Secure-by-Design Review of a Microservices Auth Subsystem
Overview
What this challenge is about.
You audit a PropTech auth system against OWASP ASVS Level 2, then deliver a threat matrix, backlog, and memo for a verifiable certificate.
The scenario
The real-estate-tech company (Series-B at GBP 50M raised, FCA-regulated for mortgage broking) is being held to FCA SS1/21 operational-resilience standards — the auth split is the largest single attack surface change of the year.
The Brief
What you'll do, and what you'll demonstrate.
Run an OWASP ASVS Level 2 secure-by-design review on a microservices auth subsystem and produce a remediation backlog + joint CTO/AppSec memo.
Earning criteria — what you'll demonstrate
- Apply OWASP ASVS Level 2 to a real microservices auth design
- Review JWT + session + OAuth2/OIDC design rigorously
- Build a threat-coverage matrix linking controls to threats
- Communicate auth-design risk to a CTO + AppSec joint audience
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Software Security
Master · Security
Strong alignment
This challenge maps to Software Security at the Master level. It sharpens the same practical skills your coursework expects — but in a real industry context with actual constraints and deliverables.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Secure Design
Apply secure design to solve real industry problems and demonstrate production-level capability.
- Owasp Asvs
Apply owasp asvs to solve real industry problems and demonstrate production-level capability.
- Oauth2
Apply oauth2 to solve real industry problems and demonstrate production-level capability.
- Oidc
Apply oidc to solve real industry problems and demonstrate production-level capability.
- Jwt Security
Apply jwt security to solve real industry problems and demonstrate production-level capability.
- Threat Coverage
Apply threat coverage to solve real industry problems and demonstrate production-level capability.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles: