Caching, Workers, and Performance
Application performance under repeated work and bursts: cache authority and freshness, worker scheduling and failure control, load distribution, scaling, and evidence-driven diagnosis across the request path.
Reliability Security And Operations
TRACKS
Security and Platform Trust
Platform-level security foundations for zero-trust service platforms: workload identity, artifact provenance, secure defaults, runtime guardrails, tenancy, audit evidence, and trust-degradation response.
Capacity Planning and Performance Engineering
Load envelopes, queuing trade-offs, forecasting, and the methods used to plan system growth before painful saturation.
Incident Management and Operational Learning
Incident response as an operational learning system: paging signals, roles, triage, communication, runbooks, mitigation, postmortems, corrective actions, on-call training, and durable organizational memory.
Release Safety and Progressive Delivery
Canaries, feature gates, rollback design, change safety, and the release controls that reduce production risk.
Reliability Engineering Foundations
SLIs, SLOs, failure budgets, operational trade-offs, and the core mental models behind production reliability work.
Chaos Engineering and Resilience Labs
Failure injection, resilience drills, blast-radius control, and experiment design for hardening systems before real incidents.
Application Security and Secure Design
Input validation, auth flaws, data exposure, secure defaults, and the design patterns that reduce common application risks.
Cloud, Container, and Supply Chain Security
Image provenance, runtime isolation, dependency trust, and the controls used to secure modern cloud software supply chains.
Cryptography, Secrets, and Key Management
Cryptographic primitives, secret rotation, key hierarchy, and the operational discipline needed to use cryptography safely.
Identity, Authorization, and Policy Systems
Identity boundaries, token flows, authorization models, policy engines, and the auditability of trust decisions in software systems.
Privacy, Governance, and Data Compliance Engineering
Draft track for lineage, retention, deletion workflows, policy enforcement, auditability, and privacy-aware data operations.
Security Foundations and Threat Modeling
A practical foundation for turning system diagrams, assets, trust boundaries, adversary assumptions, and abuse paths into prioritized security requirements, verifiable controls, and living threat models.
Detection, Response, and Forensics
Security telemetry, investigation workflows, triage, containment, and the evidence-handling needed after active compromise.
Reverse Engineering and Program Understanding
Understand software from the outside inward: binaries, protocols, traces, decompilers, symbols, patching, and ethical analysis.
Adversarial Security and Hacker Mindset
A compact, defense-oriented practice for challenging assumptions, tracing realistic attack chains across technical and human workflows, mapping attacker behavior to controls and signals, and reporting findings responsibly.
Observability, Telemetry, and Production Debugging
Production observability depth for backend systems: OpenTelemetry propagation, Prometheus cardinality, logs, sampling, traces, profiling, service maps, and incident evidence.