Cert-prep courses with hands-on practice for AWS, Azure, Kubernetes, security and AIModule 1 of every course free, no card →
CloudaQube

Devops · intermediate

DevSecOps & Platform Engineering

Master the integration of security into modern DevOps pipelines and learn to build Internal Developer Platforms that accelerate delivery without sacrificing safety. From CI/CD hardening and container scanning to policy-as-code and Backstage-powered developer portals, this course equips you to embed security as code across the full software lifecycle.

  • 8 hours
  • 17 lessons
  • 4 modules
  • updated May 2026
Module 1 freeNo credit cardFull course from $8.99/mo
try it

Try it before you sign up

Read a full lesson and answer 3 questions from the Module 1 quiz. No account needed.

free lesson · read · 25 min

The DevSecOps Mindset: Shifting Security Left

DevSecOps is the practice of integrating security into every phase of the software development lifecycle (SDLC) rather than treating it as a final gate before release. The term 'shift-left' reflects moving security…
question 1 of 3 · from the Module 1 quiz
What does 'shifting security left' mean in a DevSecOps context?
Pick an answer.
curriculum

4 modules, 17 lessons

Module 1 is free — lessons, hands-on walkthrough and quiz.

  • readThe DevSecOps Mindset: Shifting Security Left25 min
  • videoDevSecOps Explained: Concepts and Architecture15 min
  • hands-onHands-On: Threat Modeling and Secret Detection20 min
  • quizModule 1 Quiz: DevSecOps Foundations10 min
how it's built

Built by the CloudaQube team

No celebrity instructor — here is exactly what goes into the course instead.

  • 01 5 guided hands-on walkthroughs you run in a real environment.
  • 02 4 module quizzes — every answer comes with an explanation.
  • 03 Last updated May 2026.
  • 04 Any module can become a hands-on lab in Labs Studio.
outcomes

What you'll be able to do

  • 01 Explain the DevSecOps philosophy and where security fits in each phase of the SDLC
  • 02 Identify and remediate vulnerabilities using SAST, DAST, and SCA tools in a CI/CD pipeline
  • 03 Build hardened GitHub Actions workflows with secrets management and supply chain integrity controls
  • 04 Apply container and Kubernetes security using Trivy, Falco, and OPA/Kyverno policy-as-code
  • 05 Evaluate and design an Internal Developer Platform using Backstage to improve developer experience
  • 06 Demonstrate compliance automation with audit logging, drift detection, and incident response playbooks
before you start
  • — Linux command line and Bash scripting
  • — Docker and Kubernetes fundamentals
  • — Experience with at least one CI/CD tool (GitHub Actions, Jenkins, or GitLab CI)
  • — Basic Python or scripting knowledge
  • — Familiarity with Git workflows and cloud platforms (AWS, Azure, or GCP)
questions

Before you start

How long does it take?

About 8 hours of lessons, videos and hands-on walkthroughs across 4 modules.

What’s free?

Module 1 in full — lessons, hands-on walkthrough and quiz — with no card required. Any paid plan (from $8.99/mo) unlocks all 4 modules, and starts with a 14-day free trial.

get started

Start the course with Module 1 free.

No card required. Unlock every module from $8.99/mo when you’re ready.

See pricing
      DevSecOps & Platform Engineering — Online Course | CloudaQube