Course Outline
Introduction to DevSecOps and the ECDE Framework
- Foundations and core principles of DevSecOps
- Security challenges prevalent in DevOps environments
- An overview of the ECDE exam structure and key domains
Culturing Secure DevOps Mindsets
- Viewing security as a collective responsibility
- Shifting security efforts left within the SDLC
- Aligning stakeholders and defining team roles
Security Integration in CI/CD Pipelines
- Hardening Jenkins, GitLab CI, and Azure DevOps pipelines
- Managing secrets and configuring environments securely
- Executing secure container builds and image scans
Application Security within DevSecOps
- Conducting Static and Dynamic Application Security Testing (SAST/DAST)
- Scanning open-source dependencies using SCA tools
- Performing secure code reviews and adhering to best practices
Infrastructure as Code and Cloud Security
- Securing configurations for Terraform, Ansible, and Kubernetes
- Implementing IAM and policy-as-code strategies
- Applying DevSecOps in hybrid and multi-cloud settings
Monitoring, Compliance, and Incident Preparedness
- Implementing security monitoring and logging within CI/CD
- Automating compliance for standards such as NIST, ISO, and SOC 2
- Establishing automated remediation and incident response workflows
ECDE Exam Preparation and Capstone Lab
- Understanding the ECDE exam structure and preparation strategies
- Completing a comprehensive DevSecOps pipeline lab
- Participating in knowledge checks and readiness assessments
Wrap-Up and Future Directions
Requirements
- A solid understanding of fundamental DevOps workflows and associated tools
- Acquaintance with the Software Development Lifecycle (SDLC)
- A knowledge of application security principles is advantageous
Target Audience
- DevOps Engineers
- Application Security Specialists
- Software Developers seeking to integrate security into their pipelines
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 6400 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
Adam - Fireup.PRO
Course - Advanced Java Security
The topic is current and I needed to be updated