Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 28 hours
Course Outline
Foundations of DevSecOps and the ECDE Framework
- Core concepts and principles of DevSecOps
- Security challenges within DevOps environments
- Overview of the ECDE exam structure and domains
Cultivating a Secure DevOps Mindset
- Viewing security as a shared responsibility
- Shifting security left in the SDLC
- Aligning stakeholders and defining team roles
Embedding Security in CI/CD Pipelines
- Securing Jenkins, GitLab CI, and Azure DevOps pipelines
- Managing secrets and configuring environments
- Building secure containers and scanning images
Application Security in the DevSecOps Context
- Static and dynamic application security testing (SAST/DAST)
- Scanning open-source dependencies using SCA tools
- Conducting secure code reviews and following best practices
Infrastructure as Code and Cloud Security
- Hardening Terraform, Ansible, and Kubernetes configurations
- Implementing IAM and policy-as-code
- Applying DevSecOps in hybrid/multi-cloud environments
Monitoring, Compliance, and Incident Preparedness
- Security monitoring and logging within CI/CD
- Automating compliance (e.g., NIST, ISO, SOC 2)
- Developing automated remediation and incident response workflows
ECDE Exam Preparation and Final Practical
- Structure of the ECDE exam and preparation strategies
- Capstone lab for a complete DevSecOps pipeline
- Knowledge checks and readiness assessments
Conclusion and Future Directions
Requirements
- A solid understanding of fundamental DevOps workflows and associated tools
- Familiarity with the software development lifecycle (SDLC)
- A working knowledge of application security principles is advantageous
Target Audience
- DevOps engineers
- Application security specialists
- Software developers looking to integrate security into their pipelines
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
Adam - Fireup.PRO
Course - Advanced Java Security
The topic is current and I needed to be updated
