Menu
Practical training for secure-by-design software development
From $1,800 per person (ex GST)
Discount pricing for students. Please see the terms of booking below!
This two-day course gives software and security engineers the foundational skills for building secure and resilient software.
This course will give you the practical skills and cutting-edge knowledge needed to secure software applications. With an emphasis on combining hands-on practical exercises, engaging group activities, and discussions around real-world case studies, this course covers all bases. Attendees will walk away confident in their ability to interrogate source code for security flaws and empowered to select the right DevSecOps capabilities for their technology stack. We go further and not only teach technical skills, but the critical program management skills like achieving buy-in from stakeholders, being successful with training programs, and measuring success too.
But the best part? You can join ‘The Flock’, alumni who are the best product security professionals in Asia Pacific.
Course Outline
Theory
Practical Exercises
Theory
Practical Exercises
Theory
Practical Exercises
The Foundations of Application Security course is available at:
To qualify for the student discount, you’ll need to provide proof of current student status and a short video testimonial after completing the course.
All prices are in AUD.
For several years, Transmax has partnered with Galah Cyber to deliver high‑quality training for our software development teams, ensuring we build IT solutions that are safe and secure.
Galah Cyber’s trainers are highly knowledgeable, experienced, and personable. They build strong rapport, create a positive learning environment, and deliver engaging, relevant content that leaves a lasting impact.
I highly recommend Galah Cyber’s education and awareness solutions to any organisation looking to invest in its people and improve security outcomes.”
Jon-Anthoney de Boer
Product Security Lead at Transmax
Galah’s application security workshop was both practical and engaging. It gave our engineers a clear understanding of secure coding principles and how to apply them in their day-to-day work. The session helped lift our overall security maturity and improve the way we build and maintain our products.
Jonathan Milgate
Chief Technology Officer at Camplify
Galah’s application security workshop was both practical and engaging. It gave our engineers a clear understanding of secure coding principles and how to apply them in their day-to-day work. The session helped lift our overall security maturity and improve the way we build and maintain our products.
Leander Nott
Software Development Manager at Allambi Care
This course is best suited for mid-level software engineers, security engineers, and related disciplines such as DevOps, IT, Cloud, Infrastructure, and Data. Managers with technical backgrounds will find value in it, but it is not recommended for non-technical or executive-level staff.
Startup or scaleup engineers find the course particularly valuable because it helps introduce security capability without the need to engage external consultants or dedicated staff members.
This course requires students to have;
Students without a software engineering background may struggle to comprehend many of the technical concepts being taught and find the hands-on exercises difficult and frustrating. Students without formal computer science education will be able to follow, but may need to take note of unfamiliar concepts to research at a later time or during breaks.
Students will need;
The course is designed explicitly for in-person instruction, and remote attendees may struggle to participate in practical exercises or otherwise feel excluded.
Cole Cornford is a recognised leader in Australia’s application security scene. As Founder of Galah Cyber, he’s led major security programs across global teams and brings a strong engineering mindset to everything he does.
An active OWASP contributor, sought-after speaker, and host of the Secured podcast, Cole is known for cutting through complexity and speaking the language of developers.
