Software in production What a senior engineer needs: measuring and fixing performance, security with the OWASP list, continuous integration and delivery, and observability with logs, metrics and traces.
Lessons 0 Overview What a senior engineer needs: measuring and fixing performance, security with the OWASP list, continuous integration and delivery, and observability with logs, metrics and traces. 1 Performance: measure before you optimise How to find the cause of slowness by measuring, not guessing: p50, p95 and p99 percentiles, profiling, the N+1 problem, indexes and EXPLAIN, and time complexity in everyday code. 2 Application security The best-known vulnerabilities from the OWASP list with examples: injection, broken access control, password storage, XSS and CSRF, and weak dependencies. How to attack your own code before someone else does. 3 Continuous integration and delivery (CI/CD) Every push is checked automatically: GitHub Actions jobs, linting, testing and building, protecting the main branch, caching dependencies, and deploying automatically after the checks pass. 4 Observability: logs, metrics and traces How to know what is happening in production before a user tells you: structured logs, the four golden signals, distributed tracing, useful alerts, and service level objectives. 5 Wrap-up and resources The takeaways and glossary of this track.