Secure software development: practices, methodologies, and tools to integrate security into every phase of the Software Development Life Cycle (SDLC). Includes threat modeling, secure coding standards (OWASP, CERT), security-oriented code review, SAST/DAST, vulnerable dependency management, DevSecOps, and least privilege and defense-in-depth principles applied to architectural design and implementation.