Course Modules

Module 1: Introduction to DevSecOps
• DevOps vs DevSecOps
• Security integration principles
• DevSecOps lifecycle
• Case Study & Practical Application: Transitioning to DevSecOps culture

Module 2: Secure Software Development Lifecycle (SDLC)
• SDLC security integration
• Security checkpoints
• Risk management
• Case Study & Practical Application: Securing a software development pipeline

Module 3: Secure Coding Practices
• Common vulnerabilities (OWASP Top 10)
• Secure coding guidelines
• Code review techniques
• Case Study & Practical Application: Identifying vulnerabilities in application code

Module 4: CI/CD Pipeline Security
• Secure pipeline design
• Automated security testing
• Build integrity verification
• Case Study & Practical Application: Securing a CI/CD workflow

Module 5: Container and Cloud Security
• Docker security
• Kubernetes security
• Cloud infrastructure protection
• Case Study & Practical Application: Securing cloud-native applications

Module 6: Application Security Testing
• Static and dynamic testing
• Vulnerability scanning
• Penetration testing basics
• Case Study & Practical Application: Running security tests on applications

Module 7: Infrastructure as Code Security
• IaC principles
• Secure configuration management
• Automation security checks
• Case Study & Practical Application: Securing infrastructure deployment scripts

Module 8: Monitoring and Threat Detection
• Security monitoring tools
• Incident detection systems
• Log analysis
• Case Study & Practical Application: Detecting anomalies in application logs

Module 9: Compliance and Governance
• Security standards (ISO, GDPR)
• Policy enforcement
• Audit readiness
• Case Study & Practical Application: Preparing a compliance audit report

Module 10: Capstone Project – DevSecOps Implementation
• End-to-end secure pipeline design
• Threat modeling
• Final project presentation