Secure-by-Design Review of a Microservices Auth Subsystem
Overview
What this challenge is about.
Secure-by-Design Review of a Microservices Auth Subsystem. Advanced challenge in analysis. Analyzing real datasets and building models that drive decisions, ...
The Brief
What you'll do, and what you'll demonstrate.
Run an OWASP ASVS Level 2 secure-by-design review on a microservices auth subsystem and produce a remediation backlog + joint CTO/AppSec memo.
This is not a data exercise. It is the work an analyst does when stakeholders need answers from messy data. That distinction matters to every hiring manager who has seen candidates describe statistical methods and none who have extracted insight from messy, real-world data.
When you finish, you will have something most graduates do not: a real-world deliverable, verified by Ewance, that you can show to a hiring manager and say "I did this. Here is the proof."
Earning criteria — what you'll demonstrate
- Apply OWASP ASVS Level 2 to a real microservices auth design
- Review JWT + session + OAuth2/OIDC design rigorously
- Build a threat-coverage matrix linking controls to threats
- Communicate auth-design risk to a CTO + AppSec joint audience
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Software Security
Master · Security
Strong alignment
This challenge maps to Software Security at the Master level. It sharpens the same practical skills your coursework expects — but in a real industry context with actual constraints and deliverables.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Secure Design
Apply secure design to solve real industry problems and demonstrate production-level capability.
- Owasp Asvs
Apply owasp asvs to solve real industry problems and demonstrate production-level capability.
- Oauth2
Apply oauth2 to solve real industry problems and demonstrate production-level capability.
- Oidc
Apply oidc to solve real industry problems and demonstrate production-level capability.
- Jwt Security
Apply jwt security to solve real industry problems and demonstrate production-level capability.
- Threat Coverage
Apply threat coverage to solve real industry problems and demonstrate production-level capability.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles: