Course Outline
Introduction to DevSecOps and the ECDE Framework
- Foundations and core principles of DevSecOps.
- Addressing security challenges inherent in DevOps environments.
- An overview of the ECDE examination structure and key domains.
Establishing a Secure DevOps Culture and Mindset
- Viewing security as a collective responsibility.
- Shifting security considerations left within the SDLC.
- Aligning stakeholders and defining clear team roles.
Embedding Security within CI/CD Pipelines
- Hardening pipelines in Jenkins, GitLab CI, and Azure DevOps.
- Managing secrets and configuring environments securely.
- Ensuring secure container builds and performing image scanning.
Application Security in the Context of DevSecOps
- Employing Static and Dynamic Application Security Testing (SAST/DAST).
- Scanning open-source dependencies using SCA tools.
- Conducting secure code reviews and adhering to best coding practices.
Infrastructure as Code and Cloud Security
- Securing configurations for Terraform, Ansible, and Kubernetes.
- Implementing IAM and policy-as-code strategies.
- Applying DevSecOps principles in hybrid and multi-cloud environments.
Monitoring, Compliance, and Incident Readiness
- Implementing security monitoring and logging within CI/CD processes.
- Automating compliance adherence (e.g., NIST, ISO, SOC 2).
- Developing automated remediation and incident response workflows.
ECDE Exam Preparation and Final Practical Lab
- Understanding the ECDE exam format and effective preparation strategies.
- Completing a capstone DevSecOps pipeline lab.
- Undertaking knowledge checks and readiness assessments.
Summary and Future Steps
Requirements
- A solid understanding of fundamental DevOps workflows and associated tools.
- Familiarity with the Software Development Lifecycle (SDLC).
- Knowledge of application security principles is advantageous.
Target Audience
- DevOps engineers.
- Application security professionals.
- Software developers focused on integrating security into their pipelines.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 5200 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
Adam - Fireup.PRO
Course - Advanced Java Security
The topic is current and I needed to be updated
