Course Outline
Foundational Concepts of the SDLC and Secure SDLC Frameworks
Implementing SDLC Automation via CD/CD Methodologies
Integrating the SDLC through DevOps Frameworks
Achieving SDLC Automation, Integration, and Security through DevSecOps
Application of OWASP DevSecOps Toolsets
Conducting Threat Modeling with OWASP Threat Dragon
Managing SBOM Integration via OWASP CycloneDX
Automating Vulnerability Detection using OWASP Dependency Track
Managing the Vulnerability Lifecycle with OWASP DefectDojo
Embedding SAST and DAST Tools within Software Pipelines
The curriculum features practical exercises utilizing industry-standard tools for secure SDLC and DevSecOps for government, including:
- Threat Modeling: OWASP Threat Dragon
- Software Bill of Materials (SBOM): OWASP CycloneDX
- Vulnerability Scanning: OWASP Dependency Track
- Vulnerability Lifecycle Management: OWASP DefectDojo
- CI/CD Pipeline Tools: Jenkins, GitHub Actions, GitLab CI/CD
- Security Testing Tools: Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) solutions
This program delivers several critical advantages, positioning it as a valuable resource for professionals seeking to advance their competencies in secure software development:
Strengthened Security Proficiency – Acquire expert-level knowledge in embedding security controls within SDLC, DevOps, and CI/CD pipelines.
Practical Application – Engage with leading OWASP tools to facilitate security automation and vulnerability management.
Professional Development – Secure SDLC and DevSecOps capabilities are highly sought after, creating new career pathways.
Regulatory Compliance and Risk Reduction – Master the implementation of security controls that satisfy standards such as ISO 27001, NIST, and GDPR for government compliance.
Operational Efficiency – Automate security validations to minimize manual intervention while elevating application integrity.
Strategic Advantage – Public and private entities benefit from identifying vulnerabilities early in the lifecycle, thereby reducing the time and financial costs associated with late-stage remediation.
This training represents a strategic investment for professionals and organizations dedicated to building secure, resilient, and compliant software solutions for government operations.
Requirements
To ensure an optimal learning experience in this course, participants must meet the following prerequisites:
- A fundamental understanding of software development and SDLC concepts.
- Proficiency with DevOps methodologies and CI/CD pipelines.
- General knowledge of security principles and best practices.
- Practical experience with cloud-based or local development environments is recommended but not required.
Participants are required to maintain the following accounts for hands-on labs and tool integrations:
- GitHub or GitLab (Free) – Required for CI/CD pipeline configuration and DevSecOps automation.
- Cloud-based DevOps environment (optional) – Such as AWS, Azure, or GCP, where cloud deployment is included.
- Docker (optional) – Where local containerized development is employed.
This course is tailored for professionals engaged in software development, security, and DevOps, including:
- Software Developers – To embed security within their development workflows.
- DevOps Engineers – To automate and optimize security in CI/CD pipelines.
- Security Engineers – To establish and oversee secure DevOps practices.
- Application Security Professionals – To improve security testing and vulnerability management.
- QA Engineers – To incorporate security checks into automated testing frameworks.
- IT Managers & Architects – To design and supervise secure software delivery workflows for government.
Testimonials (2)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
