Build Complete DevSecOps Pipeline with Container Based Delivery, CI/CD on Kubernetes with all Open Source Tools

What you'll learn

Understand the core principles of DevSecOps and how they integrate into modern software delivery pipelines.
Set up a complete learning environment using Google Cloud Platform, Kubernetes (GKE), and essential DevOps tools.
Build a secure CI/CD pipeline using Jenkins, Helm, Docker, and Kubernetes.
Implement Software Composition Analysis (SCA) using OWASP Dependency-Check, Pyraider, and Dependency-Track to identify and manage third-party risks.
Apply Static Application Security Testing (SAST) using tools like slscan and integrate them into your CI/CD pipeline.
Conduct Dynamic Application Security Testing (DAST) using OWASP ZAP during deployment stages to catch runtime vulnerabilities.
Harden container images using Dockle, Trivy, and multi-stage Dockerfiles to reduce the attack surface.
Manage sensitive credentials and enforce secure secrets injection using HashiCorp Vault with Kubernetes.
Enforce system-level compliance and infrastructure hardening using InSpec and Ansible as Compliance-as-Code tools.
Secure Kubernetes workloads by implementing security contexts, Pod security policies, resource limits, and runtime scanning tools like Falco.
Build and deploy AI/ML and containerized applications securely using GitOps practices with ArgoCD.
Automate runtime anomaly detection and remediation using Falco and Argo Workflows.
Understand the Software Bill of Materials (SBOM) and integrate SBOM generation into your pipeline.
Design an end-to-end secure DevOps pipeline for real-world applications, from code to production, with continuous security monitoring.

Requirements

Familiarity with DevOps concepts and basic CI/CD workflows is recommended.
Prior experience with Docker and Kubernetes is helpful but not mandatory.
Access to a GCP account or any cloud environment for hands-on labs.
No deep security knowledge required — everything is explained step by step.

Description

Are you building or deploying applications on Kubernetes? Whether you're a DevOps Engineer, Platform Engineer, or AI/ML Engineer, security can no longer be an afterthought.This hands-on DevSecOps Bootcamp will help you build secure, production-ready CI/CD pipelines using open-source tools and industry best practices. Learn how to integrate security across the software development lifecycle and ensure your applications are secure by design.We will walk you through step-by-step labs that combine Jenkins, Kubernetes, ArgoCD, Vault, Trivy, Falco, OWASP ZAP, and other essential tools used in modern DevSecOps workflows.This course is ideal for teams building cloud-native applications, AI/ML models, or any containerized workload that needs to be deployed securely at scale.

What you will learn:

Core DevSecOps principles and the secure software delivery lifecycleHow to build a CI/CD pipeline with Jenkins on KubernetesSoftware Composition Analysis (SCA) using OWASP Dependency-Check, Pyraider, and Dependency-TrackStatic and Dynamic Application Security Testing (SAST & DAST) using slscan and OWASP ZAPSecuring container images using Trivy, Dockle, and multi-stage DockerfilesEnforcing compliance as code using InSpec and AnsibleSecrets management using HashiCorp Vault and Kubernetes RBACRuntime security monitoring using Falco with automated response pipelinesSecure deployment workflows with GitOps using ArgoCD and KubernetesTools and Technologies You Will Use:Jenkins, Helm, Kubernetes (GKE), ArgoCDTrivy, Dockle, OWASP ZAP, slscan, PyraiderVault, InSpec, Ansible, Falco, Argo WorkflowsDocker, Kubernetes RBAC, GitHub, GitOpsWho Should Take This Course:DevOps and Cloud Engineers who want to add security to their toolbeltAI/ML Engineers deploying models and services on KubernetesPlatform Engineers managing modern microservices at scaleSecurity Engineers transitioning to DevSecOps practicesDevelopers building containerized applications for productionThis is not a theoretical course. You will be working on real-world labs and projects that simulate what modern engineering teams do to secure their software pipelines in production environments.Whether you're deploying a machine learning model, a microservice, or a SaaS product — this course will help you ensure that your deployments are secure, scalable, and compliant.

Who this course is for

DevOps, Cloud, and Platform Engineers looking to build secure delivery pipelines.
AI/ML Engineers deploying models and services on Kubernetes or in production environments.
Developers who want to integrate security into their DevOps workflows.
Security professionals and SREs transitioning into DevSecOps roles.
Anyone responsible for deploying, securing, and maintaining modern applications at scale.
Homepage:
https://www.udemy.com/course/ultimate_devsecops_bootcamp/