← All designations

Lead Application Security Engineer

Lead QE · Security & DevSecOps

79
Modules assigned
747
Total hours
5
Pillars covered

Process & Quality (14 modules · 116 hrs)

ModuleRequirementHoursStandard / expectationLearning
Acceptance testing and business readiness
LM-037
Mandatory6ISTQB CTFL acceptance testing, CTAL Test Management – IGS role evidence
Agile testing, Three Amigos and shift-left / shift-right
LM-038
Mandatory6ISTQB CTFL Agile/DevOps context, Scrum Guide – IGS role evidence
CSTM / advanced test management: strategy, planning, estimation, monitoring, people and improvement
PT-042
Recommended24CSTM / ISTQB Advanced Test Management
Developing an actionable test plan
LM-044
Mandatory10ISTQB CTAL Test Management v3, ISO/IEC/IEEE 29119 concepts – IGS role evidence
KPI, SLA, OLA and outcome-measure design
LM-047
Mandatory6TMMi Measurement, CTAL Test Management – IGS role evidence
Product-risk analysis and prioritisation
LM-050
Mandatory4ISTQB CTFL risk-based testing, CTAL Test Management – IGS role evidence
Root-cause analysis and test-process improvement
LM-053
Mandatory6TMMi Defect Prevention / Test Process Optimisation – IGS role evidence
SAFe 6.0 for QE: ART, PI planning, system demo, inspect/adapt, quality practices and dependencies
PT-040
Deployment-specific12SAFe Practitioner/Agilist direction
Status, metrics and fact-based quality reporting
LM-055
Mandatory5ISTQB CTFL monitoring, CTAL Test Management – IGS role evidence
Test completion, closure and release recommendation
LM-056
Mandatory5ISTQB CTFL completion, CTAL Test Management – IGS role evidence
Test estimation, sizing and capacity
LM-059
Mandatory6ISTQB CTAL Test Management – IGS role evidence
Test monitoring, control and recovery planning
LM-060
Mandatory6ISTQB CTAL Test Management, TMMi Test Monitoring and Control – IGS role evidence
Test strategy and risk-based operating model
LM-061
Mandatory12ISTQB CTAL Test Management / Test Analyst / Technical Test Analyst – IGS role evidence
TMMi Level 2 – managed test process
LM-062
Mandatory8TMMi Model – Level 2 – IGS role evidence

Domain & Business (30 modules · 282 hrs)

