Learning

Threat modeling, requirements and security design decisions.

• Secure Coding
• Threat Modeling
• Identity & Access Management
• Security Policies
• Risk Management

Static analysis, secret detection and secure coding practices.

• SAST
• SCA
• Secret Detection
• IaC Security
• Secrets Management
• Dependency Management

Dependency scanning, image scanning, SBOM generation and signing.

• SAST
• SCA
• Container Security
• IaC Security
• SBOM
• Policy as Code

Dynamic testing, integration security tests and security gates.

• DAST
• Security Gates
• API Security

Approval controls, artefact promotion and provenance.

• SBOM
• Supply Chain Security
• Artifact Signing
• Build Provenance
• SLSA Levels
• Pipeline Security

Policy enforcement, admission control and infrastructure security.

• DAST
• Container Security
• Policy as Code
• Kubernetes Security
• Secrets Management
• Supply Chain Security

Runtime security, secrets rotation and configuration reconciliation.

• Kubernetes Security
• Secrets Management
• Ansible Security
• Infrastructure Automation Security
• Configuration Management
• OpenShift Security

Detection engineering, SIEM, compliance evidence and incident response.

• Runtime Security
• CSPM
• Vulnerability Management
• SIEM & Security Analytics
• Security Logging
• Monitoring & Alerting