← All designationsSecurity & DevSecOps
Application Security Engineer
Quality Engineer · The mandatory curriculum for this designation. Every module must be completed and its examination passed, with evidence filed with the Registrar.
70
Modules assigned
583
Total hours
2
Pillars covered
The Promotion Gate. Promotion requires this curriculum and the next designation's curriculum complete, every examination passed — you train for the role before you hold it.
The Four Halls
What this designation draws on
No curriculum draws from one hall alone — IGS engineers are hired for judgement, not tools. The mix below shifts by level, but every rung touches all four.
यन्त्रशाला · InstrumentsTools and technology — open-source frameworks first, licensed platforms where clients demand them, and IGS's own UTAF Gen 2.0 and QualiZen AI.
अर्थशाला · DomainsBusiness and domain fluency in the IGS specialisation this designation serves, so a scholar lands speaking the client's language.
वाक्शाला · SpeechWritten and spoken communication, client negotiation and leadership behaviours — assessed by demonstration, never by attendance.
नीतिशाला · MethodProcess and standards — Agile, SAFe, ITIL, and the quality-engineering canon: ISTQB, TMMi, ISO 25010, risk-based testing.
The mandatory curriculum
Modules by pillar
Hours shown are theory plus hands-on labs. Each module carries its own courseware link and examination.
Process & Quality (63 modules · 532 hrs)
| Module | Requirement | Hours | Standard / expectation | Learning |
|---|---|---|---|---|
Acceptance testing and business readiness LM-037 | Mandatory | 6 | ISTQB CTFL acceptance testing, CTAL Test Management · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Agile testing, Three Amigos and shift-left / shift-right LM-038 | Mandatory | 6 | ISTQB CTFL Agile/DevOps context, Scrum Guide · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Airlines and travel LM-021 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
API checking with Postman LM-084 | Mandatory | 6 | ISTQB CTFL, API quality practice · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
API security testing LM-085 | Mandatory | 16 | OWASP API Security Top 10 · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Banking, Financial Services & FinTech — Engineer practical domain lab PT-077 | Choose one | 10 | IGS Banking, Financial Services & FinTech domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
BDD and Gherkin: examples, rules and executable scenarios LM-040 | Mandatory | 6 | ISTQB CTFL, Cucumber BDD/Gherkin · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
BFSI, digital banking, cards and payments LM-022 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Bidirectional traceability and coverage model LM-041 | Mandatory | 4 | ISTQB CTFL traceability · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Burp Suite and OWASP ZAP workflow LM-092 | Mandatory | 14 | OWASP WSTG, ISTQB Security Testing · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Burp Suite: Proxy, scope, Repeater, Intruder, Scanner and remediation retest PT-031 | Recommended | 24 | OWASP WSTG/ASVS Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
Client communication and expectation management LM-003 | Mandatory | 6 | IGS client-engagement standard · IGS Client Communication badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Clinical trials and remote patient monitoring LM-023 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Concise written communication: status, risk, decision and defect LM-005 | Mandatory | 4 | IGS communication standard · IGS Professional Communication badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Confluence for QE: find product knowledge, create requirement notes, decisions and evidence pages PT-001 | Mandatory | 4 | IGS project-knowledge standard Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Free: Direct course awaiting TestOps curation |
Cross-cultural collaboration in global teams and clients LM-008 | Mandatory | 6 | IGS global culture standard · IGS Global Collaboration badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Defect discovery, triage and reproducible reporting LM-042 | Mandatory | 5 | ISTQB CTFL defect management · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Deriving test conditions and scenarios from requirements LM-043 | Mandatory | 6 | ISTQB CTFL test analysis · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Domain data, controls, privacy and regulation LM-031 | Mandatory | 6 | IGS domain-readiness standard, context-specific regulation · IGS Domain Foundation badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Domain discovery and value-chain mapping LM-032 | Mandatory | 5 | IGS domain-readiness standard · IGS Domain Foundation badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Domain risk-to-test / engineering map LM-034 | Mandatory | 6 | ISTQB risk-based testing, CTAL Test Management · IGS Domain Foundation badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
EdTech & Learning Platforms — Engineer practical domain lab PT-091 | Choose one | 10 | IGS EdTech & Learning Platforms domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: No verified direct paid course assigned |
EdTech and learning platforms LM-024 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Enterprise Applications & Integrations — Engineer practical domain lab PT-147 | Choose one | 10 | IGS Enterprise Applications & Integrations domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: No verified direct paid course assigned |
Git and pull-request workflow for QE: branch, commit, merge, review, resolve and tag evidence PT-043 | Mandatory | 8 | IGS source-control standard Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
Git and source-control basics LM-118 | Mandatory | 6 | Modern QE engineering practice · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Healthcare and HealthTech LM-025 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Healthcare, Clinical Trials & RPM — Engineer practical domain lab PT-056 | Choose one | 10 | IGS Healthcare, Clinical Trials & RPM domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Insurance LM-026 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Insurance — Engineer practical domain lab PT-084 | Choose one | 10 | IGS Insurance domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Integrated learning module — 2 related topics MOD-LM-045-LM-048 | Mandatory | 9 | ISTQB CTFL test implementation and execution · IGS role evidence · ISTQB CTFL 4.0.1, TMMi process areas · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Integrated learning module — 2 related topics MOD-LM-001-LM-019 | Mandatory | 8 | IGS communication standard · IGS Professional Communication badge · IGS culture and North-Star behaviours · IGS Collaboration badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Jira defects: create, classify, evidence, link, triage, retest and close PT-003 | Mandatory | 5 | ISTQB defect management · IGS defect standard Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Free: Direct course awaiting TestOps curation |
