Course Outline
Introduction to DevSecOps and the ECDE Framework
- DevSecOps fundamentals and core principles
- Security challenges within DevOps environments
- Overview of the ECDE exam and its domains
Establishing a Secure DevOps Culture and Mindset
- Viewing security as a shared responsibility
- Shifting security left in the SDLC
- Aligning stakeholders and defining team roles
Integrating Security into CI/CD Pipelines
- Securing pipelines in Jenkins, GitLab CI, and Azure DevOps
- Managing secrets and environment configuration
- Ensuring secure container builds and image scanning
Application Security in DevSecOps
- Static and dynamic application security testing (SAST/DAST)
- Scanning open-source dependencies (SCA tools)
- Conducting secure code reviews and adhering to best practices
Infrastructure as Code and Cloud Security
- Securing configurations for Terraform, Ansible, and Kubernetes
- Implementing IAM and policy-as-code
- Applying DevSecOps in hybrid and multi-cloud environments
Monitoring, Compliance, and Incident Readiness
- Executing security monitoring and logging within CI/CD
- Automating compliance (e.g., NIST, ISO, SOC 2)
- Designing automated remediation and incident response workflows
ECDE Exam Preparation and Final Lab
- Understanding the ECDE exam structure and preparation strategies
- Completing a capstone DevSecOps pipeline lab
- Participating in knowledge checks and readiness assessments
Summary and Next Steps
Requirements
- Fundamental understanding of DevOps workflows and tools
- Familiarity with the software development lifecycle (SDLC)
- Knowledge of application security principles is beneficial
Audience
- DevOps engineers
- Application security professionals
- Software developers integrating security into pipelines
Testimonials (4)
The passion with which the trainer disseminates knowledge.
Christoph Weiland - Regionalverband Saarbrucken
Course - .NET, C# and ASP.NET Security Development
Machine Translated
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
The really lot of extra tools that was mentioned and the real life examples form Mane's experience.
Tamas Adam - Ericsson
Course - Certified Ethical Hacker CEH v.13 AI
the knowledge of the trainer was very high - he knew what he was talking about, and knew the answers to our questions
