Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 28 hours
Course Outline
Introduction to DevSecOps and the ECDE Framework
- Core DevSecOps fundamentals and guiding principles.
- Addressing security challenges within DevOps environments.
- An overview of the ECDE exam structure and domains.
Establishing a Secure DevOps Culture and Mindset
- Viewing security as a shared team responsibility.
- Shifting security initiatives left within the SDLC.
- Aligning stakeholders and defining team roles.
Integrating Security into CI/CD Pipelines
- Securing pipelines in Jenkins, GitLab CI, and Azure DevOps.
- Managing secrets and configuring environments securely.
- Secure container builds and image scanning techniques.
Application Security within DevSecOps
- Static and Dynamic Application Security Testing (SAST/DAST).
- Scanning open-source dependencies using SCA tools.
- Conducting secure code reviews and adhering to best practices.
Infrastructure as Code and Cloud Security
- Securing configurations for Terraform, Ansible, and Kubernetes.
- Implementing IAM and policy-as-code strategies.
- Applying DevSecOps in hybrid and multi-cloud environments.
Monitoring, Compliance, and Incident Readiness
- Implementing security monitoring and logging in CI/CD.
- Automating compliance checks (e.g., NIST, ISO, SOC 2).
- Setting up automated remediation and incident response workflows.
ECDE Exam Preparation and Final Lab
- Understanding the ECDE exam structure and preparation strategies.
- Executing a capstone DevSecOps pipeline lab.
- Conducting knowledge checks and readiness assessments.
Summary and Next Steps
Requirements
- A solid understanding of fundamental DevOps workflows and tools.
- Familiarity with the Software Development Lifecycle (SDLC).
- Knowledge of application security principles is advantageous.
Target Audience
- DevOps engineers.
- Application security specialists.
- Software developers seeking to integrate security into their pipelines.
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
Adam - Fireup.PRO
Course - Advanced Java Security
The topic is current and I needed to be updated