Jira for QE: stories, tasks, workflow, comments, evidence, filters and dashboards PT-002 | Mandatory | 5 | IGS Jira usage standard Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Free: Direct course awaiting TestOps curation |
Manhattan WMS & Omnichannel — Engineer practical domain lab PT-112 | Choose one | 10 | IGS Manhattan WMS & Omnichannel domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Manufacturing & Industrial — Engineer practical domain lab PT-133 | Choose one | 10 | IGS Manufacturing & Industrial domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: No verified direct paid course assigned |
Manufacturing and Industry 4.0 LM-027 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
MobSF: mobile static/dynamic analysis, certificates, privacy, triage and reporting PT-033 | Deployment-specific | 14 | OWASP MASVS/MSTG Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
OTT, Media & Connected TV — Engineer practical domain lab PT-070 | Choose one | 10 | IGS OTT, Media & Connected TV domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: No verified direct paid course assigned |
OTT, media, streaming, adtech and analytics LM-028 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
OWASP web application testing LM-134 | Mandatory | 18 | OWASP WSTG, ISTQB Security Testing · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
OWASP ZAP: proxy, spider, passive/active scan, contexts, authentication and CI PT-032 | Recommended | 16 | OWASP WSTG/ASVS Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
Personas, customer journeys and business rules LM-035 | Mandatory | 6 | ISTQB CTAL Test Analyst business-process testing · IGS Domain Foundation badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Product-risk analysis and prioritisation LM-050 | Mandatory | 4 | ISTQB CTFL risk-based testing, CTAL Test Management · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
qTest Manager: requirements, test cases, cycles, execution, defects and dashboards PT-007 | Deployment-specific | 10 | Tricentis qTest practitioner evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
QualiZen practitioner: ambiguity, risk, test design, automation recommendation and quality insights PT-038 | Mandatory | 12 | IGS QualiZen Practitioner badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: IGS proprietary enablement |
Quick Commerce & Last-Mile Delivery — Engineer practical domain lab PT-140 | Choose one | 10 | IGS Quick Commerce & Last-Mile Delivery domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Requirement and user-story ambiguity analysis: IGS 5C + INVEST LM-052 | Mandatory | 5 | ISTQB CTFL static testing, Agile Alliance INVEST · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Retail & E-commerce — Engineer practical domain lab PT-126 | Choose one | 10 | IGS Retail & E-commerce domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Retail, e-commerce and quick commerce LM-029 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
SAFe 6.0 for QE: ART, PI planning, system demo, inspect/adapt, quality practices and dependencies PT-040 | Deployment-specific | 12 | SAFe Practitioner/Agilist direction Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
Salesforce Enterprise Cloud — Engineer practical domain lab PT-098 | Choose one | 10 | IGS Salesforce Enterprise Cloud domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
SAP S/4HANA & Enterprise Processes — Engineer practical domain lab PT-105 | Choose one | 10 | IGS SAP S/4HANA & Enterprise Processes domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Spoken communication in stand-ups, reviews and technical discussions LM-017 | Mandatory | 4 | IGS communication standard · IGS Professional Communication badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Static testing, reviews and early quality gates LM-054 | Mandatory | 4 | ISTQB CTFL static testing, TMMi Peer Reviews · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Status, metrics and fact-based quality reporting LM-055 | Mandatory | 5 | ISTQB CTFL monitoring, CTAL Test Management · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Telecom, OSS/BSS and 5G LM-030 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Telecommunications & 5G — Engineer practical domain lab PT-063 | Choose one | 10 | IGS Telecommunications & 5G domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Test data design, privacy and lifecycle LM-057 | Mandatory | 5 | ISTQB CTFL, privacy-by-design · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Test design techniques: EP, BVA, decision tables, state transitions and pairwise LM-058 | Mandatory | 8 | ISTQB CTFL test design · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Threat modelling and abuse-case design LM-155 | Mandatory | 12 | ISTQB Security Testing / OWASP · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Workday HCM & Finance — Engineer practical domain lab PT-119 | Choose one | 10 | IGS Workday HCM & Finance domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: No verified direct paid course assigned |
Writing test cases from test scenarios LM-066 | Mandatory | 6 | ISTQB CTFL test implementation · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% |
AI Enablement (7 modules · 51 hrs)
| Module | Requirement | Hours | Standard / expectation | Learning |
|---|---|---|---|---|
AI for application security testing and AI system security — Quality Engineer AI-SPEC-05-QUALITYENGINEER | Mandatory | 7 | IGS Security & DevSecOps output, assessment and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Security & DevSecOps AI specialisation lab |
AI-assisted execution, failure clustering and RCA AI-ROLE-QUALITYENGINEER-2 | Mandatory | 7 | IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Academy guided practice and assessment |
AI-assisted requirement analysis and test design AI-ROLE-QUALITYENGINEER-1 | Mandatory | 8 | IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Academy guided practice and assessment |
AI-assisted web, mobile and API application security testing — Quality Engineer AI-EXT-01-QUALITYENGINEER | Mandatory | 9 | IGS Quality Engineering AI, privacy, evidence, traceability, security and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Academy guided practice and assessment |
Atlassian Rovo for Jira and Zephyr-supported QE workflows AI-ROVO | Deployment-specific | 8 | IGS Responsible AI, Atlassian permissions and human verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | |
Human review of AI-generated testware AI-ROLE-QUALITYENGINEER-3 | Mandatory | 5 | IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Academy guided practice and assessment |
Prompt injection and LLM security testing for QA engineers — Quality Engineer AI-EXT-02-QUALITYENGINEER | Mandatory | 7 | IGS Quality Engineering AI, privacy, evidence, traceability, security and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Academy guided practice and assessment |