What Can You Achieve with This Training?

Develop an understanding of the testing approaches and techniques used to evaluate the security of software and IT-based systems.
Strengthen your ability to perform structured security testing through penetration testing, vulnerability scanning, and risk-based testing.
Use threat modeling, security risk analysis, and test design to align testing activities with organisational security risks.
Select suitable security testing tools and evaluate the results produced during testing.
Contribute to security findings reporting, stakeholder communication, and vulnerability management.
Learn how to integrate security testing into the software development lifecycle using OWASP, ISO 29119, and information security management practices.

The ISTQB – Security Test Engineer Training is a three-day technical course intended for professionals involved in evaluating the security of IT-based systems.

The programme focuses on the practical execution of security testing activities, including the selection of appropriate tools, interpretation of results, and communication of security findings. Participants explore how security testing can be performed in different development environments and how its outcomes contribute to broader organisational risk management processes.

The course introduces security paradigms, security testing techniques, test processes, standards, and recommended practices. It also examines the influence of organisational structures, security policies, regulatory requirements, and attack scenarios on testing activities.

Further modules address the role of security testing throughout the software development lifecycle (SDLC), including operational and maintenance activities. Participants learn how security testing relates to an Information Security Management System (ISMS), how acceptance criteria are established, and how testing processes can be improved.

The training also covers security test reporting, vulnerability analysis, vulnerability management, and the use of security testing tools.

Designed for professionals seeking to improve their security testing capabilities, the course supports more effective participation in secure software delivery.

For corporate groups, we can organize this training as an on-site private group.

Prerequisites

Candidates must hold an ISTQB Foundation Level certification before taking the associated examination.

Certification Prerequisite

An ISTQB Foundation Level certification is required before taking the associated ISTQB Security Test Engineer examination.

Who Should Attend

This course is intended for professionals involved in security testing of software and IT systems, as well as those seeking to develop specialist skills in this area.

It is particularly relevant to:

Software Testers
Security Test Engineers
Quality Assurance (QA) Professionals
Software and Application Security Specialists
Test Leads and Test Managers
IT Professionals involved in security testing activities

What You Will Learn

By the end of this course, participants will be able to:

Explain the fundamental principles, concepts, and terminology of ISTQB security testing.
Evaluate and apply security testing techniques, including penetration testing and vulnerability scanning.
Analyse security risks using threat modeling and risk-based testing approaches.
Develop security test plans aligned with organisational risk management and compliance requirements.
Select and use appropriate security testing tools within different software delivery environments.
Interpret security test results, prepare reports, and communicate findings effectively to stakeholders.
Apply relevant standards and practices, including OWASP and ISO 29119, to security testing activities.
Integrate security testing throughout the software development lifecycle (SDLC).
Relate Zero Trust, security audits, and asset security concepts to security testing practices.
Analyse attack scenarios to support security test design.
Explain how security test results contribute to risk management within an Information Security Management System (ISMS).
Support vulnerability analysis and vulnerability management activities.
Identify opportunities for continuous improvement of security testing processes within an organisation.

Training Outline

1. Security Paradigms

Examining asset security levels and their role in security assessment
Understanding the purpose of security audits and their relationship to security testing
Introducing fundamental Zero Trust concepts
Evaluating open-source software from a security perspective

2. Security Test Techniques

Reviewing different security test types and their applications
Applying appropriate security testing techniques in relevant scenarios
Designing security tests and selecting suitable testing approaches

3. Security Test Process

Understanding the key activities within the security testing process
Designing security test cases and test scenarios based on testing requirements
Evaluating important considerations during test execution

4. Standards and Best Practices

Exploring security testing standards and their areas of application
Applying recognised security testing best practices
Using standards to guide the planning and execution of testing activities

5. Organisational Context

Examining how organisational structures influence security testing
Reviewing security policies and regulatory requirements
Analysing attack scenarios in the context of security testing

6. Software Development Lifecycle

Comparing different software development lifecycle models
Understanding how security testing is performed during operations
Addressing security testing within software maintenance activities

7. Information Security Management

Exploring Information Security Management Systems (ISMS) and their relationship to security testing
Defining acceptance criteria for security testing activities
Identifying approaches to improving security testing processes

8. Reporting and Vulnerabilities

Preparing and communicating security test reports
Performing vulnerability analysis
Understanding vulnerability management processes

9. Security Test Tools

Identifying major security testing tool categories and their purposes
Selecting and applying security testing tools according to testing needs

Why Choose Us

Leading UK-based global training provider since 1995.

Experience ISTQB - Security Test Engineer in United Kingdom through Bilginç IT Academy's live and interactive virtual classroom environment. Join a Public course as an individual delegate or arrange a dedicated Private / In-house online training program exclusively for your organization.

Delivery Method: Online Instructor-Led
Participation Model: Public / Private (In-house)
Live and Interactive Training: Connect with your instructor in real time and actively participate through discussions, Q&A sessions, practical exercises, and group activities.
Flexible Participation: Join the training from your home, office, or any location with a suitable internet connection.
Expert Trainer Network: Learn from experienced trainers with strong industry backgrounds and practical field expertise.
Over 30 Years of Training Expertise: Benefit from Bilginç IT Academy's professional training experience since 1995.
Worldwide Access: Join our live virtual classrooms from United Kingdom or anywhere else in the world, or arrange a dedicated online training program for your organization.

Experience ISTQB - Security Test Engineer through face-to-face Classroom Based training in United Kingdom. Training can be delivered as a Public course open to individual delegates or as a dedicated Private / In-house class for your organization.

Delivery Method: Classroom Based
Participation Model: Public / Private (In-house)
Face-to-Face Learning: Interact directly with your instructor and fellow delegates in an engaging classroom environment.
Experienced Trainers: Learn from specialists with extensive industry experience and practical real-world knowledge.
Professional Training Environment: Attend training in comfortable, well-equipped classrooms designed to support effective learning.
Practical Learning: Depending on the course, reinforce your knowledge through hands-on exercises, scenarios, case studies, and instructor-led activities.

Arrange ISTQB - Security Test Engineer in United Kingdom as a dedicated Onsite training program for your organization. Bilginç IT Academy trainers can deliver the training at your office or another location of your choice, with the program planned around your team's requirements and business objectives.

Delivery Method: Onsite
Participation Model: Private (In-house)
Training at Your Preferred Location: Organize the training at your company's office or another location selected by your organization.
Tailored Course Content: Adapt the training program to your projects, team structure, existing skill levels, and specific business requirements.
Team-Focused Learning: Develop your team around a shared knowledge base while strengthening internal collaboration and knowledge transfer.
Flexible Scheduling: Plan the training dates, location, and program according to your organization's operational requirements.
Worldwide Onsite Delivery: Arrange the training in United Kingdom or at another preferred location worldwide. Bilginç IT Academy trainers can travel to your selected location to deliver the dedicated training program.

ISTQB - Security Test Engineer Training in United Kingdom