Security Journey Launches Role-Based Learning Paths
October 12, 2023

Security Journey launched Recommended Learning Paths; new collections of specially chosen lessons specifically designed for individual roles within development and broader software development life cycle (SDLC) teams to improve software security knowledge and achieve compliance requirements.

Recommended Learning Paths offer groups of lessons which have been carefully curated by application security experts to improve knowledge, optimize training time, help meet compliance regulations, and respond to post-breach audit recommendations.

Security Journey CEO, Joe Ferrara comments: “The overwhelming customer response to these new training paths is testament to strong market demand. Every organization wants to ensure it is training each role in the development team effectively, with the application security concepts that matter most to them—whether to proactively improve security knowledge or meet compliance requirements. Until now, nothing on the market truly delivered role- or compliance-based training like this. It will ultimately help organizations to produce more secure code, which saves money, builds trust, and drives innovation.”

With Recommended Learning Paths, organizations can:

- Take the guesswork out of choosing lessons to meet unique organizational needs
- Proactively improve development team knowledge
- Easily achieve regulatory compliance
- Respond to post-breach audit recommendations
- Ensure all development roles get targeted lessons to build skills, without wasting valuable time

Today, the Learning Paths come in two varieties, Role-Based and Compliance-Based.

Role-Based Learning Paths have been selected for each of the key roles involved in developing software. Each path has three levels of learning that build progressively: Foundational, Intermediate and Advanced. Each level within a learning path contains 24 or fewer lessons, with learners rewarded with a certificate at the end of each level.

Role-based learning paths ensure the right training is delivered to the right people at the right time, and ensure knowledge and skills are built continuously in stages rather than as a one-off exercise and are available for the following roles:

- Business Learner (Product Management, Project Management, UX)
- Web Developer, Front-End
- Web Developer, Back-End
- Native Developer
- Mobile Developer (iOS)
- Mobile Developer (Android)
- Data Scientist
- QA Tester
- DevSecOps
- Cloud Engineer

Compliance-Based Learning Paths are collections of lessons designed to help learners achieve their compliance goals and go beyond to build advanced AppSec knowledge and skills. Each path contains 24 lessons and is designed to minimize training time. There is only one level in compliance-based paths, after which the learner receives a certificate. Reports can be easily generated to understand and verify completion.

Compliance-based learning paths include:
- OWASP Top 10
- PCI DSS
- White House Executive Order

This new product release also includes a content refresh of 55 video-based lessons in keeping with the company’s commitment to give learners the latest security guidance.

Share this

Industry News

January 23, 2025

Progress announced the launch of Progress Data Cloud, a managed Data Platform as a Service designed to simplify enterprise data and artificial intelligence (AI) operations in the cloud.

January 23, 2025

Sonar announced the release of its latest Long-Term Active (LTA) version, SonarQube Server 2025 Release 1 (2025.1).

January 23, 2025

Idera announced the launch of Sembi, a multi-brand entity created to unify its premier software quality and security solutions under a single umbrella.

January 22, 2025

Postman announced the Postman AI Agent Builder, a suite empowering developers to quickly design, test, and deploy intelligent agents by combining LLMs, APIs, and workflows into a unified solution.

January 22, 2025

The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud native software, announced the graduation of CubeFS.

January 21, 2025

BrowserStack and Bitrise announced a strategic partnership to revolutionize mobile app quality assurance.

January 21, 2025

Render raised $80M in Series C funding.

January 16, 2025

Mendix, a Siemens business, announced the general availability of Mendix 10.18.

January 16, 2025

Red Hat announced the general availability of Red Hat OpenShift Virtualization Engine, a new edition of Red Hat OpenShift that provides a dedicated way for organizations to access the proven virtualization functionality already available within Red Hat OpenShift.

January 16, 2025

Contrast Security announced the release of Application Vulnerability Monitoring (AVM), a new capability of Application Detection and Response (ADR).

January 15, 2025

Red Hat announced the general availability of Red Hat Connectivity Link, a hybrid multicloud application connectivity solution that provides a modern approach to connecting disparate applications and infrastructure.

January 15, 2025

Appfire announced 7pace Timetracker for Jira is live in the Atlassian Marketplace.

January 14, 2025

SmartBear announced the availability of SmartBear API Hub featuring HaloAI, an advanced AI-driven capability being introduced across SmartBear's product portfolio, and SmartBear Insight Hub.

January 14, 2025

Azul announced that the integrated risk management practices for its OpenJDK solutions fully support the stability, resilience and integrity requirements in meeting the European Union’s Digital Operational Resilience Act (DORA) provisions.

January 14, 2025

OpsVerse announced a significantly enhanced DevOps copilot, Aiden 2.0.