Get in Touch
 Duration 28 hours (4 days)

Course Outline

Introduction to DevSecOps and the ECDE Framework

  • Foundations and core principles of DevSecOps
  • Security challenges prevalent in DevOps environments
  • An overview of the ECDE exam structure and key domains

Culturing Secure DevOps Mindsets

  • Viewing security as a collective responsibility
  • Shifting security efforts left within the SDLC
  • Aligning stakeholders and defining team roles

Security Integration in CI/CD Pipelines

  • Hardening Jenkins, GitLab CI, and Azure DevOps pipelines
  • Managing secrets and configuring environments securely
  • Executing secure container builds and image scans

Application Security within DevSecOps

  • Conducting Static and Dynamic Application Security Testing (SAST/DAST)
  • Scanning open-source dependencies using SCA tools
  • Performing secure code reviews and adhering to best practices

Infrastructure as Code and Cloud Security

  • Securing configurations for Terraform, Ansible, and Kubernetes
  • Implementing IAM and policy-as-code strategies
  • Applying DevSecOps in hybrid and multi-cloud settings

Monitoring, Compliance, and Incident Preparedness

  • Implementing security monitoring and logging within CI/CD
  • Automating compliance for standards such as NIST, ISO, and SOC 2
  • Establishing automated remediation and incident response workflows

ECDE Exam Preparation and Capstone Lab

  • Understanding the ECDE exam structure and preparation strategies
  • Completing a comprehensive DevSecOps pipeline lab
  • Participating in knowledge checks and readiness assessments

Wrap-Up and Future Directions

Requirements

  • A solid understanding of fundamental DevOps workflows and associated tools
  • Acquaintance with the Software Development Lifecycle (SDLC)
  • A knowledge of application security principles is advantageous

Target Audience

  • DevOps Engineers
  • Application Security Specialists
  • Software Developers seeking to integrate security into their pipelines

Custom Corporate Training

Training solutions designed exclusively for businesses.

  • Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
  • Flexible Schedule: Dates and times adapted to your team's agenda.
  • Format: Online (live), In-company (at your offices), or Hybrid.
Investment

Price per private group, online live training, starting from 6400 € + VAT*

Contact us for an exact quote and to hear our latest promotions

Testimonials (3)

Provisional Upcoming Courses (Contact Us For More Information)

Related Categories