Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 28 hours
Course Outline
Introduction to DevSecOps and the ECDE Framework
- Core DevSecOps fundamentals and key principles
- Addressing security challenges within DevOps environments
- An overview of the ECDE exam structure and knowledge domains
Cultivating a Secure DevOps Mindset
- Viewing security as a collective team responsibility
- Shifting security activities left in the SDLC
- Aligning stakeholders and defining team roles
Embedding Security within CI/CD Pipelines
- Securing pipelines in Jenkins, GitLab CI, and Azure DevOps
- Managing secrets and configuring secure environments
- Ensuring secure container builds and conducting image scans
Application Security in the DevSecOps Context
- Performing Static and Dynamic Application Security Testing (SAST/DAST)
- Scanning open-source dependencies using SCA tools
- Conducting secure code reviews and adopting best coding practices
Infrastructure as Code and Cloud Security
- Securing configurations for Terraform, Ansible, and Kubernetes
- Implementing IAM and policy-as-code strategies
- Applying DevSecOps in hybrid and multi-cloud settings
Monitoring, Compliance, and Incident Preparedness
- Implementing security monitoring and logging within CI/CD
- Automating compliance processes (e.g., NIST, ISO, SOC 2)
- Establishing automated remediation and incident response workflows
ECDE Exam Preparation and Final Practical Lab
- Understanding the ECDE exam format and preparation strategies
- Completing a capstone DevSecOps pipeline lab
- Conducting knowledge checks and readiness assessments
Conclusion and Future Pathways
Requirements
- A solid understanding of foundational DevOps workflows and associated tools
- Proficiency with the software development lifecycle (SDLC)
- Background knowledge of application security principles is advantageous
Target Audience
- DevOps engineers
- Application security specialists
- Software developers integrating security features into pipelines
Testimonials (3)
Red team-blue team session
Moroe Mircea - Airbus
Course - Certified Ethical Hacker CEH v.13 AI
Machine Translated
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions