Become a Certified DevSecOps Engineer (E|CDE)​

CERTIFIED PROFESSIONALS IN 150 COUNTRIES
CERTIFIED PROFESSIONALS IN 150 COUNTRIES

Become a Certified DevSecOps Engineer (E|CDE)​

DevSecOps Certification Overview

EC-Council Certified DevSecOps Engineer (E|CDE) is a hands-on, instructor-led comprehensive DevSecOps certification program that helps professionals build the essential skills to design, develop, and maintain secure applications and infrastructure.
The E|CDE is a perfect blend of theoretical and practical knowledge of DevSecOps in your on-premises and cloud-native (AWS and Azure) environment.
miscellaneous
The program focuses on application DevSecOps and provides insights into infrastructure DevSecOps.
engineer
It helps DevSecOps Engineers develop and enhance their knowledge and skills in securing the application in all the stages of DevOps.

Program Information

What Will You Learn?

  • Understand DevOps security bottlenecks and discover how the culture, philosophy, practices, and tools of DevSecOps can enhance collaboration and communication across development and operations teams.
  • Integrate Eclipse and GitHub with Jenkins to build applications.
  • Integrate threat modeling tools like Threat Dragon, ThreatModeler, and Threatspec; manage security requirements with Jira and Confluence; and use Jenkins to create a secure CI/CD pipeline.
  • Integrate runtime application self-protection tools like Hdiv, Sqreen, and Dynatrace that protect applications during runtime with fewer false positives and remediate known vulnerabilities.
  • Implement tools like the Jfrog IDE plugin and the Codacy platform.
  • Implement various automation tools and practices, including Jenkins, Bamboo, TeamCity, and Gradle.
  • Implement penetration testing tools like gitGraber and GitMiner to secure CI/CD pipelines.
  • Integrate automated tools to identify security misconfigurations that could expose sensitive information and result in attacks.
  • Audit code pushes, pipelines, and compliance using logging and monitoring tools like Sumo Logic, Datadog, Splunk, the ELK stack, and Nagios.
  • Integrate compliance-as-code tools like Cloud Custodian and the DevSec framework to ensure that organizational regulatory or compliance requirements are met without hindering production.
  • Integrate tools and practices to build continuous feedback into the DevSecOps pipeline using Jenkins and Microsoft Teams email notifications.
  • Understand the DevSecOps toolchain and how to include security controls in automated DevOps pipelines.
  • Align security practices like security requirement gathering, threatmodeling, and secure code reviews with development workflows.
  • Understand and implement continuous security testing with static, dynamic, and interactive application security testing and SCA tools (e.g., Snyk, SonarQube, StackHawk, Checkmarx SAST, Debricked, WhiteSource Bolt).
  • Integrate SonarLint with the Eclipse and Visual Studio Code IDEs.
  • Integrate automated security testing into a CI/CD pipeline using Amazon CloudWatch; Amazon Elastic Container Registry; and AWS CodeCommit, CodeBuild, CodePipeline, Lambda, and Security Hub.
  • Perform continuous vulnerability scans on data and product builds using automated tools like Nessus, SonarCloud, Amazon Macie, and Probely.
  • Use AWS and Azure tools to secure applications.
  • Understand the concept of infrastructure as code and provision and configure infrastructure using tools like Ansible, Puppet, and Chef.
  • Use automated monitoring and alerting tools (e.g., Splunk, Azure Monitor, Nagios) and create a real-time alert and control system.
  • Scan and secure infrastructure using container and image scanners (Trivy and Qualys) and infrastructure security scanners (Bridgecrew and Checkov).
  • Integrate alerting tools like Opsgenie with log management and monitoring tools to enhance operations performance and security

Course Outline

Module 01: Understanding DevOps Culture
Module 02: Introduction to DevSecOps
Module 03: DevSecOps Pipeline—Plan Stage
Module 04: DevSecOps Pipeline—Code Stage
Module 05: DevSecOps Pipeline—Build and Test Stage
Module 06: DevSecOps Pipeline—Release and Deploy Stage
Module 07: DevSecOps Pipeline—Operate and Monitor Stage

Who Is It For?

  • C|ASE-certified professionals
  • Application security professionals
  • DevOps engineers
  • IT security professionals
  • Cybersecurity engineers and analysts
  • Software engineers and testers
  • Anyone with prior knowledge of application security who wants to build a career in DevSecOps

Job Roles Mapped to E|CDE Program

  • DevSecOps Engineer/Senior DevSecOps Engineer
  • Cloud DevSecOps Engineer
  • Azure DevSecOps Engineer
  • AWS DevSecOps Engineer
  • DevSecOps Analyst
  • DevSecOps Specialist
  • DevSecOps Specialist
  • DevSecOps Systems Administrator
  • DevSecOps System Engineer
  • DevSecOps Consultant
  • DevSecOps Systems Engineer
  • DevSecOps CI/CD Engineer
  • Infrastructure DevSecOps Engineer
Making an informed decision is difficult, and that’s where EC-Council’s E|CDE brochure comes to your rescue. The Certified DevSecOps Engineer credential is the most trusted cybersecurity certification that employers worldwide value while hiring skilled IT security professionals. The comprehensive curriculum covers the integration and automation of all the major and widely used tools, processes, and methodologies of DevSecOps that help organizations build secure applications rapidly. When you successfully achieve the E|CDE certification, you will be equipped with every skill you need to design, develop, and maintain secure applications and infrastructure. This is only an overview of E|CDE and what you will learn. For complete information, download the brochure now.

Program Information

What is Unique about the E|CDE Training and Certification Course?

