DevSecOps Engineer
Learn the systems and networking basics security work rests on, then secure the pipeline end to end: threat modeling, secure code, secrets, CI scanning and the software supply chain. Then learn how production runs — infrastructure as code, containers, Kubernetes, load balancers, autoscaling and API gateways — and how to harden, observe, recover and prove compliance for it.
- 25 lessons
- 6 stages
- 1 branch
- 22 concept notes
- includes Git & Collaboration
Your progress
0 / 24
required steps
+ 0/1 optional
- 01
Foundations
The platform knowledge every security decision depends on.
- 01DevSecOps fundamentalsShift-left, shared ownership and the secure SDLC.
- 02Linux essentialsThe shell, users, permissions, processes and services.
- 03Networking essentialsTCP/IP, DNS, TLS, ports and firewalls.
- Gt
Step 04 · Roadmap · 10 lessons
Git & Collaboration
Pipelines, reviews and audit trails all start in Git.
0/9
- 02
Secure the code
Find and prevent vulnerabilities before they merge.
- 03
Secure the pipeline
Automate security checks into CI/CD.
Step 08 · Pick one
Pick a CI/CD platform
The concepts transfer; learn the one your team uses.
- 09SAST & dependency scanningStatic analysis, SCA, SBOMs and triaging findings.
- 10Software supply chain securityPinning, provenance, SLSA and signing artifacts.
- 11Dynamic testing (DAST)Scanning running apps and fitting it into CI.
- 04
Run the platform
How production infrastructure is defined, packaged, routed and scaled.
- 12Infrastructure as code with TerraformResources, state, modules, environments and CI applies.
- 13Containers & container securityMinimal images, non-root, scanning and runtime limits.
- 14Kubernetes fundamentalsPods, Deployments, Services, Ingress, config and kubectl.
- 15Load balancingL4 vs L7, algorithms, health checks and TLS termination.
- 16AutoscalingHPA, cluster autoscaling, scaling signals and cost limits.
- 17API gatewaysRouting, authentication, rate limiting and the Gateway API.
- 18Service mesh & mTLS optionalZero-trust service-to-service traffic with mutual TLS.
- 05
Secure the platform
Harden what your code runs on and what reaches it.
- 19Kubernetes securityRBAC, Pod Security Standards and network policies.
- 20Infrastructure as code securityTerraform, policy as code and IaC scanning.
- 21Cloud identity & accessLeast privilege, roles, short-lived credentials.
- 22Edge protection: WAF & DDoSWeb application firewalls, rate limits and DDoS defence.
- 06
Operate & recover
Detect what goes wrong, come back from it, and prove it to auditors.
- You made it.