Overview
What this challenge is about.
Triage 1,500 SAST alerts across 18 fintech services, tune rulesets, and build developer guides. Get a verifiable certificate.
The scenario
The challenger bank (Series-D at USD 220M raised, mass-market retail launch in 6 months) needs SAST as a precondition for SOC 2 Type II — the auditor flagged its absence in the readiness assessment.
The Brief
What you'll do, and what you'll demonstrate.
Roll out SAST across 18 services for a fintech codebase, tune to under 5 percent false-positive rate, and integrate into developer workflow without alert fatigue.
Earning criteria — what you'll demonstrate
- Run baseline SAST across a multi-language polyglot codebase
- Tune rulesets to acceptable false-positive rate (the actual hard part)
- Integrate SAST as PR-blocking + advisory without alert fatigue
- Hand off rule maintenance + escalation to the security team
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Aligned coursework coming soon.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
- Sast
Apply sast to solve real industry problems and demonstrate production-level capability.
- Semgrep
Apply semgrep to solve real industry problems and demonstrate production-level capability.
- Sonarqube
Apply sonarqube to solve real industry problems and demonstrate production-level capability.
- Snyk
Apply snyk to solve real industry problems and demonstrate production-level capability.
- Rule Tuning
Apply rule tuning to solve real industry problems and demonstrate production-level capability.
- Secure Coding
Apply secure coding to solve real industry problems and demonstrate production-level capability.
Careers
Career paths this challenge builds toward
Completing this challenge demonstrates skills that transfer directly to these roles: