Role track: Application Developer

Role overview

Build and ship secure containerized applications. Focus on fundamentals, trusted images, secrets, least privilege, and integrating baseline security into delivery.

Core responsibilities (framework):

  • Lightweight threat modeling for applications and workloads

  • Service accounts and RBAC for secure access

  • Safe secret usage and encryption awareness

  • Vulnerability scanning and testing in the build pipeline

  • Current dependencies and base images

  • Non-root / least-privilege workload design

  • Minimal, reproducible images with basic signing in the build workflow

Out of scope for this track: platform governance, runtime detection tuning, and security policy exceptions (Platform Operator, DevSecOps, or Architect).

No Advanced labs are assigned to this role—grow into the DevSecOps or Security Architect track.

Recommended sequence

Basic

  1. 101-01 — Default Secure Behavior

  2. 101-02 — Projects & Namespaces

  3. 101-03 — RBAC Basics

  4. 101-04 — SCC & Resource Guardrails

  5. 101-05 — NetworkPolicy Basics

  6. 101-06 — Secrets Management

  7. 101-07 — Image Provenance

  8. 101-08 — Etcd Encryption & Control Plane

  9. 101-11 — Rebuild & Harden Images

  10. 101-12 — Enforce TLS on Routes

Skip for this role: 101-09 and 101-10.

Intermediate

  1. 201-01 — Threat Modeling & Control Mapping

  2. 201-05 — CI/CD Scanning & Image Signing

  3. 201-06 — Secret Lifecycle Externalization

Advanced

No Advanced labs are assigned to Application Developer. Continue with DevSecOps Engineer or Security Architect when you are ready for governance, runtime, or supply-chain ownership.

Catalogs