bp developer security champion

Issued by bp

Earners of the Developer Security Champions badge have the required security awareness & capabilities to pro-actively consider security in the SDLC and take ownership of secure coding. A Dev Sec Champion is the go-to person for application security matters in a development team and knows how to use the AppSec tools offered by bp, follow best practices to reduce noise (false positives) in scan results, and prioritize & remediate vulnerabilities.

Type Learning
Level Foundational
Time Hours
Cost Free

Skills

Application Security
OWASP
Secure Development
Secure SDLC
Security Testing
Shift Left Security
Threat Modelling Fundamentals

Earning Criteria

The white belt course is the first in this learning path. It focuses on raising awareness on bp security resources relevant to developers, explaining fundamental application security concepts such as shift left, the secure SDLC and common vulnerabilities, and providing guidance on using the AppSec tools offered by DSES.
The yellow belt course is the second in this learning path and provides guidance on: 1. The prioritization and remediation of vulnerabilities in source code. 2. Security activities that support the shift further left in the SSDLC. 3. The assessment of application security posture and maturity in shift left security practices.
The orange belt is the third course in this learning path and provides guidance on: 1. Security Testing – proactive and reactive strategies to defend against/address vulnerabilities in the key areas they arise. 2. Understanding the nature of AppSec tools to use them more effectively. 3. Identifying false positives and negatives in SAST scan results & following best practices to reduce noise and focus remediation efforts.