We can host this training at your preferred location. Contact us!

Hands-on training to automate security into a fast-paced DevOps environment using various open-source tools and scripts.

Modern enterprises are implementing the technical and cultural changes required to embrace DevOps methodology by introducing practices such Continuous Integration (CI), Continuous Delivery (CD), Continuous Monitoring (CM) and Infrastructure as Code (IaC). DevSecOps extends DevOps by introducing security in each of these practices giving a certain level of security assurance in the final product. In this training, we will demonstrate using our state-of-the-art DevSecOps Lab as to how to inject security in CI, CD, CM and IaC.

This is a complete hands-on training with attendees requiring only a browser to complete the entire training. Attendees will receive the DevSecOps Lab built using Vagrant and Ansible comprising of various open-source tools and scripts to help the DevOps engineers in automating security within their CI/CD pipeline.

The attendees will receive a DevSecOps-Lab VM (designed by the NotSoSecure team) containing all the code, scripts and tools that are used for building the entire DevSecOps pipeline.

Anybody with a background in IT or related to software development whether a developer or a manager can attend this course to get an insight about DevOps and DevSecOps.

Shift your organisation’s security left, make it a less attractive target to attackers, and help it resist attacks by building a team that can develop resilient applications and systems using secure processes.

Trained delegates can:

Implement security tools and build and automate secure processes within their DevOps pipelines
Secure any DevOps environment, from development and staging to production
Securely deploy all the latest DevSecOps technologies which are covered in the course
Understand the business impact of DevSecOps principles and articulate this to key stakeholders
Solve business and development problems with a security mindset
Take on greater responsibility in the team and become an advocate of security in the wider business

Day 1

Lab Setup

Online Lab Setup
Offline Lab Instructions

Introduction to DevOps

What is DevOps?
Lab : DevOps Pipeline

Introduction to DevSecOps

Challenges for Security in DevOps
DevOps Threat Model
DevSecOps – Why, What and How?
Vulnerability Management

Continuous Integration

Pre-Commit Hooks

Introduction to Talisman
- Lab : Running Talisman
- Lab : Create your own regexes for Talisman

Secrets Management

Introduction to HashiCorp Vault
Demo : Vault Commands

Continuous Delivery

Software Composition Analysis (SCA)
- Introduction to Dependency-Check
- Lab : Run Dependency-Check pipeline
- Lab : Fix issues reported by Dependency-Check
Static Analysis Security Testing (SAST)
- Introduction to Semgrep
- Lab : Run Semgrep pipeline
- Lab : Create your own Semgrep Rules
- Lab : Fix Issues reported by Semgrep
Dynamic Analysis Security Testing (DAST)
- Introduction to OWASP ZAP
- Demo : Creating ZAP Context File
- Lab : Run ZAP in pipeline

Day 2

Infrastructure As Code

Vulnerability Assessment (VA)
- Introduction to OpenVAS
- Lab : Run OpenVAS pipeline
Container Security (CS)
- Introduction to Trivy
- Lab : Run Trivy in Pipeline
- Lab : Improvise Docker base image
Compliance as Code (CaC)
- Introduction to Inspec
- Lab : Run Inspec in Pipeline
- Lab : Improvise Docker compliancy controls

Continuous Monitoring

Logging
- Introduction to the ELK Stack
- Lab : View Logs in Kibana
Alerting
- Introduction to ElastAlert and ModSecurity
- Lab : View Alerts in Kibana
Monitoring
- Lab : Create Attack Dashboards in Kibana

DevSecOps in AWS

DevOps on Cloud Native AWS
AWS Threat Landscape
DevSecOps in Cloud Native AWS

DevSecOps Challenges and Enablers

Challenges with DevSecOps
Building DevSecOps Culture
Security Champions
Case Studies
Where do we Begin?
DevSecOps Maturity Model

E. D. - Birim Müdürü
İş Bankası

Rated the training 5 stars.

. Y. - Uzman
İş Bankası

Rated the training 5 stars.

