InfoQ Launches Specialized October 2026 Certification Cohorts for AI Security and Assisted Engineering Professionals

The rapid integration of generative AI into enterprise software development cycles has created a critical skills gap, particularly regarding the secure deployment of AI agents and the protection of sensitive data within AI-driven workflows. To address these emerging challenges, InfoQ has announced two intensive, five-week online certification cohorts scheduled to begin in October 2026. These programs, focused on AI Security & Privacy Engineering and AI-Assisted Engineering, are designed to provide senior practitioners with a structured, peer-led environment to move beyond theoretical knowledge and implement rigorous, repeatable engineering standards.

The Growing Need for AI-Specific Engineering Rigor

As of late 2026, the global enterprise landscape is shifting from experimental AI adoption to large-scale production integration. According to industry analysis, over 70% of organizations now utilize AI agents for code generation or automated decision-making. However, this velocity has introduced significant security and architectural risks. Traditional security models, designed for static, deterministic software, often fail to account for the probabilistic nature of large language models (LLMs).

The InfoQ cohorts are designed to bridge this divide. By fostering a cohort-based learning model, InfoQ allows participants to move away from generic "best practices" and instead focus on applying concrete methods—such as red teaming and automated CI/CD integration—to their actual work environments. This hands-on approach is critical, as recent data indicates that improper AI configuration and lack of "human-in-the-loop" oversight are the primary drivers of AI-related data breaches in the current fiscal year.

AI Security & Privacy Engineering: Protecting the Data Lifecycle

Commencing October 26, 2026, the AI Security & Privacy Engineering program targets the complex problem of data provenance and control in AI systems. The program is facilitated by Katharine Jarmul, a recognized authority in machine learning privacy and author of Practical Data Privacy.

Jarmul’s curriculum emphasizes a "data-first" security posture. Unlike traditional software audits that focus on code vulnerabilities, this program tracks the flow of sensitive information through AI pipelines. Participants are required to bring a real-world work problem to the cohort, allowing them to map data entry points and trace potential leakage vectors.

"An AI security review has to follow the data and the decisions across the whole system," says Jarmul. "In the cohort, we’ll map where sensitive information can go, test the controls we choose, and make clear who owns the risks that remain."

The program culminates in a group capstone project where participants must present a formal architecture assessment. This assessment requires the documentation of identified risks, the selection of specific security controls, the design of testing protocols for those controls, and the establishment of clear accountability frameworks. This focus on "risk ownership" addresses a significant blind spot in current enterprise AI governance, where uncertainty regarding who is responsible for model output failures frequently leads to stalling production deployments.

AI-Assisted Engineering: Mastering Agentic Workflows

Starting October 19, 2026, the AI-Assisted Engineering program focuses on the practicalities of integrating coding agents into existing, complex codebases (often referred to as "brownfield" projects). The cohort is facilitated by Zichuan Xiong, Head of AIOps at Thoughtworks, and Premanand Chandrasekaran, Head of Technology at Thoughtworks.

The core challenge addressed here is the speed-versus-safety trade-off. While coding agents can significantly accelerate development velocity, they also possess the potential to introduce subtle, systemic bugs or security flaws at scale. The curriculum guides participants through the construction of an "agent harness"—a suite of sensors, permission constraints, and automated review steps that act as a guardrail for AI-driven changes.

"A coding agent can make a change quickly, but the harder question is what it was allowed to do and how we know the change is sound," notes Xiong. "We’ll build context and limit permissions before putting checks around an agent working in an existing codebase."

Premanand Chandrasekaran adds that the objective is to move beyond manual verification, which cannot keep pace with AI output volume. "Reviewing every agent change by hand does not tell us which checks should become part of the engineering workflow," he explains. "We’ll put independent review and CI checks to work, then compare five weeks of results with what we expected at the start."

A Structured Chronology of Learning

The five-week structure of these cohorts is designed to mirror the agile delivery cycles common in modern engineering teams. Each week builds upon the previous, transitioning from initial architectural modeling to final validation:

• Week 1: Problem framing and environment assessment. Participants define their specific project, whether it is a security review or an agentic integration.
• Weeks 2-3: Tooling and methodology implementation. This includes threat modeling for security participants and permission-limiting for engineering participants.
• Week 4: Stress testing and data collection. Practitioners apply the controls in their simulated or real environments to gather telemetry.
• Week 5: Synthesis and Capstone presentation. The final week is dedicated to refining the project and presenting findings to the peer group for critical review.

Industry Implications and Broader Impact

The launch of these cohorts reflects a broader shift in the technology industry toward "specialized certification." As the novelty of generative AI wanes, companies are demanding proof of competency that goes beyond introductory workshops. By requiring participants to work on actual problems and undergo peer-to-peer critique, InfoQ is positioning these certifications as a benchmark for senior engineering talent.

Furthermore, the emphasis on peer-to-peer learning is a strategic choice. In the current cybersecurity climate, companies are often reluctant to share their specific AI failure modes publicly. The "confidential peer group" format provides a safe harbor for engineers to discuss failures, cross-pollinate solutions, and compare how different organizations approach similar risks. This collaborative intelligence is expected to produce a "network effect" of better security standards across the participating organizations.

From an economic perspective, the ability to safely deploy AI agents or secure AI workflows is becoming a competitive advantage. Companies that can safely automate their coding workflows or protect their proprietary training data are seeing significantly faster time-to-market and lower long-term remediation costs. By contrast, organizations that lack these internal controls are increasingly susceptible to compliance failures and technical debt arising from unverified AI-generated code.

Conclusion and Enrollment Details

The October 2026 cohorts represent a significant investment in the human capital required to sustain the AI-driven enterprise. With facilitators like Jarmul, Xiong, and Chandrasekaran—all of whom bring deep expertise from high-stakes environments—the programs offer a direct line to some of the most current thinking in the field.

For organizations looking to upskill their teams, these certifications offer more than just a credential; they provide a blueprint for moving AI systems from the lab to the production environment with measurable confidence. Full syllabi, technical requirements, and enrollment portals for both the AI Security & Privacy Engineering and AI-Assisted Engineering programs are currently available through the InfoQ certification portal. As the industry enters a period of intense focus on AI reliability and governance, these cohorts serve as a timely intervention for engineers tasked with securing the next generation of software architecture.