Become a Partner
Add OffSec to your list of training providers
Partner with us
OffSec Wins Seven Global InfoSec Awards during RSA Conference 2024
Read blogAccelerate secure development: Build a strong DevSecOps foundation
OffSec Learning Path: DevSecOps Essentials
Modern development demands security integrated into DevOps processes. This hands-on Learning Path will equip you with the essential skills to automate infrastructure with security in mind, optimize workflows, and accelerate software delivery. Learn to:
Provision and manage infrastructure with Terraform
Control access and permissions effectively by designing robust IAM systems
Build secure and efficient deployment workflows by automating CI/CD pipelines
Secure infrastructure, streamline delivery
This Learning Path will equip you to streamline development processes while prioritizing security. You'll learn to reduce deployment times, integrate robust security practices, and optimize cloud resource management for cost efficiency.
Who is this Learning Path for?
- DevOps engineers aiming to master security-focused automation
- Cloud engineers seeking to integrate security into infrastructure management
- System administrators transitioning into a DevSecOps role
- Developers interested in infrastructure and security aspects of DevOps
Learning objectives
- Understand how security integrates into DevOps
- Automate infrastructure provisioning and management
- Employ industry-leading tools like Kubernetes and Vault
- Ensure consistent and secure configurations
Key modules in the DevSecOps Learning Path
DevOps Processes
- This Learning Module explores and defines terms, processes, and strategies related to DevOps.
Introduction to Infrastructure as Code (IaC)
- Analyze Infrastructure as Code as a way to implement automated system provisioning. We'll explore declarative and imperative approaches to IaC, and we'll cover an introduction to writing Infrastructure as Code with AWS CDK.
Introduction to Terraform
- We'll cover an introduction to writing Infrastructure as Code with Terraform, its syntax and analyze a tool to statically analyze Terraform code.
IAM Essentials
- First part of the "Understanding Identity and Access Management in the Public Cloud" series. This modules covers the basic concepts and mechanisms that public cloud service providers use to implement identification, authentication and authorization in public cloud platforms.
IAM Design Principles
- Second part of the "Understanding Identity and Access Management in the Public Cloud" series. This module covers some principles to keep in mind when designing IAM in public cloud.
Configuration Management Essentials
- Entry level configuration management skills building with Ansible.
Secrets Management – Removing Hardcoded Secrets
- Following an example application, we remove secrets hard coded into the application. We follow a sensible defaults pattern, where possible and use files and environment variables to load secrets.
DevSecOps overview
10
modules
55+
hours of content (approx.)
8+
skills
Earning an OffSec Learning Badge
Showcase your growing DevSecOps proficiency! Upon completing 80% of the DevSecOps Essentials Learning Path, you'll receive an exclusive OffSec badge signifying:
- DevSecOps proficiency: Demonstrate your fundamental secure DevOps knowledge and practical skills
- Industry recognition: Adds a powerful OffSec credential to your skillset
- Real-world readiness: Prove your ability to design and deploy secure infrastructure
Why train your team with OffSec?
Actionable skills
Practice in realistic lab environments
Comprehensive approach
Covers IaC, IAM, secrets management, CI/CD security
Attacker mindset
Learn to anticipate vulnerabilities and build resilient systems
Start learning with OffSec
Intro
content
Learn
Fundamentals
$799/year*
Access to all fundamental content for one year to prepare for our advanced courses.
All
access
Learn
Unlimited
$5799/year
Unlimited OffSec Learning Library access plus unlimited exam attempts for one year.
Large teams
Learn
Enterprise
Get a quote
Flexible terms and volume discounts available.
Learn Fundamentals is designed to help learn essential cybersecurity concepts and provide the prerequisite skills necessary for our courses & certifications. Gain access to the growing library of fundamental learning paths and demonstrate achievement with assessments and badges.
What’s included
1 year of unlimited access to all fundamental content and OffSec curated Learning Paths
365 days of lab access
PEN-103 + 1 KLCP exam attempt
PEN-210 + 1 OSWP exam attempt
Easily upgrade at any time to a Learn One subscription
Financing for Learn Fundamentals and Learn One now available through Climb Credit with as little as 0% APR and up to 36 monthly payments.
State exclusions may apply. Learn more.
FAQ
- DevOps Processes
- Introduction to Infrastructure as Code (IaC)
- Introduction to Terraform
- IAM Essentials
- IAM Design Principles
- Configuration Management Essentials
- Secrets Management – Removing Hardcoded Secrets
- Secrets Management – Kubernetes and Hashicorp Vault
- Overview of CI/CD
- Hardening Applications in CI
Learners should have completed the following Learning Modules and Paths or possess equivalent knowledge before starting this Learning Path:
- Linux Basics I
- Linux Basics II
- Networking Fundamentals
- Getting Started with Git
- Git Branching and Merging
- Introduction to Git Security
- Cloud Essentials Learning Path
- Automation
- Cloud Administration
- Infrastructure as Code
- CI/CD
- Cloud Security
- Secrets Management
- Security by Design
- Configuration Management
This Learning Path assumes some foundational knowledge but is designed to be accessible to those new to DevSecOps. It provides a strong starting point and valuable insights for those with some experience as well.
We emphasize:
- Hands-on practice in realistic Cloud environments
- In-depth exploration of DevSecOps concepts and tools
- Fostering a security-first mindset for infrastructure and development
Start your journey today
New to cybersecurity and want to get educated on fundamental content before signing up?
Check out CyberVersity - our free resource library covering essential cybersecurity topics.
Learn more