# 1 DevSecOps Bootcamp

Invest just 4 months to become irreplaceable as an engineer

OR DOWNLOAD SYLLABUS
  • 889+Students Enrolled
  • 4.9Trustpilot Rating
  • 4 monthsProgram Duration
  • 34+Real-life Projects
DevSecOps DigitalBadge.png

Become a Certified DevSecOps Practitioner

•  From Mid-Level to becoming a confident Senior Engineer that is irreplaceable for companies

•  DevSecOps certification program that takes your DevOps and Cloud skills from mediocre to mastery

• Extensive DevSecOps projects that mirror actual real-life implementations with best practices

WARNING: Not for Beginners in DevOps

Do our DevOps Bootcamp first, if you are a DevOps Newbie

Perfect For You, If You Want To...

  • Become a Senior Engineer in Months and not Years
  • Show recruiters your DevOps and Cloud skills with confidence
  • Learn the complete skillset to confidently implement DevSecOps at your company

But You're Currently...

  • Stuck at Mid-Level and want to become a Senior Engineer
  • Skilled in DevOps, but missing a clear next step
  • Struggling to find a hands-on blueprint for advanced real-world projects

DevSecOps Learning Schedule

  • Recommended 4-month Schedule based on 15-20 hours/week
  • Self-Paced Online Bootcamp - You can finish faster or take longer
Recomm. Schedule - DevSecOps - Part 1.pngRecomm. Schedule - DevSecOps - Part 2.pngRecomm. Schedule - DevSecOps - Part 3.png

DevSecOps Course Curriculum

Career-focused curriculum made to match industry demands, ensuring you learn skills that are directly applicable to the job market.

