Description
A self-paced course on delivering software that is secure by construction rather than by inspection. Six modules cover secure development lifecycle fundamentals, secure coding practice, dependency and supply chain control, pipeline security and automated testing, container and deployment hardening, and operating a DevSecOps programme with measurable outcomes.
Written for developers, build engineers and security staff working on regulated or defence-adjacent software programmes. Tech Skills Library is independent and issues no certification, credential or licence.
What is included
Self-paced online course with 6 modules and 18 lessons, lifetime access to the course content, and a Certificate of Completion badge when every lesson is marked complete.
Curriculum
Module One — The Secure Development Lifecycle
- Why Security Must Shift Left
- Security Requirements and Abuse Cases
- Threat Modelling for Development Teams
Module Two — Secure Coding Practice
- Input Handling and Injection Defence
- Authentication, Sessions and Secrets in Code
- Error Handling, Logging and Safe Defaults
Module Three — Dependencies and Supply Chain
- Knowing What Is in Your Software
- Vulnerability Scanning and Patch Policy
- Protecting the Build from Tampering
Module Four — Pipeline Security and Automated Testing
- Static Analysis That Developers Accept
- Dynamic and Interactive Testing
- Securing the Pipeline Itself
Module Five — Containers and Deployment Hardening
- Hardening Container Images
- Infrastructure as Code Security
- Runtime Protection and Deployment Controls
Module Six — Operating a DevSecOps Programme
- Metrics That Show Security Improving
- Security Champions and Developer Enablement
- Compliance Evidence Without the Scramble
One-time purchase. Education and skill-building only; completion does not guarantee a job, promotion, security clearance or clearance eligibility, and no certification, credential or licence is issued.
