Security overview

Security encompasses the practices, tools, and mindset required to protect software systems, infrastructure, and data from unauthorized access, compromise, and abuse. The domain spans application security (secure coding, SAST/DAST, dependency scanning), identity and access management (OAuth 2.0, OIDC, RBAC), network security, cryptography, secrets management, and compliance frameworks (SOC 2, ISO 27001). It is the broader parent of Cybersecurity (offensive/defensive practitioner work) and intersects every other domain — every system has a threat model.