S. A. Ç. - Bilişim Güvenliği Mimarı
Mercedes-Benz Türk A.Ş.

Rated the training 5 stars.

E. A. - DevSecOps
Mercedes-Benz Türk A.Ş.

Rated the training 5 stars.

A. A. - Cyber Security Technical Product owner
Mercedes-Benz Türk A.Ş.

Rated the training 5 stars.

Why have you chosen us?

I have attended a training from Bilginc IT Academy before and I was satisfied.

I have attended a training from a different provider and it was not helpful.

Other

How many employees do you have in your IT department?

0 – 50

50 – 250

250 – 1000

1000+

DevSecOps Training Course in Finland

Finland is a country located in northern Europe. Helsinki is the capital and largest city of the country. The majority of the people are Finns but there is also a small Lapp population in Lapland, where the country is famous for the Northern Lights. Finland's national languages are Finnish and Swedish.

Known for its vast forests, lakes, and natural beauty, Finland is one of the world's largest producers of forest products, such as paper, pulp, and lumber. One of the world's largest sea fortresses Suomenlinna, Rovaniemi with the "White Nights", dogsled safaris and of course the Northern Lights are what makes Finland so popular for tourists. Finland is one of the best places in the world to see the Northern Lights and attracts millions of tourists during its seasons.

Finland is home to a thriving technology industry and is widely recognized as one of the world's leading technology hubs. Companies such as Nokia and Rovio (creator of the popular game Angry Birds) are based in Finland. Some of the key factors that have contributed to Finland's success in technology include; strong investment in research and development, a highly educated workforce and fundings.

Finland has a strong educational system, and is widely regarded as one of the world's most literate countries. In fact, Finland's literacy rate is one of the highest in the world, and its students consistently perform well in international tests of math and reading ability.

Also, as a pioneer in environmental sustainability, Finland is known for its efforts to reduce its carbon footprint and promote clean energy. This Nordic country is also famous for its unique and distinctive cultural heritage, including its traditional folk music and its elaborate traditional costumes.

Helsinki, Finland's capital city, is the country's business center. Helsinki is Finland's largest city, and it is home to many of the country's major corporations and organizations, including many of the country's leading technology firms. The city is also a commercial, trade, and financial center, as well as one of the busiest ports in the Nordic region.

Take advantage of our diverse IT course offerings, spanning programming, software development, business skills, data science, cybersecurity, cloud computing and virtualization. Our knowledgeable instructors will provide you with practical training and industry insights, delivered directly to your chosen venue in Finland.

DevSecOps Training in Finland

E. D. - Birim Müdürü
İş Bankası

. Y. - Uzman
İş Bankası

S. A. Ç. - Bilişim Güvenliği Mimarı
Mercedes-Benz Türk A.Ş.

E. A. - DevSecOps
Mercedes-Benz Türk A.Ş.

A. A. - Cyber Security Technical Product owner
Mercedes-Benz Türk A.Ş.

Upcoming Trainings

Related Trainings

DevSecOps Training in Finland

Prerequisites

What You Will Learn

Outline

Training Reviews

E. D. - Birim Müdürüİş Bankası

. Y. - Uzmanİş Bankası

S. A. Ç. - Bilişim Güvenliği MimarıMercedes-Benz Türk A.Ş.

E. A. - DevSecOpsMercedes-Benz Türk A.Ş.

A. A. - Cyber Security Technical Product ownerMercedes-Benz Türk A.Ş.

WHAT IS WHAT? DEVOPS, MLOPS, AIOPS

DEVOPS ENGINEER CAREER PATH

10 BUSINESS BENEFITS OF DEVOPS

Upcoming Trainings

Related Trainings

E. D. - Birim Müdürü
İş Bankası

. Y. - Uzman
İş Bankası

S. A. Ç. - Bilişim Güvenliği Mimarı
Mercedes-Benz Türk A.Ş.

E. A. - DevSecOps
Mercedes-Benz Türk A.Ş.

A. A. - Cyber Security Technical Product owner
Mercedes-Benz Türk A.Ş.