Skip to content

Latest commit

 

History

History
11 lines (6 loc) · 1.27 KB

S7.2.0.md

File metadata and controls

11 lines (6 loc) · 1.27 KB

7.2. Senior Software Engineers

Senior software engineers remain central to Application Security as AI-assisted development becomes standard. AI tools generate and analyze code at scale, but engineers remain accountable for outcomes. Evaluating designs, setting trust boundaries, and checking implementations against security intent require engineering judgment grounded in SSEM attributes and established principles.

Security professionals should collaborate closely with senior engineers in design activities, treating them as primary technical partners for FIASSE adoption.

Senior engineers apply the question "What can go wrong?" at every stage of development, from initial design through merge review, including AI-generated code. They drive the creation of Security Requirements, Acceptance Criteria, and Threat Scenarios that inform both manual implementation and AI-assisted generation.

As AI-assisted development becomes routine, senior engineers craft and maintain prompt engineering standards that embed SSEM attributes and securable coding expectations into generation workflows.

They champion and schedule regular dependency maintenance, mentor less experienced developers, and liaise with security teams to keep security alignment anchored in engineering practice.