⤓ Download Syllabus as PDF

Chapter 1:Security Essentials
  1. 1 - Chapter Handout
  2. 2 - Introduction to Security
  3. 3 - Importance of Security & Impact of Security Breaches
  4. 4 - How to Secure Systems Against Attacks
  5. 5 - Types of Security Attacks - Part 1
  6. 6 - Types of Security Attacks - Part 2
  7. 7 - OWASP top 10 - Part 1
  8. 8 - OWASP top 10 - Part 2
  9. 9 - Security in Layers
Chapter 2:Introduction to DevSecOps
  1. 1 - Chapter Handout
  2. 2 - Issues with Traditional Approach to Security
  3. 3 - Understand DevSecOps
  4. 4 - Roles & Responsibilities in DevSecOps
Chapter 3:Application Vulnerability Scanning
  1. 1 - Chapter Handout
  2. 2 - Build a Continuous Integration Pipeline
  3. 3 - Impact of Missing Security Insights
  4. 4 - Secret Scanning with GitLeaks - Local Environment
  5. 5 - Pre-commit Hook for Secret Scanning & Integrating GitLeaks in CI Pipeline
  6. 6 - False Positives & Fixing Security Vulnerabilities
  7. 7 - Integrate SAST Scans in Release Pipeline
Chapter 4:Vulnerability Management and Remediation
  1. 1 - Chapter Handout
  2. 2 - Generate Security Scanning Reports
  3. 3 - Introduction to DefectDojo, Managing Security Findings, CWEs
  4. 4 - Automate Uploading Security Scan Results to DefectDojo
  5. 5 - Fix Security Issues Discovered in the DevSecOps Pipeline
Chapter 5:Vulnerability Scanning for Application Dependencies
  1. 1 - Chapter Handout
  2. 2 - Software Composition Analysis - Security Issues in Application Dependencies
  3. 3 - Import SCA Scan Reports in DefectDojo, Fixing SCA Findings, CVEs
  4. 4 - Overview of Static Security Scans in CI Pipeline
Chapter 6:Build a CD Pipeline
  1. 1 - Chapter Handout
  2. 2 - Overview of a CI/CD Pipeline
  3. 3 - Introduction to Security Layers for AWS Access
  4. 4 - Integrate CI/CD Pipeline with AWS ECR
  5. 5 - Configure Application Deployment Environment on EC2 Server
  6. 6 - Deploy Application to EC2 Server with Release Pipeline
  7. 7 - Configure Self-Managed GitLab Runner for Pipeline Jobs
  8. 8 - Build Application Images on Self-Managed Runner, Leverage Docker Caching
Chapter 7:Image Scanning - Build Secure Docker Images
  1. 1 - Chapter Handout
  2. 2 - Overview of Image Security
  3. 3 - Configure Automated Security Scanning in Application Image
  4. 4 - Analyze & Fix Security Issues from Findings in Application Image
  5. 5 - Automate Uploading Image Scanning Results in DefectDojo
  6. 6 - Docker Security Best Practices
  7. 7 - Configure Automated Image Security Scanning in ECR Image Repository
  8. 8 - Overview of Automated Application Code and Image Scanning Steps
Chapter 8:AWS Cloud Security & Access Management
  1. 1 - Chapter Handout
  2. 2 - AWS Security Essentials
  3. 3 - Understand AWS Access Management using IAM Service
  4. 4 - Securing AWS Root User Account
  5. 5 - IAM Users, Groups & Policies
  6. 6 - Docker Security Best Practices
  7. 7 - Secure Access from CI/CD Pipeline to AWS
  8. 8 - Understand Importance of IAM Roles in AWS Cloud Security
  9. 9 - Overview of IAM Resources & Secure Access Management in AWS
Chapter 9:Secure Continuous Deployment & DAST
  1. 1 - Chapter Handout
  2. 2 - Security Essentials for Accessing Deployment Server
  3. 3 - Configure AWS Systems Manager for EC2 Server
  4. 4 - AWS SSM Commands in Release Pipeline for Server Access
  5. 5 - Secure Continuous Deployment to Server using SSM
  6. 6 - Secure Access to AWS with IAM Roles & Short-Lived Credentials
  7. 7 - Overview of AWS Security Measures and Continuous Security Improvements
  8. 8 - Understand Dynamic Application Security Testing (DAST)
  9. 9 - Configure Automated DAST Scans in CI/CD Pipeline
  10. 10 - Overview of Complete DevSecOps Pipeline with Static and Dynamic Security Scans
Chapter 10:IaC and GitOps for DevSecOps
  1. 1 - Chapter Handout
  2. 2 - Understand Impact of IaC in Security & DevSecOps
  3. 3 - Terraform Script for AWS Infrastructure Provisioning
  4. 4 - Replace Manually Created Infrastructure with Automatically Provisioned Resources
  5. 5 - Build CI/CD Pipeline for Infrastructure Code using GitOps Principles
  6. 6 - Configure Remote State for Terraform
  7. 7 - Add Automated Security Scan to TF Infrastructure Code
  8. 8 - Understand IaC Concept "Cattle vs Pets"
Chapter 11:Logging & Monitoring for Security
  1. 1 - Chapter Handout
  2. 2 - Understand Need for Logging and Monitoring in Security
