ISTQB Certified Tester Security Test Engineer (CT-STE)

Select your learning method

Overview Learning objectives What you'll learn Key facts FAQs What our customers say Get in touch

Learn essential skills

Course overview

Build the skills needed to carry out effective security testing and identify vulnerabilities in software systems. Over three days, you’ll explore security test techniques and reporting methods, with a focus on applying your knowledge in real organisational and development contexts.

Execute effective security tests

On this ISTQB course, you’ll build a stronger awareness of the security risks that affect software quality and reliability. Gain an understanding of core security paradigms and recognised standards. This helps you see not only how to test for vulnerabilities, but why those activities matter to overarching risk management and business resilience.

Learning objectives

Explain key security paradigms and testing implications
Apply security test techniques appropriately
Contribute to security test planning and design
Execute security tests across software systems
Use standards and best practice in testing
Adapt testing to organisational and development contexts
Feed results into security risk management
Select tools that support security testing needs

What you'll learn

The training takes you through the key activities involved in effective security testing, from understanding common security concepts to choosing suitable techniques and tools. You’ll look at how testing changes across different business settings and development approaches, as well as understanding how clear evidence helps teams act on vulnerabilities.

Security paradigms

Explore the security concepts that shape effective testing, including how risks, threats and vulnerabilities affect software systems. This helps you understand why security testing is needed, how it supports wider goals and where testing activity can help reduce exposure to potential attacks.

Adapting tests for different context

Examine how security testing should change depending on the organisation and project environment. This includes understanding how to adjust your approach for different delivery models, business priorities and levels of security maturity, so testing remains relevant and practical.

Security testing across the development lifecycle

Learn how security testing can be adapted to suit different software development lifecycle models, including where testing activities should take place and how they support each stage of delivery. The course helps you understand how to adjust your approach based on the way software is built and released, so security testing becomes a practical part of development rather than a final-stage check.

Reporting vulnerabilities

Discover how to collect, evaluate and present security test results in a clear, structured way. The course covers how to write detailed finding reports supported by clear evidence, helping both technical and non-technical stakeholders to understand the risk before deciding what action to take.

What’s included

Accredited ISTQB Certified Tester Security Test Engineer training
ISTQB Certified Tester Security Test Engineer exam
Tutor support
Optional extras include Pass Protect exam insurance

Key facts

Certification

ISTQB Certified Tester Security Test Engineer (CT-STE)

Who it’s for

This course is for professionals involved in testing IT-based systems for security, including testers, test analysts, test managers and software developers.

Prerequisites

You must have the completed the ISTQB Foundation Level certificate before taking the Security Test Engineer exam.

Exam information

75 minutes, 40 questions, 65% pass mark

Optional extras

Pass Protect exam insurance

Pre-course

There is no pre-course work for this training course.

FAQs

Examine how to test software systems for vulnerabilities and use test results to support informed security decisions. The course also covers reporting, tooling, and how to adapt your approach across different organisational environments and software development lifecycle.

Why is security testing important in software development?

Security testing helps teams identify vulnerabilities before they can affect users, systems or business operations. It supports stronger software quality by checking how well an application resists security threats, while giving teams the evidence they need to manage risk and improve protection throughout development.

How long does the ISTQB Security Test Engineer course take to complete?

The ISTQB Security Test Engineer course takes three days to complete and is delivered through our live virtual and in-person classroom study options.

Is the exam included with the course?

Yes. The exam is included with the course. It is sat online via remote proctor and includes 40 questions with a duration of 75 minutes. Extra time may be available where applicable – our learning advisors can offer guidance on whether you would be eligible or not.

How do security testing tools support vulnerability detection?

Security testing tools help tester examine software systems more efficiently and consistently. They can support the detection of vulnerabilities, help gather evidence and assist with the selection of the right testing approach, so teams can investigate findings and report risks more clearly.

What our customers say

Stephanie was always available for help and support. Always quick response on queries and issue resolution.

Amit Rajemahadik, ILX learner

Friendly staff who helped me with all my questions and request very quickly.

Nathaniel Jenricks, ILX learner

Why study with ILX

500,000+ learners

Join the half a million learners developing their skills with our training

5,000+ businesses

A trusted partner to thousands of organisations worldwide

96% customer satisfaction

Our passionate team goes above and beyond to support customer needs