Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Zero-to-Hero Developer Security Operations Course
Rating: 3.3 out of 5(10 ratings)
46 students

Zero-to-Hero Developer Security Operations Course

In this course you will learn how to create a state of the art developer security operations program.
Created byEvan Gertis
Last updated 10/2022
English
English [Auto],

What you'll learn

  • Developer Security Operations Zero-to-Hero
  • Understand the fundamentals of leveraging the Veracode Platform as a Security Engineer.
  • Apply the security engineering concepts to a real use case scenario.
  • Work with industry recognized standard tooling from Veracode.
  • Work with industry recognized standard tooling from Burp Suite.
  • Work with industry recognized standard tooling from Elasticsearch.
  • Work with industry recognized standard tooling from JFROG Artifactory.

Course content

5 sections38 lectures1h 58m total length
  • Introduction to Veracode3:05
  • Security Champion1:38

    discover how a security champion acts as the liaison between development and security teams, educates developers, fixes security flaws, and keeps Veracode guidelines and the seven challenges in view.

  • Dynamic Analysis8:04

    Learn how to combine static and dynamic analysis through automated scanning to comprehensively identify vulnerabilities, configure unauthenticated and authenticated dynamic analyses, and schedule scans with the Veracode platform.

  • Understanding Dashboards0:57

    Learn to understand dashboards and convey security program results by analyzing Varicode scan data, using the security program overview, policy compliance overview, and scanning activity dashboards.

  • Custom Dashboard Filters0:48

    Apply custom dashboard filters on Varicode to narrow results and follow analytics documentation to set a date filter, using exact or relative dates such as before two years ago.

  • Customize Visualizations0:49

    Create custom visualizations to tailor data for management, using filters and publish date adjustments to show relevant scan results with Varicode platform access and documentation.

  • Save and Share Dashboards0:59

    Save and share dashboards to create an evidential history of security work for upper management, using the Veracode platform to export dashboards, choose Excel format, and share results.

  • Software Composition Analysis6:21

    Learn how to start using Varicode software composition analysis to inventory third-party components, identify vulnerabilities, and scan compiled applications via upload-and-scan or agent-based methods.

  • Static Analysis4:37

    Learn how to perform static analysis with SAST on Java, C#, and microservices using the Varicode platform. Upload binaries, configure scans, manage auto scan, and review results.

  • Security Report1:21

    Learn to assemble a consolidated Veracode report that includes the application score, SAST, DAST, and SCA findings, plus executive dashboards to showcase security program status.

  • Knowledge Check8:55

    Review Varicode knowledge recap, activate your account, manage multi-factor authentication, and generate Varicode API credentials. Explore Varicode software composition analysis for inventorying third-party components, scanning workflows, roles, and platform features.

Requirements

  • There aren't any specific requirements for taking this course. We aim to teach novice information security professionals and experienced professionals. The audience for this curriculum range from CISOs, Security Team Leads, and Security Engineers.

Description

Welcome to our approach to culture, automation, and platform design, where we forge your team's security skills like a sword. We integrate security as a shared responsibility throughout the entire IT life cycle and equip your team with the necessary skills for implementing "shift-left" development processes, like honing and sharpening a dagger.


Our curriculum includes automated Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Container Scanning, Penetration Testing, and systematic logging to evaluate scanning results, like the fire that fuels your passion for security. And with industry-recognized certifications and executive dashboards to monitor program progress, we'll help keep your assets safe.


Our training program is supported by industry-recognized certificates from Veracode, like the foundation and structure of your sword. We've developed a system that not only leverages state-of-the-art security tools but also provides an automated system that ensures accountability and open communication amongst teams, like the etiquette and grace that a warrior carries on and off the battlefield.


We follow the Net Forward Energy Ratio (NeFER) strategy principle, which provides a systematic process of questions that encourages individuals to take accountability for their work and encourages them to take steps in a forward direction, like a warrior who plans their battles wisely.


Our ideal client for this training program is a Security Engineer who works for a midsize corporation with roughly 40-50 employees. We'll offer the best training coupled with state-of-the-art technology and research-based management practicesto help you wield your security skills like a sword.


The target audience for this training program falls into three categories - CISO, Security Team Lead, or Security Engineer - each with their own unique challenges and opportunities, like the different battles that a warrior faces.


Join us on this journey to become security experts, where we'll hone your skills like a dagger, fuel your passion like fire, and equip you with the knowledge and tools to protect your organization's assets.

Who this course is for:

  • The purpose of this curriculum is to teach security engineering fundamentals. The concepts covered will enable individuals to be able to work independently. After establishing the processes described in the table of contents a security engineer will be able to manage the fundamental aspects of security for a company and influence organizational change. The typical timeframe for implementation is 3 months.