  3. 3 - Introduction to CloudTrail and CloudWatch
  4. 4 - CloudTrail Event History
  5. 5 - Configure Multi-Region Trail in CloudTrail & Forward Logs to CloudWatch
  6. 6 - Create CloudWatch Alarm for EC2 Instance
  7. 7 - Create Custom Metric Filter for Failed Login Metrics
  8. 8 - Configure Alarm for Failed Login Attempts
  9. 9 - Configure AWS Budgets for Monthly Usage Costs
  10. 10 - Complete Bootcamp Part 1 - Next Steps
Chapter 12:Introduction to Kubernetes Security
  1. 1 - Chapter Handout
  2. 2 - Kubernetes Security Overview
  3. 3 - Kubernetes Security Best Practices
  4. 4 - Provision AWS EKS Cluster
Chapter 13:Kubernetes Access Management with AWS EKS
  1. 1 - Chapter Handout
  2. 2 - Chapter Introduction
  3. 3 - Role Based Access Control (RBAC)
  4. 4 - IAM Roles and K8s Roles - How it works
  5. 5 - Configure IAM Roles and link to K8s Roles in IaC
  6. 6 - Configure K8s Role and ClusterRole in IaC
  7. 7 - Review and Test Access
  8. 8 - Summary & Wrap Up
Chapter 14:Secure IaC Pipeline for EKS provisioning
  1. 1 - Chapter Handout
  2. 2 - Using GitLab OIDC in AWS
  3. 3 - Configure Authentication with GitLab Identity Provider
  4. 4 - Pipeline Configuration for establishing a secure connection
  5. 5 - Terraform Configuration for EKS provisioning
  6. 6 - Summary & Wrap Up
Chapter 15:Bootstrapping clusters with EKS Blueprints
  1. 1 - Chapter Handout
  2. 2 - Introduction to EKS Blueprints
  3. 3 - Overview of EKS Add-ons we install
  4. 4 - Configure EKS Add-ons
  5. 5 - Troubleshooting & Tuning Autoscaler
  6. 6 - Access Token Expiration
Chapter 16:Application Release Pipeline with ArgoCD
  1. 1 - Chapter Handout
  2. 2 - Chapter Overview
  3. 3 - ArgoCD explained (Part 1) - What, Why and How
  4. 4 - ArgoCD explained (Part 2) - Benefits and Configuration
  5. 5 - Overview of CI/CD Pipelines to Git repositories
  6. 6 - Configure ArgoCD in IaC (Deploy Argo - Part 1)
  7. 7 - IaC Pipeline Configuration (Deploy Argo - Part 2)
  8. 8 - Deployment through Pipeline and Access Argo UI (Deploy Argo - Part 3)
  9. 9 - K8s Manifests for Microservices App using Kustomize
  10. 10 - Create GitOps Pipeline to update Kustomization File
  11. 11 - Create CI Pipeline that triggers GitOps Pipeline
  12. 12 - See Whole Automated Workflow in Action 🚀
Chapter 17:Policy as Code with Open Policy Agent
  1. 1 - Chapter Handout
  2. 2 - Why Policy as Code
  3. 3 - Introduction to Open Policy Agent (OPA) and OPA Gatekeeper
  4. 4 - How Gatekeeper and OPA works
  5. 5 - Install OPA Gatekeeper in Cluster
  6. 6 - Defining Policies
  7. 7 - Define Policy to reject NodePort Service
  8. 8 - Define Policy to reject Privileged Containers
  9. 9 - Summary
Chapter 18:Secrets Management in Kubernetes
  1. 1 - Chapter Handout
  2. 2 - Why Secrets Manager are needed
  3. 3 - Introduction to External Secrets Operator in K8s
  4. 4 - Capabilities of Secrets Management Tools
  5. 5 - Vault Capabilities (Vault Deep Dive Part 1)
  6. 6 - How Vault works (Vault Deep Dive Part 2)
  7. 7 - Introduction to AWS Secrets Manager
  8. 8 - Deploy External Secrets Controller (Demo - Part 1)
  9. 9 - Create SecretStore and ExternalSecret (Demo - Part 2)
  10. 10 - Use Secret in Microservice (Demo - Part 3)
Chapter 19:Service Mesh with Istio
  1. 1 - Chapter Handout
  2. 2 - Chapter Overview
  3. 3 - Introduction to Service Mesh and Istio
  4. 4 - Install Istio with Terraform and IaC Pipeline
  5. 5 - Configure Traffic Routing
  6. 6 - Configure a Secure Gateway (https) as Entrypoint into the cluster
  7. 7 - mTLS in Istio - Deep Dive
  8. 8 - Authorization in Istio - Deep Dive
  9. 9 - Istio Policies vs K8s Network Policies
  10. 10 - Configure Authorization Policies to define which Pod can talk to which
  11. 11 - Wrap Up
Chapter 20:Compliance as Code
  1. 1 - Chapter Handout
  2. 2 - What is Compliance
  3. 3 - What are CIS Benchmarks
  4. 4 - Why Compliance as Code
  5. 5 - Demo Overview and Intro to AWS Config
  6. 6 - Setting up AWS Config Rules
  7. 7 - Configure Auto-Remediation for Insecure Security Groups for EC2 Instances
  8. 8 - Configure Auto-Remediation for CloudTrail Logging
  9. 9 - Configure Compliance Rules for AWS EKS Service
Chapter 21:Adopt DevSecOps in Organizations
  1. 1 - Why DevSecOps is Important
  2. 2 - Driving Cultural Change - Real-World Examples
  3. 3 - Practical Tips on how to implement DevSecOps in Organizations
  4. 4 - Final Summary: The DevSecOps Transformation