E|CDE Lab Intensive Program

The E|CDE is a lab-intensive certification program where students will spend 70% of their total class time performing the labs. The labs are designed in such a way that they simulate a real-time DevSecOps pipeline. They also demonstrate the essential tools, technologies, and procedures widely used across the DevSecOps professional community. Hence, it will provide the students with rich hands-on experience in integrating and automating security practices in the DevOps lifecycle.

Responsibilities of Certified DevSecOps Professionals

What will you Learn

What Will You Learn?

  • Understand DevOps security bottlenecks and discover how the culture, philosophy, practices, and tools of DevSecOps can enhance collaboration and communication across development and operations teams.
  • Integrate Eclipse and GitHub with Jenkins to build applications.
  • Integrate threat modeling tools like Threat Dragon, ThreatModeler, and Threatspec; manage security requirements with Jira and Confluence; and use Jenkins to create a secure CI/CD pipeline.
  • Integrate runtime application self-protection tools like Hdiv, Sqreen, and Dynatrace that protect applications during runtime with fewer false positives and remediate known vulnerabilities.
  • Implement tools like the Jfrog IDE plugin and the Codacy platform.
  • Implement various automation tools and practices, including Jenkins, Bamboo, TeamCity, and Gradle.
  • Implement penetration testing tools like gitGraber and GitMiner to secure CI/CD pipelines.
  • Integrate automated tools to identify security misconfigurations that could expose sensitive information and result in attacks.
  • Audit code pushes, pipelines, and compliance using logging and monitoring tools like Sumo Logic, Datadog, Splunk, the ELK stack, and Nagios.
  • Integrate compliance-as-code tools like Cloud Custodian and the DevSec framework to ensure that organizational regulatory or compliance requirements are met without hindering production.
  • Integrate tools and practices to build continuous feedback into the DevSecOps pipeline using Jenkins and Microsoft Teams email notifications.
  • Understand the DevSecOps toolchain and how to include security controls in automated DevOps pipelines.
  • Align security practices like security requirement gathering, threatmodeling, and secure code reviews with development workflows.
  • Understand and implement continuous security testing with static, dynamic, and interactive application security testing and SCA tools (e.g., Snyk, SonarQube, StackHawk, Checkmarx SAST, Debricked, WhiteSource Bolt).
  • Integrate SonarLint with the Eclipse and Visual Studio Code IDEs.
  • Integrate automated security testing into a CI/CD pipeline using Amazon CloudWatch; Amazon Elastic Container Registry; and AWS CodeCommit, CodeBuild, CodePipeline, Lambda, and Security Hub.
  • Perform continuous vulnerability scans on data and product builds using automated tools like Nessus, SonarCloud, Amazon Macie, and Probely.
  • Use AWS and Azure tools to secure applications.
  • Understand the concept of infrastructure as code and provision and configure infrastructure using tools like Ansible, Puppet, and Chef.
  • Use automated monitoring and alerting tools (e.g., Splunk, Azure Monitor, Nagios) and create a real-time alert and control system.
  • Scan and secure infrastructure using container and image scanners (Trivy and Qualys) and infrastructure security scanners (Bridgecrew and Checkov).
  • Integrate alerting tools like Opsgenie with log management and monitoring tools to enhance operations performance and security

Course Outline

Course Outline

Module 01: Understanding DevOps Culture
Module 02: Introduction to DevSecOps
Module 03: DevSecOps Pipeline—Plan Stage
Module 04: DevSecOps Pipeline—Code Stage
Module 05: DevSecOps Pipeline—Build and Test Stage
Module 06: DevSecOps Pipeline—Release and Deploy Stage
Module 07: DevSecOps Pipeline—Operate and Monitor Stage

Who is it for?

Who Is It For?

  • C|ASE-certified professionals
  • Application security professionals
  • DevOps engineers
  • IT security professionals
  • Cybersecurity engineers and analysts
  • Software engineers and testers
  • Anyone with prior knowledge of application security who wants to build a career in DevSecOps

Job Roles

Job Roles Mapped to E|CDE Program

  • DevSecOps Engineer/Senior DevSecOps Engineer
  • Cloud DevSecOps Engineer
  • Azure DevSecOps Engineer
  • AWS DevSecOps Engineer
  • DevSecOps Analyst
  • DevSecOps Specialist
  • DevSecOps Specialist
  • DevSecOps Systems Administrator
  • DevSecOps System Engineer
  • DevSecOps Consultant
  • DevSecOps Systems Engineer
  • DevSecOps CI/CD Engineer
  • Infrastructure DevSecOps Engineer

Brochure

Making an informed decision is difficult, and that’s where EC-Council’s E|CDE brochure comes to your rescue. The Certified DevSecOps Engineer credential is the most trusted cybersecurity certification that employers worldwide value while hiring skilled IT security professionals. The comprehensive curriculum covers the integration and automation of all the major and widely used tools, processes, and methodologies of DevSecOps that help organizations build secure applications rapidly. When you successfully achieve the E|CDE certification, you will be equipped with every skill you need to design, develop, and maintain secure applications and infrastructure. This is only an overview of E|CDE and what you will learn. For complete information, download the brochure now.

Job Opportunities for DevSecOps Engineers

96% of Organizations Benefit from DevSecOps

Demand for DevSecOps Engineers to skyrocket rapidly
Frequently Asked Questions
What is the eligibility criteria to apply for the EC-Council Certified DevSecOps Engineer (E|CDE)?

Applicants must be aware of application security concepts.

What is the format of the E|CDE exam?

The E|CDE is an MCQ (Multiple-Choice Question) and is available at the EC-Council Exam Centre.

How many questions are there in the E|CDE exam?

The E|CDE exam contains 100 multiple-choice questions.

What is the duration of the exam?

The duration of the E|CDE exam is four hours.

What is the passing percentage of the exam?

The candidate must score 70% to become a Certified DevSecOps Engineer.

Accreditations, Recognitions & Endorsements