The DevSecOps Engineer path
The security path. You harden hosts, manage secrets and identity, build security testing and supply-chain checks into pipelines, lock down containers and clusters, model threats and respond when prevention fails.
Who it is for
DevOps engineers taking on security ownership, security engineers who want to work inside delivery pipelines, and platform teams responsible for guardrails.
Milestones
-
01
Harden the host
Accounts, SSH, firewalls and auditing on the machines you are defending.
- ModuleOS Hardening Basics 6 lessons
- IncidentDeploy Key Exposed to Local Users
- IncidentDeveloper SSH Login Is Rejected
-
02
Secrets and identity
Vaults, rotation, RBAC and the protocols behind every login.
- ModuleSecrets Management 7 lessons
- ModuleIAM & Compliance 12 lessons
-
03
Secure the pipeline
Scanning, testing and provenance on every build.
- ModulePipeline Security 4 lessons
- ModuleSAST/DAST Security Testing 9 lessons
- ModuleSupply Chain Security 9 lessons
-
04
Containers and Kubernetes
Minimal signed images and workloads that run with least privilege.
- ModuleContainer Security 4 lessons
- ModuleKubernetes Security 8 lessons
- IncidentWebapp Pods Never Become Available
-
05
Think like an attacker
Threat models, runtime detection and a response plan that works under pressure.
- ModuleThreat Modeling 10 lessons
- ModuleRuntime Defense 9 lessons
- ModuleSecurity Incident Response 9 lessons
-
06
Cloud posture and zero trust
Guardrails, segmentation and continuous verification across the estate.
- ModuleCloud Security 9 lessons
- ModuleZero Trust Security 9 lessons
- AssessmentSecurity (DevSecOps) track final