ModuleRequirementHoursStandard / expectationLearning
Airlines and travel
LM-021
Choose one8IGS deployment-domain elective – IGS Deployment Domain badge
Banking, Financial Services & FinTech – Lead practical domain lab
PT-079
Choose one12IGS Banking, Financial Services & FinTech domain-readiness evidence
BFSI, digital banking, cards and payments
LM-022
Choose one8IGS deployment-domain elective – IGS Deployment Domain badge
Clinical trials and remote patient monitoring
LM-023
Choose one8IGS deployment-domain elective – IGS Deployment Domain badge
Domain data, controls, privacy and regulation
LM-031
Mandatory6IGS domain-readiness standard, context-specific regulation – IGS Domain Foundation badge
Domain discovery and value-chain mapping
LM-032
Mandatory5IGS domain-readiness standard – IGS Domain Foundation badge
Domain KPIs, SLAs and operational failure patterns
LM-033
Mandatory6TMMi Measurement, ITIL service management – IGS Domain Practitioner badge
Domain risk-to-test / engineering map
LM-034
Mandatory6ISTQB risk-based testing, CTAL Test Management – IGS Domain Foundation badge
EdTech & Learning Platforms – Lead practical domain lab
PT-093
Choose one12IGS EdTech & Learning Platforms domain-readiness evidence
EdTech and learning platforms
LM-024
Choose one8IGS deployment-domain elective – IGS Deployment Domain badge
Enterprise Applications & Integrations – Lead practical domain lab
PT-149
Choose one12IGS Enterprise Applications & Integrations domain-readiness evidence
Healthcare and HealthTech
LM-025
Choose one8IGS deployment-domain elective – IGS Deployment Domain badge
Healthcare, Clinical Trials & RPM – Lead practical domain lab
PT-058
Choose one12IGS Healthcare, Clinical Trials & RPM domain-readiness evidence
Insurance
LM-026
Choose one8IGS deployment-domain elective – IGS Deployment Domain badge
Insurance – Lead practical domain lab
PT-086
Choose one12IGS Insurance domain-readiness evidence
Manhattan WMS & Omnichannel – Lead practical domain lab
PT-114
Choose one12IGS Manhattan WMS & Omnichannel domain-readiness evidence
Manufacturing & Industrial – Lead practical domain lab
PT-135
Choose one12IGS Manufacturing & Industrial domain-readiness evidence
Manufacturing and Industry 4.0
LM-027
Choose one8IGS deployment-domain elective – IGS Deployment Domain badge
OTT, Media & Connected TV – Lead practical domain lab
PT-072
Choose one12IGS OTT, Media & Connected TV domain-readiness evidence
OTT, media, streaming, adtech and analytics
LM-028
Choose one8IGS deployment-domain elective – IGS Deployment Domain badge
Personas, customer journeys and business rules
LM-035
Mandatory6ISTQB CTAL Test Analyst business-process testing – IGS Domain Foundation badge
Quick Commerce & Last-Mile Delivery – Lead practical domain lab
PT-142
Choose one12IGS Quick Commerce & Last-Mile Delivery domain-readiness evidence
Retail & E-commerce – Lead practical domain lab
PT-128
Choose one12IGS Retail & E-commerce domain-readiness evidence
Retail, e-commerce and quick commerce
LM-029
Choose one8IGS deployment-domain elective – IGS Deployment Domain badge
Salesforce Enterprise Cloud – Lead practical domain lab
PT-100
Choose one12IGS Salesforce Enterprise Cloud domain-readiness evidence
SAP S/4HANA & Enterprise Processes – Lead practical domain lab
PT-107
Choose one12IGS SAP S/4HANA & Enterprise Processes domain-readiness evidence
SME elicitation and rapid knowledge capture
LM-036
Mandatory5IGS consulting and domain-readiness standard – IGS Domain Practitioner badge
Telecom, OSS/BSS and 5G
LM-030
Choose one8IGS deployment-domain elective – IGS Deployment Domain badge
Telecommunications & 5G – Lead practical domain lab
PT-065
Choose one12IGS Telecommunications & 5G domain-readiness evidence
Workday HCM & Finance – Lead practical domain lab
PT-121
Choose one12IGS Workday HCM & Finance domain-readiness evidence

Tools & Engineering (16 modules · 208 hrs)

ModuleRequirementHoursStandard / expectationLearning
API checking with Postman
LM-084
Mandatory6ISTQB CTFL, API quality practice – IGS technical evidence
Burp Suite and OWASP ZAP workflow
LM-092
Mandatory14OWASP WSTG, ISTQB Security Testing – IGS technical evidence
Burp Suite: Proxy, scope, Repeater, Intruder, Scanner and remediation retest
PT-031
Recommended24OWASP WSTG/ASVS
CVSS, business impact, remediation and verification
LM-101
Mandatory10ISTQB Security Testing – IGS technical evidence
Git and pull-request workflow for QE: branch, commit, merge, review, resolve and tag evidence
PT-043
Mandatory8IGS source-control standard
Git and source-control basics
LM-118
Mandatory6Modern QE engineering practice – IGS technical evidence
Mobile security with OWASP MASVS
LM-128
Mandatory16OWASP MASVS – IGS technical evidence
MobSF: mobile static/dynamic analysis, certificates, privacy, triage and reporting
PT-033
Deployment-specific14OWASP MASVS/MSTG
Open-source AppSec pipeline: Nuclei, Semgrep, Trivy and OWASP Dependency-Check
PT-034
Deployment-specific20OWASP SAMM – IGS DevSecOps standard
OWASP ZAP: proxy, spider, passive/active scan, contexts, authentication and CI
PT-032
Recommended16OWASP WSTG/ASVS
qTest Manager: requirements, test cases, cycles, execution, defects and dashboards
PT-007
Deployment-specific10Tricentis qTest practitioner evidence
QualiZen practitioner: ambiguity, risk, test design, automation recommendation and quality insights
PT-038
Mandatory12IGS QualiZen Practitioner badge
SAST, SCA, secrets and secure pipeline controls
LM-144
Mandatory14OWASP DevSecOps Guideline – IGS technical evidence
SonarQube quality engineering: quality profiles, gates, coverage, duplication and issue governance
PT-047
Deployment-specific10IGS code-quality standard
Terraform infrastructure testing: validate, plan, policy and ephemeral QE environments
PT-046
Deployment-specific16IGS IaC assurance standard
Threat modelling and abuse-case design
LM-155
Mandatory12ISTQB Security Testing / OWASP – IGS technical evidence

