Secure Software Development – From Secure Coding to OWASP to DevSecOps

This IT project is part of our digitalization and optimization of our customers’ IT landscape. Through targeted measures, we promote technological progress, optimize cross-system processes and create a sustainable basis for future developments. Our IT reference projects serve as a basis for orientation. They support the reusability of tried and tested concepts as part of project implementation.

Brief description

The client has developed a new developer guideline that contains requirements for secure software development. As an experienced architect, your task is to translate this guideline into specific technical measures. Specifically, after reviewing the guidelines, this involves: evaluating the draft guidelines and proposing additions, delivering a keynote presentation on 'Secure Software Development,' analyzing and evaluating specific projects, and conducting follow-up workshops with the individual product teams.

Supplement

Secure software development is becoming increasingly important in light of growing cyber threats and rising regulatory requirements. Security vulnerabilities in custom software can lead to data loss, business interruptions, and reputational damage, and can also result in legal and financial consequences. Embedding security considerations early on throughout the entire development process – from requirements analysis through design and implementation to testing and operation – sustainably reduces risks and, in the long term, minimizes the effort required for subsequent bug fixes. Established standards such as the OWASP Top 10 and a structured Secure Software Development Lifecycle (SSDLC) provide a proven foundation for this.

Subject description

The client operates numerous custom .NET software applications that are maintained by internal and external developers. A new developer guideline for secure software development has been drafted. Based on this, the following tasks are necessary to ensure that the relevant knowledge is shared with the respective teams: 1. Review, evaluate, and supplement the new developer guideline. 2. Keynote presentation on 'Secure Software Development': secure coding standards (authentication, data protection, encryption, error handling, file handling, input handling, logging, output encoding, session management), OWASP, secure software design, SSDLC, bug handling, penetration testing, CI/CD. 3. Analysis of current applications for relevant vulnerabilities. 4. Workshops with the product teams on concrete implementation plans for each team.

IT project data

Industries energy
Specialist tasks Code Review, documentation, IT security, project management, project manager, software development
DP tasks IT consulting
System environments organizational consulting
Procedure model customer standard
Development and test tool MS Visual Studio

Project start21.04.2026

Secure Software Development – From Secure Coding to OWASP to DevSecOps

Brief description

Supplement

Subject description

IT project data

Customers who trust us

Have we sparked your interest ?

Dr. Andreas Schneider

Head of Energy

Secure Software Development – From Secure Coding to OWASP to DevSecOps

Brief description

Supplement

Subject description

IT project data

Customers who trust us

Have we sparked your interest ?

Dr. Andreas Schneider

Head of Energy

Contact now

Contact now

Download file