Skip to content
Quest Training

DevSecOps Implementation & Secure CI/CD Pipelines Training Course

Shows how to build security into CI/CD pipelines with automated testing, source code and dependency checks, and governance that keeps delivery fast.

ASDO · Application Security & DevSecOpsAll Levels#2504ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Sectors:Information Technology & CybersecurityCategories:Application Security & DevSecOps

Course Overview

This advanced practical course provides a structured framework for implementing DevSecOps and integrating security throughout modern software delivery pipelines. It focuses on embedding security controls into development, integration, testing, deployment, and operational workflows while maintaining delivery speed, reliability, and governance. The programme covers DevSecOps principles, secure CI/CD architecture, automated security testing, source-code security, dependency and container scanning, infrastructure and configuration security, secrets management, security gates, vulnerability remediation, and continuous security monitoring. Participants will examine how security activities can be automated and integrated directly into development and deployment pipelines. Through practical pipeline scenarios, security automation exercises, configuration analysis, vulnerability-management activities, and implementation workshops, participants will develop the ability to design secure CI/CD workflows, establish appropriate security controls, automate security validation, manage vulnerabilities, and build a sustainable DevSecOps operating model.

Learning Objectives

  • Analyse DevSecOps principles and their role in modern software delivery.
  • Evaluate security requirements across development, integration, testing, deployment, and operations.
  • Design secure CI/CD pipeline architectures incorporating appropriate security controls.
  • Integrate automated security testing into continuous integration and delivery workflows.
  • Apply source-code, dependency, container, and configuration security controls.
  • Evaluate software components and dependencies for vulnerabilities and supply-chain risks.
  • Implement effective secrets, credentials, keys, and sensitive-configuration management.
  • Establish security gates and release controls based on risk and security criteria.
  • Analyse vulnerability findings and prioritise remediation within development workflows.
  • Integrate security monitoring and feedback mechanisms into software delivery processes.
  • Strengthen collaboration between development, security, and operations teams.
  • Develop a practical DevSecOps implementation roadmap aligned with organisational objectives.

Who Should Attend

This programme is designed for DevOps engineers, DevSecOps professionals, software developers, application security specialists, cybersecurity professionals, cloud engineers, system administrators, and IT managers responsible for secure software delivery. It is also suitable for software architects, security engineers, penetration testers, quality assurance professionals, technical leads, platform engineers, release managers, and professionals involved in CI/CD, cloud environments, application security, and technology risk management. The programme is particularly relevant to organisations using automated software delivery, cloud platforms, containers, infrastructure as code, microservices, and enterprise CI/CD environments.

Learning Outcomes

  • Explain the principles, practices, and operating model of DevSecOps.
  • Assess security requirements across modern software delivery pipelines.
  • Design CI/CD pipelines with integrated security controls.
  • Integrate automated application and infrastructure security testing.
  • Evaluate source code, dependencies, containers, and configurations for security risks.
  • Implement effective secrets and credential management controls.
  • Configure risk-based security gates within software delivery workflows.
  • Analyse vulnerability findings and establish appropriate remediation priorities.
  • Integrate security feedback and monitoring into development and deployment processes.
  • Strengthen software supply-chain security across development pipelines.
  • Establish collaboration and accountability between development, security, and operations teams.
  • Develop a practical roadmap for implementing and continuously improving DevSecOps.

Course Outline

Day 1

DevSecOps Foundations & Secure Software Delivery

  • DevSecOps principles and operating model
  • Evolution from traditional development and operations to DevSecOps
  • Security throughout the software delivery lifecycle
  • Roles and responsibilities across development, security, and operations
  • Security requirements and risk-based controls
  • CI/CD concepts and pipeline architecture
  • Security challenges in automated software delivery
  • DevSecOps culture, collaboration, and accountability
  • Security metrics and governance
  • Practical Application: Assessing a software delivery lifecycle and identifying DevSecOps integration opportunities
Day 2

Secure CI/CD Pipeline Architecture & Automation

  • Secure CI/CD architecture
  • Source-code management and branch security
  • Build and integration security
  • Automated security validation
  • Pipeline access control and authentication
  • Security gates and approval mechanisms
  • Build integrity and artifact security
  • Release management and deployment controls
  • Pipeline configuration and security hardening
  • Practical Application: Designing a secure CI/CD pipeline with integrated security controls
Day 3

Automated Security Testing & Software Supply-Chain Security

  • Security testing within CI/CD pipelines
  • Static application security testing
  • Dynamic application security testing
  • Software composition analysis
  • Dependency and package vulnerability management
  • Container image security
  • Infrastructure and configuration security
  • Software supply-chain threats and risks
  • Vulnerability prioritisation and remediation workflows
  • Practical Application: Building an automated security-testing and vulnerability-management workflow
Day 4

