The first step in the secure development life cycle workflow is to ensure that all team members have undergone adequate security training. This includes understanding the importance of security, being aware of common security threats, and knowing how to implement security measures in the application development process. The training should be tailored to the specific needs of the team and the application.