- As a security engineer, I want automated security tests so that vulnerabilities are caught early - Acceptance: Tests for authentication, data validation, and encryption