Ask HN: What book should we read next for our DevSecOps book club?

I recently started running a DevSecOps book club. We're just finishing our first book (Alice and Bob Learn Application Security) and are looking for our next one.

Some background: pretty much everyone in the group is a software engineer that wants to get better at application security.

Have any good suggestions?