Certified DevOps Security Professional

Course details

DevOps security refers to the discipline and practice of safeguarding the entire DevOps environment through strategies, policies, processes, and technology. Security should be built into every part of the DevOps lifecycle, including inception, design, build, test, release, support, maintenance, and beyond.

Today, this type of "baked-in" DevOps security is often called DevSecOps, which aims to improve security through improved collaboration and shared the responsibility that overlays the entire DevOps workflow.

Note: Please note that the course comes with online e-learning (videos) only. No hard copy will be provided.

Why should one take DevOps Security Certification?
The certification is suitable for web developers, programmers and graduates wanting to excel in web application development areas. It is also well suited for those who are already working and would like to take certification for further career progression in web application development.

Earning Vskills DevOps Certification can help candidate differentiate in today's competitive job market, broaden their employment opportunities by displaying their advanced skills, and result in higher earning potential.

Who will benefit from taking DevOps Security Certification?
Job seekers looking to find employment in IT or software development departments of various companies, students who want to learn DevOps Security.
 
Benefits of Certification

• Government certification
• Certification valid for life
• Lifelong e-learning access
• Learning Hours: 12+ hrs

 
How It Works

1. Select Certification & Register
2. Receive Online e-Learning Access (LMS)
3. Take exam online anywhere, anytime
4. Get certified & Increase Employability

Test Details

• Duration: 60 minutes
• No. of questions: 50
• Maximum marks: 50, Passing marks: 25 (50%).
• There is NO negative marking in this module.
• Online exam.

 
TABLE OF CONTENT

Integrate Security within DevOps

• Integrate Security for a DevOps World
• Risk Management in a Rapidly Changing World
• Key Principles and Benefits of Secure DevOps
• Business-Driven Security Strategies
• OWASP Security Guidelines

Applying Shift Left Security Approach

• Integrating Security Into CI/CD Pipeline
• Automated Security Testing
• Tools of the Trade
• Red and Blue Teams

Securing Development Practices

• Security Requirements
• Architectural Considerations
• Threat Modeling, Data Flow Diagrams, and Attack Surface
• Identity and Access Management
• Code Inspection
• Environment Hardening

Security Verification in the Pipeline

• What Is Static Application Security Testing?
• Embed SAST into the CI/CD Pipeline
• What Is Dynamic Application Security Testing?
• Embed DAST Into the Pipeline
• Runtime Application Self-Protection (RASP) versus Interactive Application Security Testing (IAST)
• Software Composition Analysis

Deploy Secure Software

• Infrastructure as Code
• Key Management and Identity Management
• Chaos Monkey and Fuzz Testing

Security in System Monitoring

• Security Monitoring
• Governance, Risk, Compliance and Audit
• Incident Response and Forensics

Updated on 19 December, 2023