← All designationsSecurity & DevSecOps
Senior Application Security Engineer
Senior Engineer / Specialist · The mandatory curriculum for this designation. Every module must be completed and its examination passed, with evidence filed with the Registrar.
80
Modules assigned
734
Total hours
2
Pillars covered
The Promotion Gate. Promotion requires this curriculum and the next designation's curriculum complete, every examination passed — you train for the role before you hold it.
The Four Halls
What this designation draws on
No curriculum draws from one hall alone — IGS engineers are hired for judgement, not tools. The mix below shifts by level, but every rung touches all four.
यन्त्रशाला · InstrumentsTools and technology — open-source frameworks first, licensed platforms where clients demand them, and IGS's own UTAF Gen 2.0 and QualiZen AI.
अर्थशाला · DomainsBusiness and domain fluency in the IGS specialisation this designation serves, so a scholar lands speaking the client's language.
वाक्शाला · SpeechWritten and spoken communication, client negotiation and leadership behaviours — assessed by demonstration, never by attendance.
नीतिशाला · MethodProcess and standards — Agile, SAFe, ITIL, and the quality-engineering canon: ISTQB, TMMi, ISO 25010, risk-based testing.
The mandatory curriculum
Modules by pillar
Hours shown are theory plus hands-on labs. Each module carries its own courseware link and examination.
Process & Quality (72 modules · 670 hrs)
| Module | Requirement | Hours | Standard / expectation | Learning |
|---|---|---|---|---|
Acceptance testing and business readiness LM-037 | Mandatory | 6 | ISTQB CTFL acceptance testing, CTAL Test Management · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Airlines and travel LM-021 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
API checking with Postman LM-084 | Mandatory | 6 | ISTQB CTFL, API quality practice · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
API security testing LM-085 | Mandatory | 16 | OWASP API Security Top 10 · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Banking, Financial Services & FinTech — Senior/Specialist practical domain lab PT-078 | Choose one | 12 | IGS Banking, Financial Services & FinTech domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
BDD and Gherkin: examples, rules and executable scenarios LM-040 | Mandatory | 6 | ISTQB CTFL, Cucumber BDD/Gherkin · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
BFSI, digital banking, cards and payments LM-022 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Bidirectional traceability and coverage model LM-041 | Mandatory | 4 | ISTQB CTFL traceability · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Burp Suite and OWASP ZAP workflow LM-092 | Mandatory | 14 | OWASP WSTG, ISTQB Security Testing · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Burp Suite: Proxy, scope, Repeater, Intruder, Scanner and remediation retest PT-031 | Recommended | 24 | OWASP WSTG/ASVS Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
Client communication and expectation management LM-003 | Mandatory | 6 | IGS client-engagement standard · IGS Client Communication badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Clinical trials and remote patient monitoring LM-023 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Concise written communication: status, risk, decision and defect LM-005 | Mandatory | 4 | IGS communication standard · IGS Professional Communication badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Conflict resolution and constructive challenge LM-006 | Mandatory | 6 | IGS culture and conduct · IGS Conflict Resolution badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Cross-cultural collaboration in global teams and clients LM-008 | Mandatory | 6 | IGS global culture standard · IGS Global Collaboration badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
CVSS, business impact, remediation and verification LM-101 | Mandatory | 10 | ISTQB Security Testing · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Defect discovery, triage and reproducible reporting LM-042 | Mandatory | 5 | ISTQB CTFL defect management · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Deriving test conditions and scenarios from requirements LM-043 | Mandatory | 6 | ISTQB CTFL test analysis · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Domain data, controls, privacy and regulation LM-031 | Mandatory | 6 | IGS domain-readiness standard, context-specific regulation · IGS Domain Foundation badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Domain discovery and value-chain mapping LM-032 | Mandatory | 5 | IGS domain-readiness standard · IGS Domain Foundation badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Domain KPIs, SLAs and operational failure patterns LM-033 | Mandatory | 6 | TMMi Measurement, ITIL service management · IGS Domain Practitioner badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Domain risk-to-test / engineering map LM-034 | Mandatory | 6 | ISTQB risk-based testing, CTAL Test Management · IGS Domain Foundation badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
EdTech & Learning Platforms — Senior/Specialist practical domain lab PT-092 | Choose one | 12 | IGS EdTech & Learning Platforms domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: No verified direct paid course assigned |