AI Enablement (8 modules · 62 hrs)

ModuleRequirementHoursStandard / expectationLearning
AI agent and advanced LLM penetration testing – Lead QE
AI-EXT-03-LEADQE
Mandatory9IGS Quality Engineering AI, privacy, evidence, traceability, security and human-verification standard
AI controls for a QE workstream
AI-ROLE-LEADQE-3
Mandatory6IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard
AI for application security testing and AI system security – Lead QE
AI-SPEC-05-LEADQE
Mandatory8IGS Security & DevSecOps output, assessment and human-verification standard
AI-assisted release risk, triage and quality reporting
AI-ROLE-LEADQE-2
Mandatory7IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard
AI-assisted test planning, estimation and work allocation
AI-ROLE-LEADQE-1
Mandatory8IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard
AI-assisted web, mobile and API application security testing – Lead QE
AI-EXT-01-LEADQE
Mandatory9IGS Quality Engineering AI, privacy, evidence, traceability, security and human-verification standard
Atlassian Rovo for Jira and Zephyr-supported QE workflows
AI-ROVO
Deployment-specific8IGS Responsible AI, Atlassian permissions and human verification standard
Prompt injection and LLM security testing for QA engineers – Lead QE
AI-EXT-02-LEADQE
Mandatory7IGS Quality Engineering AI, privacy, evidence, traceability, security and human-verification standard

Communication, Leadership & Culture (11 modules · 79 hrs)

ModuleRequirementHoursStandard / expectationLearning
Client communication and expectation management
LM-003
Mandatory6IGS client-engagement standard – IGS Client Communication badge
Concise written communication: status, risk, decision and defect
LM-005
Mandatory4IGS communication standard – IGS Professional Communication badge
Conflict resolution and constructive challenge
LM-006
Mandatory6IGS culture and conduct – IGS Conflict Resolution badge
Cross-cultural collaboration in global teams and clients
LM-008
Mandatory6IGS global culture standard – IGS Global Collaboration badge
Difficult conversations – internal team and client
LM-009
Mandatory7IGS conduct and client-engagement standard – IGS Difficult Conversations badge
Giving feedback, coaching and mentoring
LM-012
Mandatory6IGS North-Star performance behaviours – IGS Coach / Mentor badge
Integrated learning module – 2 related topics
MOD-LM-002-LM-018
Mandatory15IGS client and commercial governance – IGS Client Negotiation badge – IGS leadership standard – IGS Influence badge
Integrated learning module – 2 related topics
MOD-LM-016-LM-020
Mandatory12IGS communication standard – IGS Presentation badge – IGS facilitation standard – IGS Facilitator badge
Internal negotiation: priorities, capacity and dependencies
LM-013
Mandatory6IGS collaboration standard – IGS Negotiation badge
Leadership, delegation and accountability
LM-014
Mandatory7IGS leadership and North-Star framework – IGS People Leadership badge
Spoken communication in stand-ups, reviews and technical discussions
LM-017
Mandatory4IGS communication standard – IGS Professional Communication badge