>_SecOpsLog_

Advanced DevSecOps courses

Hands-on advanced-level courses across 15 tracks — command-first, each ending with a self-test.

All levels58Beginner14Intermediate18Advanced26

Linux

4 coursesBeginner → Advanced
04
03Advanced17 lessons · ~8hAdvanced Linux securityAttacker tradecraft on the host, then detection and response.self-test at the end04Advanced17 lessons · ~7hAdvanced Linux internals & toolingPerformance, systemd internals, storage, and the kernel.self-test at the end

Scripting

3 coursesBeginner → Advanced
03
03Advanced15 lessons · ~9hAdvanced scripting for DevSecOpsBeyond-expert Bash and Python — resilient, secure, production-grade automation.self-test at the end

Docker & containers

3 coursesBeginner → Advanced
03
03Advanced25 lessons · ~11hAdvanced container securityMinimal images, runtime hardening, and the escapes they stop.self-test at the end

CI/CD pipelines

4 coursesBeginner → Advanced
04
03Advanced18 lessons · ~9hSoftware supply chain securityMake every artifact verifiable, from commit to cluster.self-test at the end04Advanced15 lessons · ~9hSoftware supply chain in depthDeep supply-chain security — SLSA, in-toto, Sigstore, SBOMs, and admission.self-test at the end

Kubernetes

4 coursesBeginner → Advanced
04
03Advanced24 lessons · ~7hKubernetes security & hardeningSecure a cluster across all six CKS domains.self-test at the end04Advanced15 lessons · ~9hKubernetes attack & defenseThe attacker's playbook and the defenses — ATT&CK, RBAC, admission, control plane.self-test at the end

GitOps for infra

3 coursesAdvanced
03
01Advanced12 lessons · ~5hAtlantisTerraform plan and apply from pull requests, safely.self-test at the end02Advanced12 lessons · ~6hArgo CDDeclarative GitOps CD for Kubernetes — sync, health, drift.self-test at the end03Advanced12 lessons · ~6hFluxComposable GitOps for Kubernetes, reconciled from Git.self-test at the end

Cloud & DevOps certifications

4 coursesBeginner → Advanced
04
02Advanced15 lessons · ~10hAWS DevOps Engineer ProfessionalAutomate delivery on AWS — CI/CD, IaC, config, monitoring, resilience.self-test at the end04Advanced15 lessons · ~10hAzure DevOps Engineer ProfessionalDevOps on Azure — pipelines, repos, IaC, continuous delivery, secure delivery.self-test at the end

Provisioning (IaC)

8 coursesBeginner → Advanced
08
04Advanced12 lessons · ~5hTerragruntA thin wrapper over Terraform for DRY config at scale.self-test at the end

Testing & secrets

3 coursesIntermediate → Advanced
03
01Advanced12 lessons · ~5hTerratestAutomated infra testing in Go — real deploys and assertions.self-test at the end

Policy-as-code & scanning

4 coursesIntermediate → Advanced
04
01Advanced12 lessons · ~6hOPA & RegoPolicy-as-code with OPA — Rego, Conftest, and Gatekeeper.self-test at the end02Advanced13 lessons · ~7hPolicy-as-code at scaleRego and Kyverno beyond hello-world — org-wide guardrails.self-test at the end04Advanced15 lessons · ~9hCompliance as codeControls as tested policy that enforce and evidence themselves — SOC 2, PCI, CIS.self-test at the end

Secrets management

3 coursesBeginner → Advanced
03
03Advanced15 lessons · ~8hAdvanced secrets managementBeyond Vault basics — secret-zero, dynamic engines, and audit-proof rotation.self-test at the end

Cloud security

6 coursesIntermediate → Advanced
06
02Advanced15 lessons · ~9hAdvanced cloud securityBeyond-expert multi-cloud security — identity, network, keys, detection, and posture.self-test at the end03Advanced15 lessons · ~9hAWS security engineeringDeep AWS security — IAM escalation, detection, KMS, network, and IR.self-test at the end04Advanced15 lessons · ~9hGCP securityDeep Google Cloud security — hierarchy, IAM, VPC-SC, CMEK, SCC, and IR.self-test at the end05Advanced15 lessons · ~9hAzure securityDeep Azure security — Entra ID, RBAC, network, Key Vault, Defender, and IR.self-test at the end06Advanced15 lessons · ~9hZero-trust & workload identityIdentity as the perimeter — SPIFFE/SPIRE, mesh mTLS, authz, and federation.self-test at the end

Runtime & detection

2 coursesAdvanced
02
01Advanced15 lessons · ~9hRuntime & eBPF securityDeep runtime security — eBPF, Falco, Tetragon, Cilium, hardening, and escapes.self-test at the end02Advanced15 lessons · ~9hDetection engineeringBuild a detection program — detection-as-code, SIEM, hunting, DFIR, deception.self-test at the end