DevSecOps Essentials with Practical Demos

The complete course covering what you need to know to get started in DevSecOps and exactly how to do it!

Created by: Northern APT
Certified and experienced security professional

What Will I Learn?

• DevSecOps tooling e.g. SAST, DAST, SCA, CNAPP, Git explained
• How to add security testing to pipelines - turn a DevOps pipeline into a DevSecOps pipeline
• Key security principles explained such as defence in depth and least privilege
• YAML explained and how to use it in CI/CD pipelines
• What is OWASP and key OWASP projects explained such as OWASP Top 10 and ASVS
• Other key security related organisations and projects such as CISA, CVEs and CIS benchmarks
• Linux security fundamentals explained
• What you need to focus on to enable security testing in CI/CD pipelines
• Docker explained. How to use, build and secure Docker containers
• Kubernetes (k8s) explained. How to use and secure your Kubernetes cluster
• Terraform explained. How to use and secure your Terraform code
• How to secure your third party dependencies (and what they are)
• Jenkins explained. How to use and secure your Jenkins instances
• And much more e.g. how to secure TLS, SSH, HTTP headers and more!

Requirements

• An IT background for the majority of students would be a prerequisite. This is because DevSecOps is an advanced IT topic, and it would be difficult to jump into such topics without existing IT knowledge. However, please note no security knowledge is required. Security fundamentals will be covered in this course.

Target audience

• Aspiring DevSecOps and cyber security professionals.
• Developers looking to secure their SDLC or learn more about security and DevSecOps.
• IT professionals looking to learn more about security and DevSecOps.