This course provides a comprehensive introduction to secure software development lifecycle (SDLC) practices, with a strong emphasis on threat modelling. Participants will explore different threat model types and processes—including Rapid Threat Model Prototyping (RTMP)—and learn how to identify, classify, and mitigate security risks across Agile and DevOps environments. Key frameworks such as STRIDE, CWE, OWASP Top 10, and the Mitre ATT&CK are covered, alongside techniques for integrating secure architecture principles from AWS and Azure. By the end of the course, learners will be equipped to embed threat modelling into development workflows, convert risks into actionable backlog items, and apply security classifications and zone-based threat discovery effectively.