DevSecOps
Embed security into the software lifecycle: secure development, pipeline security, container security, and infrastructure as code.
Select your module(s)
You can select the modules you want to learn. There's a recommended order in the learning curve, unless you already know something and want to go further.
This module introduces DevSecOps, DevOps, and SDLC. Learn to integrate security into software development for enhanced protection.
- Introduction to DevSecOps — Learn about the story of DevSecOps, Software Development Models & Shifting Left.
- SDLC — An introduction to the Software Development Lifecycle.
- SSDLC — This room focuses on the Secure Software Development Lifecycle (S-SDLC), its processes, and methodologies.
This module focuses on platform security, tooling, and the secure flow of code. Explore broader aspects of securing the code's journey through the development, testing, and deployment phases.
- Intro to Pipeline Automation — This room provides an introduction to DevOps pipeline automation and the potential security concerns.
- Source Code Security — Learn how to keep your source code secure using credential hygiene practices.
- CI/CD and Build Security — Learn about CI/CD and build principles to safeguard your pipelines.
Security in the Pipeline module focuses on securing the code, encompassing SAST, DAST, code analysis challenges, and dependency management for robust DevSecOps practices.
- Dependency Management — Learn about the security concerns regarding dependency management in the automated DevOps pipeline.
- SAST — Learn about Static Application Security Testing.
- DAST — Learn about Dynamic Application Security Testing.
- Mother's Secret — Exploit flaws found in Mother's code to reveal its secrets.
Learn how containerisation works, its benefits, potential vulnerabilities, and the steps necessary to secure your container.
- Intro to Containerisation — Learn about the technologies and benefits of containerisation.
- Intro to Docker — Learn to create, build and deploy Docker containers!
- Intro to Kubernetes — An introduction to Kubernetes covering the basics of cluster creation and hardening.
- Container Vulnerabilities — Learn how some of the common vulnerabilities found within Docker containers can be exploited.
- Container Hardening — Learn how to implement the mechanisms designed to secure your Docker containers.
Learn the Infrastructure as Code fundamentals and best security practices to follow as a DevSecOps Engineer.
- Intro to IaC — An introduction to infrastructure as code.
- On-Premises IaC — This room provides security guidance for on-premises infrastructure as code deployments.
- Cloud-based IaC — Learn about infrastructure as code (IaC) using tools for cloud deployment.
Includes Lab practices. All prices are monthly (MXN), before taxes.
Plan your training path
Tell us your team, schedule and modules of interest and we will reply with the next steps.
Request informationOnline enrollment is coming soon. In the meantime, contact us to enroll.