Industry Real Life Projects

Gain experience with projects that mirror actual DevSecOps tasks at work

Automated Security Scans Management

project gitlabdefectdojonjsscangitleakspython

Upload security scan results from GitLeaks, Semgrep and NJSScan jobs automatically to DefectDojo via CI pipeline using Python script

EKS Traffic Security with Service Mesh

project IstiogitlabTerraformKubernetesAWSEKS

Secure cluster internal traffic with secure service mesh network layer and define authorization policies. Also expose micro services app through Istio gateway via secure Https access

Automated DAST Scan in Pipeline

project DAST ZapgitlabKubernetesAWSEKS

Configure ZAP job in GitLab CI/CD pipeline to run automated Dynamic Application Security Testing (DAST) scans after app deployment

Secure Access to EKS with RBAC & IAM

project Kubernetes.pngAWS.pngTerraform.pngEKS circled.png

Define Kubernetes access with Role Based Access Control (RBAC) - creating K8s Roles and Cluster Roles. Map the K8s Roles to AWS IAM with secure access configuration best practices

Fully Secure IaC Pipeline for EKS

project gitlab circled.pngTerraform.pngAWS.pngKubernetes.pngEKS circled.png

Create IaC Pipeline that establishes a secure connection with AWS using GitLab's web identity provider, using AWS STS service to access cluster with temporary access tokens

Remediate Detected Security Issues

project defectdojo circled.pngnjsscan circled.pnggitleaks circled.png

Remediate weak cryptography and SQL injection vulnerabilities detected in application code by NJSScan and Semgrep security scanning

⤓ Download Full Demo Projects

What Students Say About Our Programs 💜

Nothing makes us happier than the success of our students

testimonial.pngtestimonial-2.pngDevSecOps Bootcamp Trustpilot Review.png
testimonial-1.pngtestimonial-4.png

See our 4.9 Reviews on Trustpilot

Single Payment

Save $100 with single payment

$2,450

Enroll Now!
  • 30-day money back
  • 100% real-life projects
  • 24/7 live support

*Price excludes any applicable VAT taxes

Installment Plan

Pay with 5 easy installments

5 x $510

(in total $2,550)

Enroll Now!
  • 30-day money back
  • 100% real-life projects
  • 24/7 live support

*Price excludes any applicable VAT taxes

What’s included in the DevSecOps Bootcamp

23+ Tools covered

  • Most comprehensive DevSecOps course with 23+ tools to learn
  • Advanced projects that build on top of each other
  • Real-life use cases of integrating multiple tools together to build DevSecOps automations

Real-Life Projects

  • Build an extensive portfolio of projects to showcase your work
  • Gain experience and confidence with tons of practical training
  • Projects that mirror actual DevOps tasks and are directly applicable at work

Live Support

  • Live Support from senior DevOps and Cloud engineers
  • Multiple timezones covered for fast response times
  • 24/7 support including weekends, so you can learn any time convenient for you
Bonus #1

DevSecOps Certification

Bonus #2

Illustrated Handouts

  • Accompanying handout for every single chapter
  • Overview with key takeaways to retain your knowledge most efficiently
Bonus #3

Community

  • Be part of exclusive Discord community
  • Support in multiple timezones, to guarantee quick reply no matter where you are
Convince your boss

Convince your boss to invest in your education

Almost half of company training budget remains unused. Be sure to ask your employer, whether they will pay for your professional training. We help you in this process. Get quote and "convince your boss" letter

The Only DevSecOps Engineer Bootcamp You Need

Our TWN DevSecOps Bootcamp

  • Affordable, top-tier education
  • Learn how to combine the tools, so you are able to connect the dots and have a clear big picture understanding
  • Every line of code is explained, deep proficiency in every tool, no knowledge gaps at all
  • Always up-to-date, always relevant learning materials
  • Flexible to adjust to your life circumstances, learn at your own pace
  • Re-watch, get back to the bootcamp later to revisit topics for your work

Other Academies/Bootcamps

  • Expensive: The Average Cost is $5,000 - $10,000
  • Teach tools isolated from each other, so you don't get the complete picture and how to build end-2-end processes
  • Copy-pasting of code, so you miss concepts and deep understanding of tools
  • Content gets old, with no updates
  • Mandatory class times and rigid completion date
  • No access to materials after program. Can't review later for on-the-job tasks

Who this bootcamp is for?

