Application Security Engineer
Quality Engineer · Security & DevSecOps
70
Modules assigned
583
Total hours
5
Pillars covered
Process & Quality (15 modules · 91 hrs)
| Module | Requirement | Hours | Standard / expectation | Learning |
|---|---|---|---|---|
Acceptance testing and business readiness LM-037 | Mandatory | 6 | ISTQB CTFL acceptance testing, CTAL Test Management – IGS role evidence | |
Agile testing, Three Amigos and shift-left / shift-right LM-038 | Mandatory | 6 | ISTQB CTFL Agile/DevOps context, Scrum Guide – IGS role evidence | |
BDD and Gherkin: examples, rules and executable scenarios LM-040 | Mandatory | 6 | ISTQB CTFL, Cucumber BDD/Gherkin – IGS role evidence | |
Bidirectional traceability and coverage model LM-041 | Mandatory | 4 | ISTQB CTFL traceability – IGS role evidence | |
Defect discovery, triage and reproducible reporting LM-042 | Mandatory | 5 | ISTQB CTFL defect management – IGS role evidence | |
Deriving test conditions and scenarios from requirements LM-043 | Mandatory | 6 | ISTQB CTFL test analysis – IGS role evidence | |
Integrated learning module – 2 related topics MOD-LM-045-LM-048 | Mandatory | 9 | ISTQB CTFL test implementation and execution – IGS role evidence – ISTQB CTFL 4.0.1, TMMi process areas – IGS role evidence | |
Product-risk analysis and prioritisation LM-050 | Mandatory | 4 | ISTQB CTFL risk-based testing, CTAL Test Management – IGS role evidence | |
Requirement and user-story ambiguity analysis: IGS 5C + INVEST LM-052 | Mandatory | 5 | ISTQB CTFL static testing, Agile Alliance INVEST – IGS role evidence | |
SAFe 6.0 for QE: ART, PI planning, system demo, inspect/adapt, quality practices and dependencies PT-040 | Deployment-specific | 12 | SAFe Practitioner/Agilist direction | Free: Scaled Agile certificationsPremium: Direct course awaiting TestOps curation |
Static testing, reviews and early quality gates LM-054 | Mandatory | 4 | ISTQB CTFL static testing, TMMi Peer Reviews – IGS role evidence | |
Status, metrics and fact-based quality reporting LM-055 | Mandatory | 5 | ISTQB CTFL monitoring, CTAL Test Management – IGS role evidence | |
Test data design, privacy and lifecycle LM-057 | Mandatory | 5 | ISTQB CTFL, privacy-by-design – IGS role evidence | |
Test design techniques: EP, BVA, decision tables, state transitions and pairwise LM-058 | Mandatory | 8 | ISTQB CTFL test design – IGS role evidence | |
Writing test cases from test scenarios LM-066 | Mandatory | 6 | ISTQB CTFL test implementation – IGS role evidence |
Domain & Business (28 modules · 243 hrs)
| Module | Requirement | Hours | Standard / expectation | Learning |
|---|---|---|---|---|
Airlines and travel LM-021 | Choose one | 8 | IGS deployment-domain elective – IGS Deployment Domain badge | |
Banking, Financial Services & FinTech – Engineer practical domain lab PT-077 | Choose one | 10 | IGS Banking, Financial Services & FinTech domain-readiness evidence | |
BFSI, digital banking, cards and payments LM-022 | Choose one | 8 | IGS deployment-domain elective – IGS Deployment Domain badge | |
Clinical trials and remote patient monitoring LM-023 | Choose one | 8 | IGS deployment-domain elective – IGS Deployment Domain badge | |
Domain data, controls, privacy and regulation LM-031 | Mandatory | 6 | IGS domain-readiness standard, context-specific regulation – IGS Domain Foundation badge | |
Domain discovery and value-chain mapping LM-032 | Mandatory | 5 | IGS domain-readiness standard – IGS Domain Foundation badge | |
Domain risk-to-test / engineering map LM-034 | Mandatory | 6 | ISTQB risk-based testing, CTAL Test Management – IGS Domain Foundation badge | |
EdTech & Learning Platforms – Engineer practical domain lab PT-091 | Choose one | 10 | IGS EdTech & Learning Platforms domain-readiness evidence | Free: edX Education Technology coursesPremium: No verified direct paid course assigned |
EdTech and learning platforms LM-024 | Choose one | 8 | IGS deployment-domain elective – IGS Deployment Domain badge | |
Enterprise Applications & Integrations – Engineer practical domain lab PT-147 | Choose one | 10 | IGS Enterprise Applications & Integrations domain-readiness evidence | Free: Microsoft Learn – Dynamics 365Premium: No verified direct paid course assigned |
Healthcare and HealthTech LM-025 | Choose one | 8 | IGS deployment-domain elective – IGS Deployment Domain badge | |
