Either way:
https://github.com/paragonie/awesome-appsec - Everything on this list is at least worth consideration