What does the Practical DevSecOps Course focus on?

The Practical DevSecOps is an introduction to integrating security practices into the software development lifecycle (SDLC) using the DevSecOps approach. The major aspect of it is that security should be included in all the stages of development; it’s not just a thing of bolt-on afterthought. This course takes a security glossary of security concepts and adds a security layer to the foundational principles of DevOps, thereby translating security into each step of the continuous integration (CI) and continuous deployment (CD) pipelines.

Automated security testing, threat modeling, vulnerability management, code analysis and compliance monitoring are key topics to name just a few. The course also teaches how to use tools like OWASP ZAP, Snyk, Docker and Kubernetes to secure applications, containers and microservices.

Students learn how to properly perform security scans, and set up practices to secure code, as well as handle security incidents.Furthermore, the course looks at how development, security, and operation teams collaborate together, building a culture of shared ownership for security. There is an emphasis on security policies, security check automation and securing cloud environments.

Who should take this Practical Devsecops Course?

The Practical DevSecOps Course is for software development, security, and operations professionals looking to integrate security into the DevOps pipeline. That could be DevOps Engineers, Security Engineers, Software Developers, System Administrators as well as Cloud Architects. This may also be of use to Penetration Testers and Compliance Professionals looking to build up their application and infrastructure security skillset.

Furthermore, those reading into Continuous Integration/Continuous Deployment (CI/CD) and cloud security will also find this guide useful. This course is meant for anyone who wants to enhance their secure coding practices, automates security, and manages vulnerabilities in an agile environment.

What will I learn about computer tools in this course?

The Practical DevSecOps Course teaches you how to use some of the computer tools that are actually needed for DevOps security integration. These tools automate security tasks, scan for vulnerabilities and make sure your code, infra, and deployments are secure. Key tools you’ll learn to use include

OWASP ZAP: Code exposed in 2012 on GitHub, an open source tool for automated security testing of web applications, used to find vulnerabilities such as cross site scripting (XSS) and SQL injection.

What will I learn about computer tools in this course?

The Practical DevSecOps Course teaches you how to use some of the computer tools that are actually needed for DevOps security integration. These tools automate security tasks, scan for vulnerabilities and make sure your code, infra, and deployments are secure. Key tools you’ll learn to use include

OWASP ZAP: Code exposed in 2012 on GitHub, an open source tool for automated security testing of web applications, used to find vulnerabilities such as cross site scripting (XSS) and SQL injection.

Snyk: A tool that plugs in into your CI/CD pipelines and help you to find vulnerabilities in your code's dependencies. Docker: This will teach you how to leverage Docker* to build containerized applications that are secure, that is, your containers are not vulnerable. Kubernetes: Knowing the right way to protect your container orchestration platform especially when dealing with microservices and cloud native applications. SonarQube: Static code analysis tool that helps to find and fix bugs, vulnerabilities and security issues into your code before you deploy.

Is some prior experience of DevOps or security required for this course?

It’s not necessary to have prior experience in DevOps or security before enrolling in the Practical DevSecOps Course, including that you know what either one is. The course is approachable if you have any experience around the DevOps practices like continuous integration and deployment (CI/CD) or if you know things like the basics of security like vulnerability management, secure coding, etc.

The course is aimed at beginners, however, even if you're new to either DevOps or security it will still be of value assuming you have a basic understanding of how IT works.