Healthcare, Clinical Trials & RPM – Engineer practical domain lab PT-056 | Choose one | 10 | IGS Healthcare, Clinical Trials & RPM domain-readiness evidence | |
Insurance LM-026 | Choose one | 8 | IGS deployment-domain elective – IGS Deployment Domain badge | |
Insurance – Engineer practical domain lab PT-084 | Choose one | 10 | IGS Insurance domain-readiness evidence | |
Manhattan WMS & Omnichannel – Engineer practical domain lab PT-112 | Choose one | 10 | IGS Manhattan WMS & Omnichannel domain-readiness evidence | |
Manufacturing & Industrial – Engineer practical domain lab PT-133 | Choose one | 10 | IGS Manufacturing & Industrial domain-readiness evidence | Free: Coursera Digital ManufacturingPremium: No verified direct paid course assigned |
Manufacturing and Industry 4.0 LM-027 | Choose one | 8 | IGS deployment-domain elective – IGS Deployment Domain badge | |
OTT, Media & Connected TV – Engineer practical domain lab PT-070 | Choose one | 10 | IGS OTT, Media & Connected TV domain-readiness evidence | Free: AWS Video Streaming ConceptsPremium: No verified direct paid course assigned |
OTT, media, streaming, adtech and analytics LM-028 | Choose one | 8 | IGS deployment-domain elective – IGS Deployment Domain badge | |
Personas, customer journeys and business rules LM-035 | Mandatory | 6 | ISTQB CTAL Test Analyst business-process testing – IGS Domain Foundation badge | |
Quick Commerce & Last-Mile Delivery – Engineer practical domain lab PT-140 | Choose one | 10 | IGS Quick Commerce & Last-Mile Delivery domain-readiness evidence | |
Retail & E-commerce – Engineer practical domain lab PT-126 | Choose one | 10 | IGS Retail & E-commerce domain-readiness evidence | |
Retail, e-commerce and quick commerce LM-029 | Choose one | 8 | IGS deployment-domain elective – IGS Deployment Domain badge | |
Salesforce Enterprise Cloud – Engineer practical domain lab PT-098 | Choose one | 10 | IGS Salesforce Enterprise Cloud domain-readiness evidence | |
SAP S/4HANA & Enterprise Processes – Engineer practical domain lab PT-105 | Choose one | 10 | IGS SAP S/4HANA & Enterprise Processes domain-readiness evidence | |
Telecom, OSS/BSS and 5G LM-030 | Choose one | 8 | IGS deployment-domain elective – IGS Deployment Domain badge | |
Telecommunications & 5G – Engineer practical domain lab PT-063 | Choose one | 10 | IGS Telecommunications & 5G domain-readiness evidence | |
Workday HCM & Finance – Engineer practical domain lab PT-119 | Choose one | 10 | IGS Workday HCM & Finance domain-readiness evidence | Free: Learn with WorkdayPremium: No verified direct paid course assigned |
Tools & Engineering (15 modules · 170 hrs)
| Module | Requirement | Hours | Standard / expectation | Learning |
|---|---|---|---|---|
API checking with Postman LM-084 | Mandatory | 6 | ISTQB CTFL, API quality practice – IGS technical evidence | |
API security testing LM-085 | Mandatory | 16 | OWASP API Security Top 10 – IGS technical evidence | |
Burp Suite and OWASP ZAP workflow LM-092 | Mandatory | 14 | OWASP WSTG, ISTQB Security Testing – IGS technical evidence | |
Burp Suite: Proxy, scope, Repeater, Intruder, Scanner and remediation retest PT-031 | Recommended | 24 | OWASP WSTG/ASVS | Free: PortSwigger Web Security AcademyPremium: Direct course awaiting TestOps curation |
Confluence for QE: find product knowledge, create requirement notes, decisions and evidence pages PT-001 | Mandatory | 4 | IGS project-knowledge standard | Free: Direct course awaiting TestOps curationPremium: Introduction on Jira and Confluence |
Git and pull-request workflow for QE: branch, commit, merge, review, resolve and tag evidence PT-043 | Mandatory | 8 | IGS source-control standard | Free: GitHub SkillsPremium: Direct course awaiting TestOps curation |
Git and source-control basics LM-118 | Mandatory | 6 | Modern QE engineering practice – IGS technical evidence | |
Jira defects: create, classify, evidence, link, triage, retest and close PT-003 | Mandatory | 5 | ISTQB defect management – IGS defect standard | Free: Direct course awaiting TestOps curationPremium: JIRA, Testing, Zephyr and Automation |
Jira for QE: stories, tasks, workflow, comments, evidence, filters and dashboards PT-002 | Mandatory | 5 | IGS Jira usage standard | Free: Direct course awaiting TestOps curationPremium: Jira for Beginners: Step-by-Step Hands-On |
