Foundations of Application Security

Practical training for secure-by-design software development

Foundations of
Application Security

Overview

Security doesn’t start at the end. It starts at the first line of code.

This two-day course gives developers, engineering, and security teams the skills to deliver secure, compliant software without slowing down. You’ll learn how to embed secure coding practices, align AppSec practices with regulatory frameworks like the Essential Eight and ISM, and build stronger collaboration across development, security, and operations.

The course blends modern software security theory with group activities and practical exercises focused on real-world engineering and delivery.

Details

Core training areas
  • Threat modelling techniques, including STRIDE, 4Q, and Attack Trees
  • Secure coding practices focused on authentication, configuration, and secrets management
  • Application security tooling such as SAST, SCA, SBOMs, and secrets scanning
  • DevSecOps pipelines and lightweight assurance workflows
  • Secure-by-design principles supported by real-world case studies
  • Running a successful AppSec program aligned with the Essential Eight and ISM

By the end of this course, you’ll know how to:

  • Build secure applications aligned with established cybersecurity frameworks
  • Catch and fix issues earlier in the development cycle, reducing reliance on penetration testing
  • Ship faster and safer in Agile and DevOps environments
  • Strengthen collaboration between dev, security, and ops without adding friction
  • Software Engineer
  • Programmer/Developer
  • AppSec Engineer
  • DevSecOps Engineer
  • DevOps Professional
  • Cloud Engineer
  • Sydney – September 15 – 16
  • Newcastle – October 2 – 3
  • Melbourne – October 6 – 7
  • Canberra – November 17 – 18

Foundations of
Application Security

Enrol

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed at tortor viverra, venenatis ipsum eget, luctus ex. Pellentesque non convallis magna. Nullam sagittis eget neque sed hendrerit.

Form Here

Instructor Bio

Cole Cornford

Founder & CEO
Galah Cyber

Cole Cornford is a recognised leader in Australia’s application security scene. As Founder of Galah Cyber, he’s led major security programs across global teams and brings a strong engineering mindset to everything he does.

An active OWASP contributor, sought-after speaker, and host of the Secured podcast, Cole is known for cutting through complexity and speaking the language of developers.