For software developers working for a corporate: Use your corp laptop and phone only for corp work. Don't do any personal stuff on it, including browsing the general web.
Add to that "don't be smarter than your IT department", even if you know how to do something on your own.
Remember that if you get compromised because you did something your IT dept should do or at least sign-off it will be your fault and one may face real consequences.
Just this alone reduces the risks significantly.