This is an advanced course that builds on top of existing DevOps know-how

Pre-Requisities:

Intermediate level of the following DevOps technologies and concepts:

  • Be able to build a complete CI/CD Pipeline
  • Docker
  • Kubernetes
  • Linux
  • Git
  • AWS Platform
  • IaC with Terraform
  • GitLab CI/CD

Who this course is NOT for:

  • For complete DevOps Newbies
  • People with basic engineering skills

You can learn the all this yourself, BUT please note:
When you enroll in our DevSecOps Bootcamp, you need  the same level of knowledge that you learn in our DevOps bootcamp & GitLab Cl course!

risk free

Enroll completely risk free

You will 10x your value by learning DevSecOps skills from this Bootcamp

Be recognized as a top tech professional and land high-paying jobs, because...

the demand for DevSecOps skills is at an all-time high, with the rate of attacks increasing.

Very few engineers have this advanced skillset, so this is your opportunity to really stand out!

DevSecOps engineer salary range on Glassdoor

Need any advice or question before enrollment?

Contact Us

Happy to answer any question you might still have!

Nana Gelb.png

"The most profound DevSecOps course that exists"

"How do I know and how can I make such a bold statement?

I literally bought and went through every known DevSecOps course and bootcamp and program available (there aren’t many), some of them pretty decent. But I made sure that ours would be 10x better than the best among those.

I actually analyzed things they were missing, things that I know we generally do better, like animations, practical real life use cases etc.

Created in collaboration with industry experts

And for every single topic, I got inputs from industry experts. I got inputs from the engineers of the tools (AWS, Docker, K8s engineers specialized in security aspects of the technology) that I covered in the course to make sure the production best practices and real-like scenarios would be properly covered. And I’m fortunate enough to have that access through our channel’s reach. I used that opportunity and took advantage of every resource I had available to make this course even more valuable for our students.

Why go so crazy about it?

Because why not. Why not do the best, put in the 200% and go above and beyond. This is what I love doing, this is what we are actually good at and this is what I see changing people’s careers and lives. So my question would be, how would I not do all these?

So I can say with absolute confidence, that our DevSecOps course is the highest quality content, you can find. And where you can learn the most and REALLY learn how to actually build the real-life production-grade DevSecOps pipelines, which is not an easy task to do at all and there aren’t many engineers that will be able to claim this skill.

So if you really wanna stand out with your expertise and 10x your market value on the job market and push your career to the next level, then you are absolutely right with us.

I actually literally just typed this out, as it flowed through my mind, because I just feel like we need to communicate the value that we are creating through this courses for the students. And honestly I don’t wanna downplay and undersell what we have created with intentional, deliberate effort. None of these quality criteria are random and accidental. I made sure that we actually created the best course available out there, and I want to deliver the message properly too, so I got a bit carried away :D

See you inside,
Nana"

Enroll Now

Frequently Asked Questions

Can I work beside the bootcamp?

Yes! The bootcamp is created with working participants in mind, because our participants are often already working as an engineer expanding their skills.

That being said, you can work with the provided materials whenever you want. Be it before going to work, on the weekends or late at night. That is up to you.

How long do I have access to the Bootcamp materials?

You will have access to the bootcamp AND the daily professional support for 2 full years. This duration is much longer than what it takes to complete the bootcamp (which is 4 months, part-time), so even if you need to take several breaks in between, there will be enough time to complete the program 😊

But the great news is that, we provide an option to extend the access to the materials as well as the daily support. So you don’t have to re-purchase the bootcamp after 2 year access expiration.

Plus, after 2 years, you automatically become an honorary member of our TechWorld with Nana alumni group 💪

In what format is this bootcamp? The ultimate comparison to live classes 🚀

The bootcamp is a structured course of videos, handouts, Git projects etc. It's structured in a way, that you can easily follow them module by module, lecture by lecture, and work through it in a specific order. This guarantees a smooth flow of the learning process for all our students. It's self paced, so you can schedule your learning sessions, watch the videos and work through the hands-on projects at your own pace.

