Foundational: Cloud Engineer

Foundational principles of application security for cloud engineers. (Video Only)

Total Learning Path Duration: 4 hours and 11 minutes

Introduction to Security Journey

Introduction to Security

Core Security Concepts

Security Culture and Mindset

Data Breaches

Security Business Case

Prioritizing Security

Translating Security

Risk Managment for AppSec

Privacy and Customer Data Protection

Dealing with Vulnerabilities

Security at Home

Tips for Secure Remote Work

OWASP Universe

Knowledge Sources

Threat Landscape: Cloud

Secure Development Lifecycle

Six Foundational Truths of Application Security

Intermediate: Cloud Engineer

In-depth exploration of threat modeling, threats, and security controls for cloud engineers. (Video + Hands On)

Total Learning Path Duration: 4 hours and 57 minutes

Security Requirements

Threat Modeling Basics

Threat Modeling Process

Threat Modeling Examples

Threat Modeling Manifesto

Threat Modeling (HackEDU)

Input Validation

Output Encoding

Authentication Theory

Authorization Theory

Logging and Exception Handling

Cryptography

Software Supply Chain

Static Application Security Testing (SAST)

Static Application Security Testing (SAST) (HackEDU)

Dynamic Application Security Testing (DAST)

Dynamic Application Security Testing (DAST) (HackEDU)

Vulnerability Scanning

Next Generation AppSec Tools

Penetration Testing and Bug Bounty

Advanced: AWS (Cloud Engineer)

Understand operational security, cloud security fundamentals, then understand AWS security topics covering S3 and EC2 hardening, access control, secrets management, and logging. (Video Only)

Total Learning Path Duration: 4 hours and 59 minutes

Penetration Testing and Bug Bounty

AppSec in an Agile World | Part 1

AppSec in an Agile World | Part 2

AppSec in a DevOps World

Security Behaviors for DevOps

Designing a Secure App or Product

Thinking like a Penetration Tester

AWS: Introduction to AWS Security

Cloud Governance

AWS Five Cloud Security Disciplines

Cloud Threat Landscape

AWS Security Top Ten

AWS Secure Access Control

AWS S3 Hardening

AWS EC2 Hardening

AWS Centralized Logging

AWS Managing Secrets

AWS Security Tools

Advanced: Azure (Cloud Engineer)

Understand operational security, and cloud security fundamentals, then understand Azure security topics covering secrets management, logging, storage hardening, VM hardening, and security tools. (Video Only)

Total Learning Path Duration: 4 hours and 1 minute

Penetration Testing and Bug Bounty

AppSec in an Agile World | Part 1

AppSec in an Agile World | Part 2

AppSec in a DevOps World

Security Behaviors for DevOps

Designing a Secure App or Product

Thinking like a Penetration Tester

Introduction to Cloud Security

Cloud Governance

Azure Security Top 10

Managing Secrets in Azure Part 1

Managing Secrets in Azure Part 2

Azure Centralized Logging

Azure Blob Storage Hardening

Azure Virtual Machine Hardening Part 1

Azure Virtual Machine Hardening Part 2

Azure Security Tools Part 1

Azure Security Tools Part 2

Advanced: GCP (Cloud Engineer)

Understand operational security, and cloud security fundamentals, then understand GCP security topics covering authentication and authorization, storage hardening, network security, and security tools. (Video Only)

Total Learning Path Duration: 4 hours and 20 minutes

Penetration Testing and Bug Bounty

AppSec in an Agile World | Part 1

AppSec in an Agile World | Part 2

AppSec in a DevOps World

Security Behaviors for DevOps

Designing a Secure App or Product

Thinking like a Penetration Tester

Introduction to Cloud Security

Cloud Governance

The Five Cloud Security Disciplines

Cloud Threat Landscape

GCP Security Tips

GCP Authentication and Authorization

GCP Logging and Monitoring

GCP Storage Hardening

GCP Managing Secrets

GCP Network Security

GCP Securing Virtual Machines

GCP Security Tools

GCP Securing Google Kubernetes Engine