MobSF: mobile static/dynamic analysis, certificates, privacy, triage and reporting PT-033 | Deployment-specific | 14 | OWASP MASVS/MSTG | Free: MobSF repository and documentationPremium: Direct course awaiting TestOps curation |
OWASP web application testing LM-134 | Mandatory | 18 | OWASP WSTG, ISTQB Security Testing – IGS technical evidence | |
OWASP ZAP: proxy, spider, passive/active scan, contexts, authentication and CI PT-032 | Recommended | 16 | OWASP WSTG/ASVS | Free: OWASP ZAP getting startedPremium: Direct course awaiting TestOps curation |
qTest Manager: requirements, test cases, cycles, execution, defects and dashboards PT-007 | Deployment-specific | 10 | Tricentis qTest practitioner evidence | Free: Tricentis Academy – qTestPremium: Direct course awaiting TestOps curation |
QualiZen practitioner: ambiguity, risk, test design, automation recommendation and quality insights PT-038 | Mandatory | 12 | IGS QualiZen Practitioner badge | Free: IGS QualiZen internal academyPremium: IGS proprietary enablement |
Threat modelling and abuse-case design LM-155 | Mandatory | 12 | ISTQB Security Testing / OWASP – IGS technical evidence |
AI Enablement (7 modules · 51 hrs)
| Module | Requirement | Hours | Standard / expectation | Learning |
|---|---|---|---|---|
AI for application security testing and AI system security – Quality Engineer AI-SPEC-05-QUALITYENGINEER | Mandatory | 7 | IGS Security & DevSecOps output, assessment and human-verification standard | Free: IGS Security & DevSecOps AI specialisation labPremium: Red Teaming LLM Applications |
AI-assisted execution, failure clustering and RCA AI-ROLE-QUALITYENGINEER-2 | Mandatory | 7 | IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard | Free: IGS Academy guided practice and assessmentPremium: AI-Powered Root-Cause Analysis Specialist |
AI-assisted requirement analysis and test design AI-ROLE-QUALITYENGINEER-1 | Mandatory | 8 | IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard | Free: IGS Academy guided practice and assessmentPremium: Master AI Prompt Engineering for Software Testing and QA |
AI-assisted web, mobile and API application security testing – Quality Engineer AI-EXT-01-QUALITYENGINEER | Mandatory | 9 | IGS Quality Engineering AI, privacy, evidence, traceability, security and human-verification standard | Free: IGS Academy guided practice and assessmentPremium: Generative AI in Penetration Testing: AI-Powered Pentesting |
Atlassian Rovo for Jira and Zephyr-supported QE workflows AI-ROVO | Deployment-specific | 8 | IGS Responsible AI, Atlassian permissions and human verification standard | |
Human review of AI-generated testware AI-ROLE-QUALITYENGINEER-3 | Mandatory | 5 | IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard | Free: IGS Academy guided practice and assessmentPremium: ISTQB CT-GenAI Specialist Level: Testing with Generative AI |
Prompt injection and LLM security testing for QA engineers – Quality Engineer AI-EXT-02-QUALITYENGINEER | Mandatory | 7 | IGS Quality Engineering AI, privacy, evidence, traceability, security and human-verification standard | Free: IGS Academy guided practice and assessmentPremium: AI Security Testing: Finding Prompt Injection Flaws |
Communication, Leadership & Culture (5 modules · 28 hrs)
| Module | Requirement | Hours | Standard / expectation | Learning |
|---|---|---|---|---|
Client communication and expectation management LM-003 | Mandatory | 6 | IGS client-engagement standard – IGS Client Communication badge | |
Concise written communication: status, risk, decision and defect LM-005 | Mandatory | 4 | IGS communication standard – IGS Professional Communication badge | |
Cross-cultural collaboration in global teams and clients LM-008 | Mandatory | 6 | IGS global culture standard – IGS Global Collaboration badge | |
Integrated learning module – 2 related topics MOD-LM-001-LM-019 | Mandatory | 8 | IGS communication standard – IGS Professional Communication badge – IGS culture and North-Star behaviours – IGS Collaboration badge | |
Spoken communication in stand-ups, reviews and technical discussions LM-017 | Mandatory | 4 | IGS communication standard – IGS Professional Communication badge |
IGS Takshashila Academy