Duration:
3 days
Course Synopsis:
EC-Council’s Certified DevSecOps Engineer (E|CDE) is a hands-on, instructor-led comprehensive DevSecOps certification program that helps professionals build the essential skills needed to design, develop, and maintain secure applications and infrastructure. The E|CDE course focuses on application DevSecOps and also provides insights into infrastructure DevSecOps. Iin addition, this course teaches students how to use various DevSecOps tools and create secure code throughout the software development life cycle.
Course Objectives:
After completion of this course, students will be able to:
- Understand DevOps security bottlenecks and discover how the culture, philosophy, practices, and tools of DevSecOps can enhance collaboration and communication across development and operations teams.
- Understand the DevSecOps toolchain and how to include security controls in automated DevOps pipelines.
- Integrate Eclipse and GitHub with Jenkins to build applications.
- Align security practices like security requirement gathering, threat modeling, and secure code reviews with development workflows.
- Integrate threat modeling tools like Threat Dragon, ThreatModeler, and Threatspec; manage security requirements with Jira and Confluence; and use Jenkins to create a secure CI/CD pipeline.
- Understand and implement continuous security testing with static, dynamic, and interactive application security testing and SCA tools (e.g., Snyk, SonarQube, StackHawk, Checkmarx SAST, Debricked, WhiteSource Bolt).
- Integrate runtime application selfprotection tools like Hdiv, Sqreen, and Dynatrace that protect applications during runtime with fewer false positives and remediate known vulnerabilities.
- Integrate SonarLint with the Eclipse and Visual Studio Code IDEs.
Course Prerequisites:
Students should have an understanding of application security concepts.
Who Should Attend:
- C|ASE-certified professionals
- Application security professionals
- DevOps engineers
- Software engineers and testers
- IT security professionals
- Cybersecurity engineers and analysts
- Anyone with prior knowledge of application security who wants to build their career in DevSecOps
Job Roles Aligned with the E|CDE:
- DevSecOps engineer
- Senior DevSecOps engineer
- Cloud DevSecOps engineer
- Azure DevSecOps engineer
- AWS DevSecOps engineer
- DevSecOps analyst
- DevSecOps specialist
- DevSecOps operations engineer
- DevSecOps systems administrator
- DevSecOps systems engineer
- DevSecOps consultant
- DevSecOps CI/CD engineer
- Infrastructure DevSecOps engineer
Outline Course Contents:
Module 7: DevSecOps Pipeline—Operate and Monitor Stage
Examination Information
Length of exam
4 hours
Number of questions
Question format
Multiple choice
Passing grade
70%
Exam availability
English
Testing center
EC-Council Exam Portal
Programme scope, delivery arrangements and suitability are confirmed during enquiry.