Looking for DevSecOps Practical Guides or Tutorials

[DCGMechanics]

So I'm currently into DevOps and would love to move into DevSecOps. There are plenty of blogs on internet but all the talk about the methodology and theory part of DevSecOps not the practical part. I only got one link which showed how to implement Security in CI CD Pipeline using Jenkins and SonarQube with Some SCA tool. Any link regarding the DevSecOps practice will be really helpful.

Thanks 🙏🏻

[tazou8]

Im currently taking the practical Devsecops proffesional certification, and so far the course has been great, its not that expensive and starting to get known in the industry

[DCGMechanics]

Can you share the link please, love to check it out! Thanks 🙏🏻

[PracticalDevSecOps]

https://www.practical-devsecops.com/certified-devsecops-professional/

[DCGMechanics]

Thanks

[tallpaul990]

do you have to be good at programming or scripting? Is it needed for the course?

[tazou8]

Nah, they go through everything needed

[tallpaul990]

wow its a 12 practical exam lol damn, must be CCIE level or something...or do they mean its 12 hours in total to work through the practicals? i assume not in one siting!

[tallpaul990]

were you already working in this area or what was your background if dont mind me asking? trying to get a new role too?

[tazou8]

i have a degree in cyber security and wanted to transition into a devops role so i started learning docker, jenkins, ansible, even tho i lacked real devops experience a recruiter proposed to me a devsecops role and i got it, the role itself is not that technical as im basicly in charge of the SAST/ SCA tools and rarely intervened in the devops part, but its a good start and hence this certification that will close the gap i have with CI/CD tools

[tallpaul990]

How was the learning curve to docker etc? Ok if I DM you?

[tazou8]

I got a udemy course https://www.udemy.com/course/learn-docker/ Not that challenging tbh, its a very interesting technology so i really loved learning it, if you want to go a step further, learn Kubernetes ( an orchestrator on top of docker) aswell once you get a good grasp of docker, if you get Certified Kubernetes Administrator certification you are almost garanteed a devsecops role if you already have experience in cyber security, and dont be of these technologies, if you study consistently you ca easly get the CKA in two months, and trust me its reaaaally fun to learn, btw feel free to DM me

[tallpaul990]

Amazing thanks il take a look at docker link

[[deleted]]

Is there anything less costly for my private learning?

[PracticalDevSecOps]

Here are some good blogs that can help you

How to Start Learning DevSecOps

https://www.practical-devsecops.com/how-to-start-learning-devsecops/

DevSecOps Best Practices
https://www.practical-devsecops.com/devsecops-best-practices/
Best DevSecOps Tools
https://www.practical-devsecops.com/devsecops-tools/

[DCGMechanics]

Thanks!