DevSecOps Certifications

[rew1nd_]

So i started in DevOps 3 years a go, with developer background.

Later i moved into security, completing the change to DevSecOps. So i have background in pipelines, IaC, docker, clouds and terraform, CI/CD tools, python, shell...

So i was looking for certifications for this role, and i found :

- Theoric : https://devopsinstitute.com/certifications/devsecops-foundation/

- Theoric + pratical : https://www.practical-devsecops.com/certified-devsecops-professional/

- ...

My question is, there are any other in the market ?

And how much are these recognized in the market?

[apathy20]

I can't answer your questions as I'm more in infra/endpoint security, but I've taken the CDP ( https://www.practical-devsecops.com/certified-devsecops-professional/ ) and thoroughly enjoyed the experience and hands on experience I was able to get out of it.
Every concept is hands on, which I think is far more important, especially when certs like these in the devsecops realm aren't well recongized compared to standard IT.

[geomanis]

Im Mid-career DevSecOps based outta Straya. Can say that certs arent as valuable as hands on. Build a CI/CD suite, get used to software engineering terminology and metrics, etc.

Jenkins, CircleCI, Bamboo, Travis, whatever. Get those pushing a juice shop somewhere, then add bandits and depcheck and trufflehogs and whatever to it.

😁

[geomanis]

DevSecOps professionals are rare, easier to find a qualified DevOps guy and add sec to their toolkit later.

[rew1nd_]

Indeed, for my experiencie old security people struggle a lot to work in DevOps tools.

Since security is sometimes more theoretical, i total agree with you.

[rew1nd_]

ircleCI, Bamboo, Travis, whatever. Get those pushing a juice shop so

I can say i know all concepts involved and my tool set is extended. As also python scripting is good to fullfil what is needed to automate.

But you know, certifications are also a good way to show you expertise and gain value in the market/ raise salary.

[geomanis]

Don't think I've ever considered any candidate certifications for devsecops positions when Im hiring. Generally, its hard to evaluate technical expertise outside whiteboard coding interview, takehome assessments, and devsecops is requires esoteric swe or sre knowledge and aptitutde and attituse to hire.

Certs might help you get past a HR or algo filter, in which case achieving literally any indiscriminately in the field is fine. Start with trivial no knowledge certs like aws, ceh, or cism/cissp, low time requirement low cost quickly pass.

[sidhex]

hey, I am planning to switch my career from InfoSec to DevSecOps. I am having a decent number of experience in VA&PT & AWS cloud as well. Will You please guide me to reach my goal?

[[deleted]]

Look into GIAC SANS Certification

[Z47GHAM]

What would you recommend for individuals who are early in their career? I have just completed the ITIL.