EdTech and learning platforms LM-024 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Enterprise Applications & Integrations — Senior/Specialist practical domain lab PT-148 | Choose one | 12 | IGS Enterprise Applications & Integrations domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: No verified direct paid course assigned |
Git and pull-request workflow for QE: branch, commit, merge, review, resolve and tag evidence PT-043 | Mandatory | 8 | IGS source-control standard Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
Git and source-control basics LM-118 | Mandatory | 6 | Modern QE engineering practice · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Giving feedback, coaching and mentoring LM-012 | Mandatory | 6 | IGS North-Star performance behaviours · IGS Coach / Mentor badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Healthcare and HealthTech LM-025 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Healthcare, Clinical Trials & RPM — Senior/Specialist practical domain lab PT-057 | Choose one | 12 | IGS Healthcare, Clinical Trials & RPM domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Insurance LM-026 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Insurance — Senior/Specialist practical domain lab PT-085 | Choose one | 12 | IGS Insurance domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Integrated learning module — 2 related topics MOD-LM-001-LM-019 | Mandatory | 8 | IGS communication standard · IGS Professional Communication badge · IGS culture and North-Star behaviours · IGS Collaboration badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Integrated learning module — 2 related topics MOD-LM-016-LM-020 | Mandatory | 12 | IGS communication standard · IGS Presentation badge · IGS facilitation standard · IGS Facilitator badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Internal negotiation: priorities, capacity and dependencies LM-013 | Mandatory | 6 | IGS collaboration standard · IGS Negotiation badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Manhattan WMS & Omnichannel — Senior/Specialist practical domain lab PT-113 | Choose one | 12 | IGS Manhattan WMS & Omnichannel domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Manufacturing & Industrial — Senior/Specialist practical domain lab PT-134 | Choose one | 12 | IGS Manufacturing & Industrial domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: No verified direct paid course assigned |
Manufacturing and Industry 4.0 LM-027 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Mobile security with OWASP MASVS LM-128 | Mandatory | 16 | OWASP MASVS · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
MobSF: mobile static/dynamic analysis, certificates, privacy, triage and reporting PT-033 | Deployment-specific | 14 | OWASP MASVS/MSTG Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
Open-source AppSec pipeline: Nuclei, Semgrep, Trivy and OWASP Dependency-Check PT-034 | Deployment-specific | 20 | OWASP SAMM · IGS DevSecOps standard Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
OTT, Media & Connected TV — Senior/Specialist practical domain lab PT-071 | Choose one | 12 | IGS OTT, Media & Connected TV domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: No verified direct paid course assigned |
OTT, media, streaming, adtech and analytics LM-028 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
OWASP web application testing LM-134 | Mandatory | 18 | OWASP WSTG, ISTQB Security Testing · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
OWASP ZAP: proxy, spider, passive/active scan, contexts, authentication and CI PT-032 | Recommended | 16 | OWASP WSTG/ASVS Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
Personas, customer journeys and business rules LM-035 | Mandatory | 6 | ISTQB CTAL Test Analyst business-process testing · IGS Domain Foundation badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Product-risk analysis and prioritisation LM-050 | Mandatory | 4 | ISTQB CTFL risk-based testing, CTAL Test Management · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
qTest Manager: requirements, test cases, cycles, execution, defects and dashboards PT-007 | Deployment-specific | 10 | Tricentis qTest practitioner evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
QualiZen practitioner: ambiguity, risk, test design, automation recommendation and quality insights PT-038 | Mandatory | 12 | IGS QualiZen Practitioner badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: IGS proprietary enablement |
Quick Commerce & Last-Mile Delivery — Senior/Specialist practical domain lab PT-141 | Choose one | 12 | IGS Quick Commerce & Last-Mile Delivery domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Requirement and user-story ambiguity analysis: IGS 5C + INVEST LM-052 | Mandatory | 5 | ISTQB CTFL static testing, Agile Alliance INVEST · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Retail & E-commerce — Senior/Specialist practical domain lab PT-127 | Choose one | 12 | IGS Retail & E-commerce domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Retail, e-commerce and quick commerce LM-029 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Root-cause analysis and test-process improvement LM-053 | Mandatory | 6 | TMMi Defect Prevention / Test Process Optimisation · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
SAFe 6.0 for QE: ART, PI planning, system demo, inspect/adapt, quality practices and dependencies PT-040 | Deployment-specific | 12 | SAFe Practitioner/Agilist direction Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
