Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of DevSecOps and the ECDE Framework
- Essential DevSecOps concepts and guiding principles
- Addressing security challenges within DevOps ecosystems
- Insight into the ECDE examination structure and key domains
Cultivating a Secure DevOps Mindset
- Framing security as a collective responsibility
- Implementing the “shift-left” security approach in the SDLC
- Aligning stakeholder expectations and defining team roles
Enhancing Security in CI/CD Pipelines
- Fortifying Jenkins, GitLab CI, and Azure DevOps pipelines
- Managing secrets and configuring secure environments
- Ensuring secure container builds and conducting image scans
Application Security within the DevSecOps Context
- Conducting Static and Dynamic Application Security Testing (SAST/DAST)
- Scanning open-source dependencies using SCA tools
- Executing secure code reviews and adhering to best coding practices
Infrastructure as Code and Cloud Security Postures
- Securing configurations in Terraform, Ansible, and Kubernetes
- Implementing IAM and policy-as-code strategies
- Applying DevSecOps principles in hybrid and multi-cloud settings
Monitoring, Compliance, and Incident Preparedness
- Establishing security monitoring and logging within CI/CD
- Automating compliance processes (e.g., NIST, ISO, SOC 2)
- Developing automated remediation and incident response workflows
ECDE Exam Readiness and Comprehensive Lab
- Understanding the ECDE exam format and strategic preparation tips
- Completing a capstone DevSecOps pipeline project
- Undertaking knowledge checks and readiness assessments
Recap and Path Forward
Requirements
- Proficiency with fundamental DevOps workflows and associated tools
- Working knowledge of the software development lifecycle (SDLC)
- Background in application security principles is advantageous
Target Audience
- DevOps engineers
- Application security specialists
- Software developers seeking to embed security within their pipelines
28 Hours
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
Adam - Fireup.PRO
Course - Advanced Java Security
The topic is current and I needed to be updated
