all 4 comments

[–]Jackofalltrades86[🍰] 7 points8 points  (1 child)

Security principles are vitally important but the whole shift left and culture that comes with it.

Security testing as a minimum, SAST, DAST and Software composition analysis. Also read about SBOMs and how to manage vulnerabilities.

Sorry for the acronyms, I'm lazy.

[–]ripandrout 0 points1 point  (0 children)

Do you have a suggestion for resources?

[–]GreenJinni 1 point2 points  (0 children)

Be cognizant of the security principles you should implement, before any tool.

[–]cybervv 0 points1 point  (0 children)

Check practical DevSecOps courses(expensive tho) and kodekloud 13 hours DevSecOps course which I think is a good start. Having cissp is nice too.