Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 28 hours
Course Outline
Foundations of DevSecOps and the ECDE Framework
- Core DevSecOps concepts and guiding principles
- Security challenges specific to DevOps environments
- Overview of the ECDE exam structure and key domains
Cultivating a Secure DevOps Culture
- Viewing security as a collective, shared responsibility
- Shifting security initiatives left within the SDLC
- Aligning stakeholders and defining team roles
Embedding Security in CI/CD Pipelines
- Securing pipelines in Jenkins, GitLab CI, and Azure DevOps
- Managing secrets and configuring secure environments
- Building secure containers and performing image scanning
Application Security within DevSecOps
- Conducting Static and Dynamic Application Security Testing (SAST/DAST)
- Scanning open-source dependencies using SCA tools
- Performing secure code reviews and adhering to best coding practices
Infrastructure as Code and Cloud Security
- Hardening Terraform, Ansible, and Kubernetes configurations
- Implementing IAM and policy-as-code strategies
- Applying DevSecOps in hybrid and multi-cloud settings
Monitoring, Compliance, and Incident Preparedness
- Implementing security monitoring and logging within CI/CD
- Automating compliance with standards like NIST, ISO, and SOC 2
- Designing automated remediation and incident response workflows
ECDE Exam Preparation and Comprehensive Lab
- Understanding the ECDE exam format and effective preparation strategies
- Executing a capstone DevSecOps pipeline lab
- Conducting knowledge checks and assessing readiness
Conclusion and Future Steps
Requirements
- A solid grasp of fundamental DevOps workflows and associated tools
- Basic familiarity with the Software Development Life Cycle (SDLC)
- Foundational knowledge of application security principles is beneficial
Target Audience
- DevOps Engineers
- Application Security Professionals
- Software Developers focused on integrating security features into their pipelines
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
Adam - Fireup.PRO
Course - Advanced Java Security
The topic is current and I needed to be updated