DevSecOps – Security in the DevOps Cycle

EITT is a leading provider of IT and business training in Poland with over 15 years of experience. We specialize in modern technologies, management methodologies, and professional skills development.

This training introduces participants to the world of security integrated with DevOps practices. The program combines theory with practical workshops, during which participants learn to implement security measures at every stage of the software development lifecycle. The sessions focus on automating security tests, implementing security policies, and integrating security tools in CI/CD pipelines. Special emphasis is placed on the practical aspects of securing DevOps processes.

This training is dedicated to specialists involved in production processes and security, including DevOps engineers looking to expand their knowledge of security aspects, security specialists implementing DevSecOps practices, programmers interested in secure software development, and solution architects responsible for designing secure systems. The program is also valuable for security auditors, pentesters integrating with CI/CD processes, and DevOps team managers planning to implement security practices.

Implementing a culture and practices of DevSecOps for secure and rapid software delivery.

• Participants will gain practical knowledge allowing them to implement security in DevOps processes.
• They will learn methods for automating security tests, integrate security tools in CI/CD pipelines, and acquire the skills to design secure systems in a cloud-native architecture.
• The training provides an understanding of best practices in DevSecOps, the ability to respond to incidents in an automated environment, and the capability to measure and improve security levels.
• Upon completion of the course, they will receive a certificate confirming their acquired competencies.

Fundamentals of DevSecOps:

• Integrating security in the DevOps cycle
• Threat modeling in the context of CI/CD
• Automating security tests
• Risk management in automated processes

Implementing Security:

• Security testing in pipelines
• Scanning for vulnerabilities in applications and infrastructure
• Managing secrets in an automated environment
• Security monitoring

Infrastructure Security:

• Securing container environments
• Security in Infrastructure as Code
• Hardening production systems
• Automating security policies

Response and Improvement:

• Incident response in a DevOps environment
• Security metrics and KPIs
• Continuous security improvement
• Audit and compliance

2 days (16h)

• Electronic training materials
• Certificate of completion
• Access to the e-learning platform (30 days)
• Trainer support after the training