Someone who creates web apps should be intimately familiar with the techniques used by people who break into web apps.
Dafydd Stuttard (book author) / PortSwigger created the Burp Suite web application security testing program, which I've found invaluable in performing security analysis of web apps during development.