Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 28 hours
Course Outline
Introduction to DevSecOps and the ECDE Framework
- Core fundamentals and principles of DevSecOps
- Security challenges inherent in DevOps environments
- Overview of the ECDE examination structure and key domains
Secure DevOps Culture and Mindset
- Viewing security as a collective responsibility
- Shifting security initiatives left within the SDLC
- Aligning stakeholders and defining team roles
Integrating Security in CI/CD Pipelines
- Securing Jenkins, GitLab CI, and Azure DevOps pipelines
- Managing secrets and configuring environments securely
- Ensuring secure container builds and performing image scanning
Application Security in DevSecOps
- Static and dynamic application security testing (SAST/DAST)
- Scanning open-source dependencies using SCA tools
- Conducting secure code reviews and adhering to best coding practices
Infrastructure as Code and Cloud Security
- Securing configurations for Terraform, Ansible, and Kubernetes
- Implementing IAM controls and policy-as-code
- Applying DevSecOps in hybrid and multi-cloud environments
Monitoring, Compliance, and Incident Readiness
- Establishing security monitoring and logging within CI/CD
- Automating compliance for frameworks such as NIST, ISO, and SOC 2
- Designing automated remediation and incident response workflows
ECDE Exam Preparation and Final Lab
- ECDE exam structure and strategic preparation tips
- Capstone project involving a full DevSecOps pipeline lab
- Knowledge assessments and readiness checks
Summary and Next Steps
Requirements
- A solid understanding of fundamental DevOps workflows and associated tools
- Familiarity with the software development lifecycle (SDLC)
- A basic knowledge of application security principles is advantageous
Target Audience
- DevOps engineers
- Application security specialists
- Software developers integrating security controls into their pipelines
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
Adam - Fireup.PRO
Course - Advanced Java Security
The topic is current and I needed to be updated
