Course Outline
Introduction to DevSecOps and the ECDE Framework
- Core DevSecOps fundamentals and key principles
- Addressing security challenges within DevOps environments
- An overview of the ECDE exam structure and knowledge domains
Cultivating a Secure DevOps Mindset
- Viewing security as a collective team responsibility
- Shifting security activities left in the SDLC
- Aligning stakeholders and defining team roles
Embedding Security within CI/CD Pipelines
- Securing pipelines in Jenkins, GitLab CI, and Azure DevOps
- Managing secrets and configuring secure environments
- Ensuring secure container builds and conducting image scans
Application Security in the DevSecOps Context
- Performing Static and Dynamic Application Security Testing (SAST/DAST)
- Scanning open-source dependencies using SCA tools
- Conducting secure code reviews and adopting best coding practices
Infrastructure as Code and Cloud Security
- Securing configurations for Terraform, Ansible, and Kubernetes
- Implementing IAM and policy-as-code strategies
- Applying DevSecOps in hybrid and multi-cloud settings
Monitoring, Compliance, and Incident Preparedness
- Implementing security monitoring and logging within CI/CD
- Automating compliance processes (e.g., NIST, ISO, SOC 2)
- Establishing automated remediation and incident response workflows
ECDE Exam Preparation and Final Practical Lab
- Understanding the ECDE exam format and preparation strategies
- Completing a capstone DevSecOps pipeline lab
- Conducting knowledge checks and readiness assessments
Conclusion and Future Pathways
Requirements
- A solid understanding of foundational DevOps workflows and associated tools
- Proficiency with the software development lifecycle (SDLC)
- Background knowledge of application security principles is advantageous
Target Audience
- DevOps engineers
- Application security specialists
- Software developers integrating security features into pipelines
Testimonials (3)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
The really lot of extra tools that was mentioned and the real life examples form Mane's experience.
Tamas Adam - Ericsson
Course - Certified Ethical Hacker CEH v.13 AI
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions