NUS ISS Logo
DevSecOps Curriculum

DevSecOps Engineering and Automation

This curriculum covers three core areas with a focus on embedding security throughout the entire software lifecycle rather than treating it as an afterthought.

Build & Deploy

Configuration management, CI/CD pipelines, Infrastructure as Code, and container management

Security Integration

SAST, DAST, Software Composition Analysis, vulnerability assessment, and secure coding practices

Governance & Measurement

Compliance as Code, business metrics, dashboards, and the DevSecOps Maturity Model

Workshops

11 total workshops

Source Control Management

Learn version control fundamentals with Git and GitHub

Containerization & Security

Learn container technologies with Docker and Kubernetes

Infrastructure as Code

Automate infrastructure provisioning with Terraform and Ansible

GitHub Actions - CICD

Automate workflows with GitHub Actions for continuous integration and deployment

Unit Testing

Learn unit testing fundamentals and best practices

Load Testing

Learn performance and load testing techniques

E2E Pipeline Design

Design a comprehensive end-to-end CI/CD pipeline