Write a short secure coding quiz with answers and the reason behind each answer.
Security and Compliance
Skills for threat modelling, secure reviews, access control, privacy and compliance evidence.
Check logs for tokens, passwords and personal data and set redaction rules for them.
Plan a multi-factor authentication rollout covering exemptions, recovery methods and support load.
Set up secret scanning in repositories and CI, with triage rules and false-positive handling.
Plan a security champions programme with responsibilities, training and a review cadence.
Write a penetration test scope with targets, rules of engagement and out-of-scope items.
List the evidence to collect for each SOC 2 control and when to collect it.
Map existing controls to a framework's requirements and list the gaps.
Draft a responsible disclosure policy with scope, contact route and response timelines.
Summarise a threat report into the indicators and actions that apply to this system.
Harden a CI pipeline with least-privilege tokens, protected branches and signed artifacts.
Check that build dependencies and CI actions are pinned to immutable versions.