Skip to content
CT-STE — Security Test Engineer

ISTQB · Topic 8 of 15

Security Test Automation & CI/CD Integration

SAST + DAST + SCA in pipelines. Gating builds on findings. Triage automation.

6 lessons180 questions
Start for freeFull certification

What this topic covers

  1. 01Abuse Cases and Attack Trees for Security Test Design300m
  2. 02Security Test Automation & CI/CD Integration480m
  3. 03Hardcoded Credentials, IAM Testing, and Injection in Mobile Apps480m
  4. 04National Vulnerability Database (NVD) and SCA Tool Reference300m
  5. 05SAST, SCA, SBOM, and CI/CD Security Integration480m
  6. 06Synthetic Data, IAST, DREAD, and CI/CD Security Integration600m

Other topics in CT-STE — Security Test Engineer

Introduction to Security Test Engineering6 lessonsFundamentals of Security Testing4 lessonsThreat Modeling & Risk Assessment6 lessonsSecurity Test Design5 lessonsApplication Security Testing6 lessonsSpecific Security Test Topics8 lessonsSecurity Testing Tools7 lessonsSecurity Test Implementation and Execution7 lessonsSecurity Test Analysis and Reporting4 lessonsInfrastructure & Network Testing6 lessonsCryptography & Data Protection Testing6 lessonsSecurity Testing as Part of an ISMS4 lessonsSecurity Test Strategy and Planning5 lessonsStandards, Regulations, and Compliance4 lessons