Description
The DevSecOps Training is a 2-day, live online or in-person program that addresses security together with software development and DevOps processes. It is designed for participants with basic software development knowledge and a general understanding of DevOps principles and security fundamentals.
The 10-module curriculum covers CI/CD, secure coding, security automation, SAST/DAST, security monitoring, and incident response. Compliance, team collaboration, and the DevSecOps toolchain are also part of the program. You can review the scope and request a training plan and quote for your organization’s development, security, and operations teams.
Outline
Module 1: Introduction to DevSecOps
- Understanding the DevSecOps philosophy and principles
- Benefits and challenges of implementing DevSecOps
- DevSecOps vs. traditional security approaches
Module 2: DevOps Fundamentals
- Overview of DevOps principles and practices
- Continuous integration and continuous delivery (CI/CD)
- Collaboration and communication in DevOps teams
Module 3: Security Fundamentals
- Common security threats and vulnerabilities
- Secure coding practices and secure development methodologies
- Security controls and best practices
Module 4: Integrating Security into DevOps
- Security as code: Infrastructure as Code (IaC) and security automation
- Secure configuration management and system hardening
- Secrets management and secure credential handling
Module 5: Continuous Security Testing
- Introduction to security testing techniques and tools
- Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST)
- Security scanning, vulnerability assessment, and penetration testing
Module 6: Security Monitoring and Incident Response
- Continuous security monitoring and log analysis
- Incident response and handling security incidents in DevOps environments
- Security information and event management (SIEM) tools
Module 7: Compliance and Governance in DevSecOps
- Regulatory compliance requirements (e.g., GDPR, PCI DSS)
- Audit trails and compliance reporting
- Security policies and procedures in DevSecOps
Module 8: Cultural Shift and Team Collaboration
- Building a security-aware culture in DevOps teams
- DevSecOps roles and responsibilities
- Collaborative workflows and cross-functional collaboration
Module 9: DevSecOps Toolchain
- Overview of popular DevSecOps tools and technologies
- Source code analysis tools, vulnerability scanners, and security testing frameworks
- Security orchestration and automation platforms (SOAP)
Module 10: Case Studies and Best Practices
- Real-world DevSecOps implementation examples
- Best practices for successful DevSecOps adoption
- Lessons learned and future trends in DevSecOps
Prerequisites
Basic knowledge of software development
A general understanding of DevOps principles and security fundamentals.
Related Training and Quote
For a secure coding focus, see the Secure Software Development Training; for an awareness-focused program, see the Secure Software Development Awareness Training pages.
To get a training plan and price quote for your organization, you can fill out the Contact Form on this page. For other ways to reach us, use the BlueMark Academy contact page.
Frequently Asked Questions
How Many Days Does the DevSecOps Training Last?
The program lasts 2 days.
Is the Training Online?
The training format is listed as live online or in person.
What Are the Prerequisites?
Basic software development knowledge and a general understanding of DevOps principles and security fundamentals are required.
Are SAST, DAST, and CI/CD Covered?
Yes. Continuous integration and delivery, along with static and dynamic application security testing, are part of the curriculum.
Does the Training Cover Security Monitoring and Compliance?
Yes. Continuous security monitoring, incident response, SIEM tools, compliance requirements, and reporting are included in the program.
How Can I Get a Quote for Corporate Training?
You can share your organization’s training needs through the Contact Form on this page and request a training plan and price quote.