Secrets, Cloud Security & Secure Deployment

  • Secrets and credential management
  • API keys, certificates, tokens, and sensitive configuration
  • Secure infrastructure and configuration management
  • Infrastructure as code security
  • Cloud deployment security
  • Container and orchestration security
  • Secure artifact repositories and deployment environments
  • Runtime security and monitoring
  • Security incident response within DevSecOps environments
  • Practical Application: Security assessment of a cloud-based deployment pipeline
Day 5

DevSecOps Governance, Implementation & Continuous Improvement

  • DevSecOps governance and security ownership
  • Risk-based security gates and release decisions
  • Security metrics and performance monitoring
  • Vulnerability management and remediation tracking
  • Continuous security feedback
  • DevSecOps maturity assessment
  • Organisational adoption and change management
  • Common implementation challenges and corrective strategies
  • Continuous improvement and security automation
  • Final Workshop: Developing an Integrated DevSecOps Implementation & Secure CI/CD Roadmap

Upcoming Dates

Selected date

Riyadh · 31 May – 4 Jun 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
MilanScheduled
2 – 6 Nov 2026€7,000—
SelectDownload Brochure
MunichScheduled
9 – 13 Nov 2026€6,000—
SelectDownload Brochure
MuscatScheduled
16 – 20 Nov 2026€6,300—
SelectDownload Brochure
OnlineScheduled
22 – 26 Nov 2026€2,700€2,430until 2 Nov
SelectDownload Brochure
ParisScheduled
23 – 27 Nov 2026€6,700€6,030until 2 Nov
SelectDownload Brochure
RiyadhScheduled
30 Nov – 4 Dec 2026€4,800€4,320until 9 Nov
SelectDownload Brochure
RomeScheduled
7 – 11 Dec 2026€7,000€6,300until 16 Nov
SelectDownload Brochure
SalalahScheduled
14 – 18 Dec 2026€6,300€5,670until 23 Nov
SelectDownload Brochure
SingaporeScheduled
21 – 25 Dec 2026€8,000€7,200until 30 Nov
SelectDownload Brochure
TrabzonScheduled
28 Dec 2026 – 1 Jan 2027€5,300€4,770until 7 Dec
SelectDownload Brochure
TunisiaScheduled
4 – 8 Jan 2027€4,300€3,870until 14 Dec
SelectDownload Brochure
ViennaScheduled
4 – 8 Jan 2027€6,400€5,760until 14 Dec
SelectDownload Brochure
AmmanScheduled
10 – 14 Jan 2027€4,000€3,600until 21 Dec
SelectDownload Brochure
AmsterdamScheduled
18 – 22 Jan 2027€6,000€5,400until 28 Dec
SelectDownload Brochure
BakuScheduled
25 – 29 Jan 2027€5,300€4,770until 4 Jan
SelectDownload Brochure
BarcelonaScheduled
1 – 5 Feb 2027€6,000€5,400until 11 Jan
SelectDownload Brochure
CairoScheduled
8 – 12 Feb 2027€3,800€3,420until 18 Jan
SelectDownload Brochure
CasablancaScheduled
15 – 19 Feb 2027€4,700€4,230until 25 Jan
SelectDownload Brochure
DammamScheduled
22 – 26 Feb 2027€4,800€4,320until 1 Feb
SelectDownload Brochure
DohaScheduled
22 – 26 Feb 2027€4,700€4,230until 1 Feb
SelectDownload Brochure
DubaiScheduled
28 Feb – 4 Mar 2027€4,700€4,230until 8 Feb
SelectDownload Brochure
GenevaScheduled
8 – 12 Mar 2027€7,300€6,570until 15 Feb
SelectDownload Brochure
IstanbulScheduled
15 – 19 Mar 2027€5,300€4,770until 22 Feb
SelectDownload Brochure
Kuala LumpurScheduled
22 – 26 Mar 2027€4,700€4,230until 1 Mar
SelectDownload Brochure
LisbonScheduled
29 Mar – 2 Apr 2027€6,000€5,400until 8 Mar
SelectDownload Brochure
LondonScheduled
5 – 9 Apr 2027€5,800€5,220until 15 Mar
SelectDownload Brochure
MadridScheduled
12 – 16 Apr 2027€6,000€5,400until 22 Mar
SelectDownload Brochure
MakkahScheduled
12 – 16 Apr 2027€4,800€4,320until 22 Mar
SelectDownload Brochure
ManamaScheduled
19 – 23 Apr 2027€5,300€4,770until 29 Mar
SelectDownload Brochure
MarrakeshScheduled
26 – 30 Apr 2027€4,700€4,230until 5 Apr
SelectDownload Brochure
RiyadhScheduled
31 May – 4 Jun 2027€4,800€4,320until 10 May
✓ SelectedDownload Brochure

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.

Download BrochureContact Our Team