python 3.12 (simulated code/dependency/PR data, no live application or exploit targets)