Google Code University offers free training on various topics including web security.
Be sure to check out the following presentations:
What Every Engineer Needs to Know About Web Security and Where to Learn It — presentation by Neil Daswani
How to Break Web Software — presentation by Mike Andrews