Security (DevSecOps)

What you'll be able to do

• Implement secure secrets management
• Scan containers for vulnerabilities
• Integrate SAST/DAST into CI/CD
• Configure IAM and compliance controls
• Secure Kubernetes workloads

Modules

1. 01

   Secrets Management

   HashiCorp Vault, AWS KMS, rotation patterns, and secure secret storage

   7 lessons
   3 h

2. 02

   Container Security

   Image scanning, Trivy, runtime security, and container hardening

   4 lessons
   3 h

3. 03

   SAST/DAST Security Testing

   Static and dynamic application security testing with SonarQube and OWASP ZAP

   9 lessons
   4 h

4. 04

   IAM & Compliance

   Identity and Access Management, RBAC, SOC2, and audit logging

   12 lessons
   3 h

5. 05

   Kubernetes Security

   Pod security, network policies, admission controllers, and runtime security

   8 lessons
   4 h

6. 06

   Threat Modeling

   Identify risks early and prioritize security controls

   10 lessons
   3 h

7. 07

   Application Security

   Secure design, testing, and runtime controls for apps

   9 lessons
   3 h

8. 08

   Identity and Access Deep Dive

   Advanced IAM patterns, privilege management, and audits

   9 lessons
   3 h

9. 09

   Supply Chain Security

   Protect source, build, and artifact integrity

   9 lessons
   3 h

10. 10

    Data Protection

    Classify, encrypt, and retain data safely

    9 lessons
    3 h

11. 11

    Cloud Security

    Shared responsibility, network controls, and posture management

    9 lessons
    3 h

12. 12

    Runtime Defense

    Detect and respond to threats in running systems

    9 lessons
    3 h

13. 13

    Security Incident Response

    Prepare, respond, and learn from security incidents

    9 lessons
    3 h

14. 14

    Governance, Risk, and Compliance

    Build security programs that meet regulatory requirements

    9 lessons
    3 h

15. 15

    Zero Trust Security

    Assume breach and verify continuously

    9 lessons
    3 h