Compared to the traditional way of live classes, this has actually many advantages over live classes, which are often overlooked. So I want to highlight those here:

HANDS-ON WORK

✅ You can rewatch lectures if you haven’t understood something, stop and practically work along the demos

❌ You can't rewatch. In live classes there is no time for doing deep hands-on work. If they do, either instructor is not able to wait for all students to finish certain tasks or you need to wait e.g. 30mins for other students to get the task done and so valuable learning time is lost very easily. Ultimately, you learn much less in this format.

ACCESS OF MATERIALS

✅ You also have access to the materials for 2 years, which is great because you may want to revisit some lectures, when you actually have found a job or when you work on such tasks. In that case you can refresh some of the knowledge or use the videos as reference.

❌ You can’t revisit lectures and demos later at work. So when you finally need to implement stuff, you may have forgotten many things. Also in other self-paced bootcamps you only get access to the materials for as long as the bootcamp takes. So e.g. when they take 4 or 6 months, you will have access for 4 or 6 months, but not for 2 whole years!

VIDEO over FACE

✅ Video format allows us to add engaging and helpful animations that further help to understand complex concepts as well as showcase the demos

❌ You get a presentation by lecturer, either seeing the face (which doesn't add value to your understanding) or they have static slides, which are boring and your mind gets distracted

SUPPORT

✅ Ensuring that students get the support they need, is actually a high priority for us. We have several experienced engineers, who support our students throughout the program through their learning journey. They are from different time zones to make sure students get quick replies. You will be part of a Discord group, where you can ask questions around the clock. You can also see past questions to review and exchange with other students of course.

❌ In live classes you can only ask questions during the live class. And mostly the questions don’t pop up immediately when you hear them, but e.g. only when you actually work in practice with it. So the advantages of being able to ask "live" is not existent.

PRICE

✅ Another big advantage is of course the difference in price. With our education you save $5,000-10,000 and still get a full education that prepares you for a highly-demanded job, which is quite unique and we are proud to be able to provide that! :)

❌ Bootcamp fee is 5-10x higher than ours

INSTRUCTOR

✅ You can check out Nana’s teaching style on Youtube and verify if it is understandable for you. And from feedback from 1000s of students and comments on Youtube, we know that Nana has a unique teaching style that fills knowledge gaps. She explains every detail and concept behind the tools . Understanding the why’s and the concepts behind the tools is what makes you feel confident of your newly acquired skills.

❌ On the other hand, you don’t know what instructor you will get, whether they can teach the complex topics to the students in an easy and understandable way. Whether they teach in a boring way, whether they use complex terms that you don't understand.

How long does the bootcamp take? What does "self-paced" mean?

The bootcamp is a self-paced program, meaning it consists of online videos (and other materials like PDF files), which you can watch whenever you want.

So the program has no start and end date or duration you need to finish.

Duration depends on several factors

How long it takes for you to finish depends on several factors, like your background/experience, do you work full-time or part-time on the bootcamp, how intensely you work along the demo projects.

Our estimation for someone, who works part-time on it and has the necessary pre-requisite knowledge listed, is 4 months.

However, you will have access to all the videos for 2 years, if you want to look something up or freshen up your knowledge later.

What if I'm unhappy with the course?

Generally if something is unclear or you have problems with the course, we will try to support you immediately to answer all your questions. We are also happy to hear your feedback or criticism immediately, so we can fix it for you.

However, if you are still unsatisfied with your purchase, you can request a refund within the first 30 days. Check out our exact refund policy here: https://www.techworld-with-nana.com/terms-bootcamp

To ask for a refund, just send us an e-mail at support@techworld-with-nana.com

Please include the reason why you're asking for a refund and the email address you use for your course account.

We are always improving the bootcamp based also or especially on student's feedback, so we would like to know what we can do better.

Download the Syllabus for the DevSecOps Bootcamp

This brochure provides a detailed overview of our Certified DevSecOps Practitioner Program

* indicates required

Download Portfolio of Demo Projects of DevSecOps Bootcamp

This download provides an overview of all demo projects you will build throughout the Certified DevSecOps Practitioner Program

* indicates required

Request Training Budget for the DevSecOps Bootcamp

Almost half of company training budget remain unused. Don't let your career progress stall, simply because you didn't ask! Provide your details in the form, and we'll send you a personalized quote for your company! This will simplify the approval process for your training expenses.

* indicates required