Module 0.1: Linux Fundamentals & Distributions (Ubuntu, CentOS)

Module 0.2: File System Navigation & Permissions (chmod, chown, ACLs)

Module 0.3: Process Management & System Monitoring (ps, top, htop)

Module 0.4: Networking Commands (netstat, ss, curl, wget, iptables basics)

Module 0.5: Text Processing (grep, sed, awk, cut) & Shell Scripting Basics

Module 0.6: Python for Security Automation (Syntax, Data Types, Loops, Functions)

Module 0.7: Working with APIs & JSON/XML Parsing

Module 0.8: Web Fundamentals (HTTP/S, REST APIs, Headers, Cookies)

Module 0.9: Networking Concepts (OSI Model, TCP/IP, Subnetting, DNS, Firewalls)

Module 0.10: Basic Git Operations (Clone, Commit, Push, Pull, Branching)

Hands-on Lab: Writing Python scripts for log analysis, creating API clients, building simple web applications

Module 1.1: DevOps Philosophy & Three Ways (Flow, Feedback, Continuous Learning)

Module 1.2: DevSecOps Evolution & Business Value

Module 1.3: Shift-Left Security Methodology

Module 1.4: Advanced Git Security (Branch Protection, Signed Commits, Hooks)

Hands-on Lab: Setting up secure Git workflows with branch protection, signed commits, and pre-commit hooks

Module 2.1: Terraform/CloudFormation Security Best Practices

Module 2.2: IaC Scanning Tools (Checkov, tfsec, cfn_nag)

Module 2.3: Configuration Management Security (Ansible, Puppet, Chef)

Module 2.4: Policy as Code (Open Policy Agent, Sentinel)

Hands-on Lab: Building secure infrastructure with automated compliance checks

Module 3.1: Docker Security Best Practices (Image signing, user namespace, seccomp)

Module 3.2: Container Image Scanning (Trivy, Clair, Docker Scout)

Module 3.3: Kubernetes Security Hardening (RBAC, Pod Security Standards, Network Policies)

Module 3.4: Service Mesh Security (Istio, Linkerd mTLS implementation)

Hands-on Lab: Deploying secure Kubernetes cluster with admission controllers

Module 5.1: Pipeline Design Patterns (Blue/Green, Canary, Feature Flags)

Module 5.2: Jenkins Security Hardening (Master/Agent, Credentials, RBAC)

Module 5.3: GitLab CI/CD Security Features

Module 5.4: GitHub Actions Security Best Practices

Hands-on Lab: Building Jenkins pipeline with security plugins and secure configuration

Module 6.1: Static Application Security Testing (SonarQube, Fortify, Checkmarx)

Module 6.2: Software Composition Analysis (OWASP Dependency-Check, Snyk, WhiteSource)

Module 6.3: License Compliance Scanning (FOSSA, Black Duck)

Module 6.4: Custom Rule Development for SAST

Hands-on Lab: Integrating multiple SAST tools with failure thresholds in pipeline

Module 7.1: Dynamic Application Security Testing (OWASP ZAP, Burp Suite)

Module 7.2: Interactive Application Security Testing (IAST) Tools

Module 7.3: API Security Testing (Postman, Swagger, API Fortress)

Module 7.4: Runtime Application Self-Protection (RASP) Concepts

Hands-on Lab: Automated DAST scanning in staging environments with risk-based assessment

Module 8.1: Defining Security Thresholds & Policies

Module 8.2: Break-the-Build Strategies for Security

Module 8.3: Vulnerability Management in CI/CD

Module 8.4: Security Metrics & Dashboarding

Hands-on Lab: Implementing security gates with custom policies and reporting

Week 11: Threat Modeling & Secure Design

Module 9.1: STRIDE, DREAD, PASTA Threat Modeling Methodologies

Module 9.2: Threat Modeling Tools (Microsoft Threat Modeling Tool, IriusRisk)

Module 9.3: Architecture Risk Analysis

Module 9.4: Secure Coding Standards & Guidelines

Hands-on Lab: Conducting threat modeling sessions for microservices architecture

Module 10.1: Regulatory Frameworks (NIST, ISO 27001, SOC 2, PCI-DSS)

Module 10.2: Compliance as Code Tools (InSpec, Chef Compliance)

Module 10.3: Continuous Compliance Monitoring

Module 10.4: Audit Evidence Automation

Hands-on Lab: Building automated compliance checks for PCI-DSS requirements

Module 11.1: DevSecOps Incident Response Planning

Module 11.2: Security Chaos Engineering (Netflix’s Chaos Monkey, Gremlin)

Module 11.3: Digital Forensics in Container Environments

Module 11.4: Blameless Postmortems & Continuous Improvement

Hands-on Lab: Running chaos experiments on production-like environments