Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of DevSecOps and the ECDE Framework
- Core concepts and principles of DevSecOps
- Security challenges specific to DevOps environments
- Introduction to the ECDE exam structure and key domains
Cultivating a Secure DevOps Mindset
- Viewing security as a collective team responsibility
- Implementing 'shift-left' security strategies within the SDLC
- Aligning stakeholders and defining team roles
Embedding Security in CI/CD Pipelines
- Enhancing the security of Jenkins, GitLab CI, and Azure DevOps pipelines
- Managing secrets and configuring secure environments
- Building secure containers and scanning images for vulnerabilities
Application Security within DevSecOps
- Conducting Static and Dynamic Application Security Testing (SAST/DAST)
- Scanning open-source dependencies using SCA tools
- Performing secure code reviews and adhering to best coding practices
Infrastructure as Code and Cloud Security
- Securing configurations for Terraform, Ansible, and Kubernetes
- Implementing IAM and policy-as-code strategies
- Applying DevSecOps in hybrid and multi-cloud environments
Monitoring, Compliance, and Incident Preparedness
- Establishing security monitoring and logging within CI/CD
- Automating compliance for frameworks such as NIST, ISO, and SOC 2
- Creating automated remediation and incident response workflows
ECDE Exam Readiness and Capstone Lab
- Understanding the ECDE exam format and receiving preparation advice
- Completing a comprehensive DevSecOps pipeline capstone project
- Undertaking knowledge checks and readiness assessments
Conclusion and Future Directions
Requirements
- A solid understanding of fundamental DevOps workflows and associated tools
- Experience with the software development lifecycle (SDLC)
- A background in application security principles is beneficial
Target Audience
- DevOps engineers
- Application security specialists
- Software developers focused on integrating security into their pipelines
28 Hours
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
Adam - Fireup.PRO
Course - Advanced Java Security
The topic is current and I needed to be updated