Salesforce Enterprise Cloud — Senior/Specialist practical domain lab PT-099 | Choose one | 12 | IGS Salesforce Enterprise Cloud domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
SAP S/4HANA & Enterprise Processes — Senior/Specialist practical domain lab PT-106 | Choose one | 12 | IGS SAP S/4HANA & Enterprise Processes domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
SAST, SCA, secrets and secure pipeline controls LM-144 | Mandatory | 14 | OWASP DevSecOps Guideline · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
SME elicitation and rapid knowledge capture LM-036 | Mandatory | 5 | IGS consulting and domain-readiness standard · IGS Domain Practitioner badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
SonarQube quality engineering: quality profiles, gates, coverage, duplication and issue governance PT-047 | Deployment-specific | 10 | IGS code-quality standard Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
Spoken communication in stand-ups, reviews and technical discussions LM-017 | Mandatory | 4 | IGS communication standard · IGS Professional Communication badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Static testing, reviews and early quality gates LM-054 | Mandatory | 4 | ISTQB CTFL static testing, TMMi Peer Reviews · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Status, metrics and fact-based quality reporting LM-055 | Mandatory | 5 | ISTQB CTFL monitoring, CTAL Test Management · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Telecom, OSS/BSS and 5G LM-030 | Choose one | 8 | IGS deployment-domain elective · IGS Deployment Domain badge Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Telecommunications & 5G — Senior/Specialist practical domain lab PT-064 | Choose one | 12 | IGS Telecommunications & 5G domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Terraform infrastructure testing: validate, plan, policy and ephemeral QE environments PT-046 | Deployment-specific | 16 | IGS IaC assurance standard Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: Direct course awaiting TestOps curation |
Test data design, privacy and lifecycle LM-057 | Mandatory | 5 | ISTQB CTFL, privacy-by-design · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Test design techniques: EP, BVA, decision tables, state transitions and pairwise LM-058 | Mandatory | 8 | ISTQB CTFL test design · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Test estimation, sizing and capacity LM-059 | Mandatory | 6 | ISTQB CTAL Test Management · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Test monitoring, control and recovery planning LM-060 | Mandatory | 6 | ISTQB CTAL Test Management, TMMi Test Monitoring and Control · IGS role evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Threat modelling and abuse-case design LM-155 | Mandatory | 12 | ISTQB Security Testing / OWASP · IGS technical evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | |
Workday HCM & Finance — Senior/Specialist practical domain lab PT-120 | Choose one | 12 | IGS Workday HCM & Finance domain-readiness evidence Exam: Syllabus-style quiz + applied exercise · 30–45 min · pass 70% | Premium: No verified direct paid course assigned |
AI Enablement (8 modules · 64 hrs)
| Module | Requirement | Hours | Standard / expectation | Learning |
|---|---|---|---|---|
AI agent and advanced LLM penetration testing — Senior Engineer / Specialist AI-EXT-03-SENIORENGINEERSPECIALIST | Mandatory | 9 | IGS Quality Engineering AI, privacy, evidence, traceability, security and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Academy guided practice and assessment |
AI for application security testing and AI system security — Senior Engineer / Specialist AI-SPEC-05-SENIORENGINEERSPECIALIST | Mandatory | 7 | IGS Security & DevSecOps output, assessment and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Security & DevSecOps AI specialisation lab |
AI-assisted complex diagnostic engineering AI-ROLE-SENIORENGINEERSPECIALIST-1 | Mandatory | 8 | IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Academy guided practice and assessment |
AI-assisted engineering, review and maintainability AI-ROLE-SENIORENGINEERSPECIALIST-2 | Mandatory | 8 | IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Academy guided practice and assessment |
AI-assisted web, mobile and API application security testing — Senior Engineer / Specialist AI-EXT-01-SENIORENGINEERSPECIALIST | Mandatory | 9 | IGS Quality Engineering AI, privacy, evidence, traceability, security and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Academy guided practice and assessment |
Atlassian Rovo for Jira and Zephyr-supported QE workflows AI-ROVO | Deployment-specific | 8 | IGS Responsible AI, Atlassian permissions and human verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | |
Prompt injection and LLM security testing for QA engineers — Senior Engineer / Specialist AI-EXT-02-SENIORENGINEERSPECIALIST | Mandatory | 7 | IGS Quality Engineering AI, privacy, evidence, traceability, security and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Academy guided practice and assessment |
Reusable QE prompts, skill files and AI agents AI-ROLE-SENIORENGINEERSPECIALIST-3 | Mandatory | 8 | IGS Quality Engineering AI, privacy, evidence, traceability and human-verification standard Exam: Eval-suite demonstration · 60 min · pass 70% | Free: IGS Academy guided practice and assessment |