EC-Council
EC-Council DevSecOps Essentials (DSE)
A two-day introduction to DevSecOps.
2 daysFoundation10 modules
About this course
A two-day introduction to DevSecOps. You will learn application development and security fundamentals, DevOps and DevSecOps concepts and the tools used to secure code, pipelines and operations.
What you'll learn
- Learn the fundamentals of application development.
- Gain knowledge of application security.
- Understand DevOps and DevSecOps.
- Explore the DevSecOps toolchain.
- Gain insights into DevSecOps and CI/CD pipelines.
- Learn about implementing and using tools for DevSecOps in CI/CD pipelines.
Curriculum
10 modules
- History of Application Development
- Evolution of Application Development Methodologies
- Introduction to Application Architectures
- Introduction to the Application Development Lifecycle
- Application Testing and Quality Assurance
- Application Monitoring, Maintenance, and Support
- What is Secure Application Development
- Need for Application Security
- Common Application Security Risks and Threats
- OWASP Top 10
- Application Security Techniques
- Secure Design Principles
- Threat Modeling
- Secure Coding
- Secure Code Review
- SAST and DAST Testing
- Secure Configurations
- Educating Developers
- Role of Risk Management in Secure Development
- Project Management Role in Secure Application Development
- Introduction to DevOps
- DevOps Principles
- DevOps Pipelines
- DevOps and Project Management
- Understanding DevSecOps
- DevOps vs. DevSecOps
- DevSecOps Principles
- DevSecOps Culture
- Project Management Tools
- Integrated Development Environment (IDE) Tools
- Source-code Management Tools
- Build Tools
- Continuous Testing Tools
- Continuous Integration Tools
- Infrastructure as Code Tools
- Configuration Management Tools
- Continuous Monitoring Tools
- Role of DevSecOps in the CI/CD Pipeline
- DevSecOps Tools
- Embracing the DevSecOps Lifecycle
- DevSecOps Ecosystem
- Key Elements of the DevSecOps Pipeline
- Integrating Security into the DevOps Pipeline
- Implementing Security into the CI/CD Pipeline and Security Controls
- Continuous Security in DevSecOps with Security as Code
- Continuous Application Testing for CI/CD Pipeline Security
- Application Assessments and Penetration Testing
- Integrating Security Threat Modeling in Plan Stage
- Integrating Secure Coding in Code Stage
- Integrating SAST, DAST, and IAST in Build and Test Stage
- Integrating RASP and VAPT in Release and Deploy Stage
- Implementing Infrastructure as Code (IaC)
- Integrating Configuration Orchestration
- Integrating Security in Operate and Monitor Stage
- Integrating Compliance as Code (CaC)
- Integrating Logging, Monitoring, and Alerting
- Integrating Continuous Feedback Loop
Who it's for
Students, career starters and developers new to security.
Before you start
No formal prerequisites. Bring curiosity and a willingness to practise.
Related courses
More in EC-Council →Foundation
Artificial Intelligence Essentials (AIE)
EC-Council
View course →Intermediate
Certified AI Program Manager (CAIPM)
EC-Council
View course →Intermediate
Certified Offensive AI Security Professional (COASP)
EC-Council
View course →Intermediate
Certified Responsible AI Governance & Ethics (CRAGE)
EC-Council
View course →Intermediate
EC-Council Certified Application Security Engineer (CASE).NET
EC-Council
View course →Intermediate
EC-Council Certified Chief Information Security Officer (C|CISO)
EC-Council
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.