Level 1

Understands the importance of security.

Level 2

Understands the importance of security. Utilizes this knowledge to ask more senior engineers for help on making decisions that may have security implications.

Level 3

Approaches all engineering work with a security lens. Actively looks for security vulnerabilities both in the code and when providing peer reviews.

Level 4

Actively works with the security team, as well as their own team, to refine their team's approach to security based on the organization's security strategy. Fosters a security first mindset within their own team, and leads by example.

Level 5

Actively works with the security team, as well as across several teams, to apply the organization's security strategy. Fosters a security first mindset across those teams, leading by example.

Level 6

Actively works with the security team to set and refine organization wide security strategy. Fosters a security first mindset across the organization. Can recognize obscure security threats that go unnoticed to others.

Build your own framework for free