{
  "id": "skill-area:application-security",
  "_kind": "SkillArea",
  "_file": "domain/skill-areas/skill-areas-ecosystem-expansion.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Application Security",
    "description": "Securing applications against common vulnerabilities — OWASP Top 10\nmitigations, secure coding practices, threat modeling, penetration testing,\nand security code review across web and API surfaces.\n",
    "domains": [
      "domain:cybersecurity"
    ],
    "expertiseLevels": [
      "intermediate",
      "expert"
    ]
  },
  "outgoingEdges": [
    {
      "from": "skill-area:application-security",
      "to": "domain:cybersecurity",
      "kind": "applies_to",
      "attributes": {
        "confidence": "primary"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:compliance-automation",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:vulnerability-scanning-remediation",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:penetration-testing-ethical-hacking",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:security-monitoring-siem",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:endpoint-security-edr",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:application-security-testing",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:incident-response-forensics",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:data-protection-dlp",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:threat-intelligence-hunting",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:sast",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:dast",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:threat-modeling",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:secret-scanning",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:dependency-vulnerability-mgmt",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:supply-chain-security",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:container-security",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:code-cybersecurity",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:runtime-security",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:policy-enforcement",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:access-control",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:compliance-scanning",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:iac-security",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:application-security",
      "to": "skill-area:risk-assessment",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    }
  ],
  "incomingEdges": [
    {
      "from": "skill-area:vulnerability-scanning",
      "to": "skill-area:application-security",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:web-security-testing",
      "to": "skill-area:application-security",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "recommended"
      }
    },
    {
      "from": "skill-area:WAF-configuration",
      "to": "skill-area:application-security",
      "kind": "prerequisite_for_learning",
      "attributes": {
        "strength": "helpful"
      }
    },
    {
      "from": "tool:datadome",
      "to": "skill-area:application-security",
      "kind": "used_for",
      "attributes": {}
    },
    {
      "from": "tool:snyk-agent-scan",
      "to": "skill-area:application-security",
      "kind": "tool_used_by",
      "attributes": {}
    },
    {
      "from": "tool:snyk",
      "to": "skill-area:application-security",
      "kind": "tool_used_by",
      "attributes": {}
    },
    {
      "from": "tool:snyk",
      "to": "skill-area:application-security",
      "kind": "used_for"
    },
    {
      "from": "role:appsec-engineer",
      "to": "skill-area:application-security",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "workflow:penetration-testing",
      "to": "skill-area:application-security",
      "kind": "requires_skill_area",
      "attributes": {}
    }
  ]
}