Begin Your Cybersecurity Journey With DevSecOps Essentials
The DevSecOps Essentials (D|SE) covers fundamental skills in DevSecOps, providing key insights into identifying application development risks and securing and testing applications within on-premises, cloud providers, and infrastructures. No IT/Cybersecurity experience required for this course.
Test your skills with Capstone Projects and validate these newly acquired skills in proctored exams. With 7 practical labs, 7+ hours of premium self-paced video training, and 10 modules, it ensures students gain recognition and secure better opportunities for the next logical step after D|SE.
Program Information
The DevSecOps Essentials (D|SE) will provide you with the fundamental insights of secure application development. Along with comprehensive lecture videos, hands-on labs, and a globally recognized certificate, the course will help you identify risks and develop test and secure applications.
What skills you’ll learn
- Learn the fundamentals of application development.
- Gain knowledge of application security.
- Understand DevOps and DevSecOps.
- Explore the DevSecOps toolchain.
- Gain insights into DevSecOps and CI/CD pipelines.
- Learn about implementing and using tools for DevSecOps in CI/CD pipeline
Course outline
Module 1: Application Development Concepts
- History of Application Development
- Evolution of Application Development Methodologies
- Introduction to Application Architectures
- Introduction to the Application Development Lifecycle
- Application Testing and Quality Assurance
- Application Monitoring, Maintenance, and Support
Module 2: Application Security Fundamentals
- What is Secure Application Development
- Need for Application Security
- Common Application Security Risks and Threats
- OWASP Top 10
- Application Security Techniques
- Secure Design Principles
- Threat Modeling
- Secure Coding
- Secure Code Review
- SAST and DAST Testing
- Secure Configurations
- Educating Developers
- Role of Risk Management in Secure Development
- Project Management Role in Secure Application Development
Module 3: Introduction to DevOps
- Introduction to DevOps
- DevOps Principles
- DevOps Pipelines
- DevOps and Project Management
Module 4: Introduction to DevSecOps
- Understanding DevSecOps
- DevOps vs. DevSecOps
- DevSecOps Principles
- DevSecOps Culture
- Shift-Left Security
- DevSecOps Pipelines
- Pillars of DevSecOps
- DevSecOps Benefits and Challenges
Module 5: Introduction to DevSecOps Management Tools
- Project Management Tools
- Integrated Development Environment (IDE) Tools
- Source-code Management Tools
- Build Tools
- Continuous Testing Tools
Module 6: Introduction to DevSecOps Code and CI/CD Tools
- Continuous Integration Tools
- Infrastructure as Code Tools
- Configuration Management Tools
- Continuous Monitoring Tools
Module 7: Introduction to DevSecOps Pipelines
- Role of DevSecOps in the CI/CD Pipeline
- DevSecOps Tools
- Embracing the DevSecOps Lifecycle
- DevSecOps Ecosystem
- Key Elements of the DevSecOps Pipeline
- Integrating Security into the DevOps Pipeline
Module 8: Introduction to DevSecOps CI/CD Testing and Assessments
- Implementing Security into the CI/CD Pipeline and Security Controls
- Continuous Security in DevSecOps with Security as Code
- Continuous Application Testing for CI/CD Pipeline Security
- Application Assessments and Penetration Testing
Module 9: Implementing DevSecOps Testing & Threat Modeling
- Integrating Security Threat Modeling in Plan Stage
- Integrating Secure Coding in Code Stage
- Integrating SAST, DAST, and IAST in Build and Test Stage
- Integrating RASP and VAPT in Release and Deploy Stage
