Cyber Security: DevSecOps

This course focuses on DevSecOps, integrating security into the software lifecycle. Building and deploying software at scale requires security from the start. Built by the Cyber Skills Academy at Macquarie University, this course provides expertise to embed security into every software development phase. Co-designed with industry, it offers actionable knowledge for developers, engineers, and security professionals. You will learn: • Secure software architecture principles for resilient systems. • Security-aware coding practices, including API, access control, and web vulnerability management. • Application-layer security using static analysis and dependency checks. • CI/CD pipeline hardening with tools like Infrastructure as Code, SLSA, and SBOMs. • Cloud-native security for Azure deployments using containers and Kubernetes. • MLSecOps, addressing machine learning model security within DevSecOps workflows. • Attack surface awareness to anticipate and defend against threats. The course explores real-world tools and frameworks, teaching how to shift security left and build security into every commit, build, and deploy. This course provides skills for secure software delivery, from development to deployment. To succeed, learners should have a basic understanding of software development concepts and familiarity with command-line interfaces.