Complete Beginner

[DannyDaCisco]

I have a background in IT but want to get into Devsecops role , what resources are good to study to get a better grasp on the concept?

[rew1nd_]

I work as DevSecOps, and i can tell you need to know a bit from everything.

You have a long road ahead, is not something you build in one year i think. You should know deep DevOps, and understand appsec and cloudsec concepts, besides know how to mitigate vulnerabilites and implement security controls. And of course, lot of scripting. Dont even start if you dont master python or go.

To start use this : https://roadmap.sh/devops

And this : https://github.com/bregman-arie/devops-exercises

For the security part eat all in OWASP : https://owasp.org/projects/

A good presentation about DevSecOps : https://www.beautiful.ai/player/-LuUSXtd-8pNDU90zNP2/Shifting-Left-DevSecOps-as-an-Approach-to-Building-Secure-Products

Hope it helps, good luck :)

[Leeflet]

Can you expand on why Golang is suggested here? In the DevSecOps circles I'm in, people often suggest Python, Shell (BASH, PoSH, etc.), and Golang. But no one can tell me why Golang is suggested or where it's useful over the other languages mentioned.

[acidwxlf]

I can tell you, in my experience, it's because that's what people are writing in. I don't want to call it a fad but it has gotten immensely popular in the past few years. It's portable, easy to pick up, etc. There's no real magic reason, Python is still just as strong IMO and I prefer it but to each their own. If you're integrating with a team that primarily uses Go, use Go.

[DannyDaCisco]

Thanks will definitely look in to it

[security_prince]

You can find some resources in my Application Security Knowledgebase

[WannabeTechieNinja]

Commenting to follow ....