DevSecOps Courses and Certifications

OWASP Foundation

DevSecOps: Improving Security Posture Through Linguistic Theory

Exploring linguistic theory's impact on security practices, this talk examines how names and metaphors influence organizational processes and interactions to enhance security posture.

• YouTube
• 24 minutes
• On-Demand
• Free Video

OWASP Foundation

Application Security for DevSecOps - Don't Learn, Don't See, Don't Run

Explore the future of DevSecOps with insights on seamless security integration, emerging technologies, and adoption strategies for the next three years in application development.

• YouTube
• 29 minutes
• On-Demand
• Free Video

OWASP Foundation

DevSecOps Roundup - An Overview of the Current State

Explore the current landscape of DevSecOps, examining key trends, challenges, and best practices in integrating security into the software development lifecycle.

• YouTube
• 18 minutes
• On-Demand
• Free Video

OWASP Foundation

What Is a DevSecOps Engineer? - Roles, Skills, and Responsibilities

Explore the role of a DevSecOps Engineer, including skills, responsibilities, and career evolution for security professionals interested in integrating security into DevOps practices.

• YouTube
• 22 minutes
• On-Demand
• Free Video

OWASP Foundation

Job Security in a DevSecOps World - Transitioning from Control to Value Creation

Explore transitioning from security control to business value creation in DevSecOps, addressing job security concerns and elevating security conversations to strategic levels.

• YouTube
• 20 minutes
• On-Demand
• Free Video

OWASP Foundation

Requirements Gathering for Successful DevSecOps Pipeline - AppSec EU 2017

Discover key requirements for implementing a security-focused automated development pipeline in your organization, addressing assessment, bottlenecks, training, metrics, and monitoring.

• YouTube
• 40 minutes
• On-Demand
• Free Video

OWASP Foundation

SDLC for the DevSecOps Era - Adapting Application Security Techniques

Practical lessons on adapting application security techniques for agile development, covering lightweight controls, visibility, and measuring security maturity in modern DevOps environments.

• YouTube
• 32 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

Fight Back Against Cyber Risk in the Software Supply Chain - Secure DevSecOps Pipeline for Regulated Environments

Secure DevSecOps pipelines for regulated environments: best practices, open-source tools, and real-world application in banking using BIAN framework and technologies like Tekton, Terraform, and SonarQube.

• YouTube
• 32 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

DevSecOps Best Practices in Cloud Native Computing - CMCC Case Study

探索中国移动通信公司的DevSecOps最佳实践，了解如何将安全无缝集成到云原生开发和运维流程中，提高效率和安全性。

• YouTube
• 34 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

Graph Driven DevSecOps in Practice

Explore graph-driven DevSecOps implementation strategies, enhancing security integration in cloud-native development pipelines for improved efficiency and risk mitigation.

• YouTube
• 41 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

Path to Production: Sustainable Compliance in Strict Environments

Discover strategies for achieving sustainable compliance in highly regulated environments, focusing on DoD practices using Big Bang, Iron Bank, and Kyverno for faster, secure-by-default Kubernetes deployments.

• YouTube
• 37 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

Secure CI/CD Using JSON Web Token (JWT)

Explore how GitLab leverages JWT for secure access to secret management solutions, enhancing DevSecOps practices and addressing challenges in retrieving sensitive data across cloud providers.

• YouTube
• 28 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

Shifting Security Left - Simplifying Security for Kubernetes and OpenShift Environments

Learn to simplify security in Kubernetes and OpenShift, focusing on authentication, secrets management, and bridging the gap between security and DevOps for more efficient cloud-native environments.

• YouTube
• 51 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

CNCF End User Technology Radar for DevSecOps - September 2021

Explore DevSecOps trends and recommendations from CNCF's End User Community. Gain insights on security solutions, micro-segmentation, and balancing security with developer experience in cloud-native environments.

• YouTube
• 31 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

First Steps to Full Lifecycle Security with Open Source Tools

Hands-on workshop demonstrating installation, configuration, and customization of open-source security tools for DevOps, focusing on Trivy for container and infrastructure security and Starboard for continuous security assurance.

• YouTube
• 1 hour 21 minutes
• On-Demand
• Free Video