The cyber security context requires to better understand how developers write (in)secure code and to assist them in their software developments. We have developed a secure coding experiment and serious game intervention. In this paper, we report on the design of a serious game to investigate developercentred security. We used a combination of approaches to shape discussions and support the serious game co-creation.