E|CDE Training – EC-Council Certified DevSecOps Engineer
E|CDE teaches you to build security into every stage of the DevOps pipeline, from planning through to operations. You set up automated controls, security testing and continuous monitoring across on-premises, AWS and Azure environments, using more than 100 labs built around realistic pipelines. We run it as a live online class, in person in Casablanca or on-site at your organization, in French or English.
Understand DevOps culture and DevSecOps principles
Bring threat modelling and security requirements into planning
Secure the code: review, static analysis, secrets and dependency management
Automate security testing in the build and test stages
Protect release and deployment, including containers and infrastructure as code
Monitor applications in production and act on alerts
Apply these practices on-premises, on AWS and on Azure
Program
Understanding DevOps culture
Principles, tooling and the CI/CD chain
Introduction to DevSecOps
Drivers, roles and the shift-left approach
DevSecOps pipeline – plan stage
Security requirements and threat modelling
DevSecOps pipeline – code stage
Static analysis, secrets, dependencies
DevSecOps pipeline – build and test stage
Dynamic testing and software composition analysis
DevSecOps pipeline – release and deploy stage
Containers, infrastructure as code, configuration
DevSecOps pipeline – operate and monitor stage
Logging, monitoring and feedback loops
Prerequisites
Knowledge of application security concepts
Familiarity with development and CI/CD tooling
Enrolment in EC-Council's E|CDE course, which is required for exam eligibility
Target audience
DevOps engineers and SREs
Software developers and testers
Application security professionals, including CASE holders
Cybersecurity engineers and analysts
Anyone with an application security background aiming for a DevSecOps role
The exam
The E|CDE exam (312-97) consists of 100 multiple-choice questions to answer in 4 hours, with a pass mark of 70%. To be eligible, you must have taken EC-Council's DevSecOps course. Questions cover the whole pipeline, from DevOps culture through to production monitoring. Exam delivery and renewal rules are set by EC-Council, and we explain them in detail when you enrol.
Preparation tips
Map each pipeline stage to the security tools that plug into it
Redo the AWS and Azure labs to compare equivalent services
Review container security and infrastructure-as-code concepts
Frequently asked questions (FAQ)
What is DevSecOps?
It means building security into DevOps practice: controls are automated and placed as early as possible in the pipeline, instead of arriving as a manual gate just before release. Security becomes a shared responsibility of developers, operations and security teams.
Do I need to be able to code?
Being comfortable with code and CI/CD tools helps, but you do not need to be an expert developer. An understanding of application security concepts is expected, though.
Which environments are used?
More than 100 labs: 32 on-premises, 32 on AWS and 29 on Microsoft Azure, so you practise the same ideas on several platforms.
Can I take the exam without the course?
No. EC-Council requires you to take its DevSecOps course to be eligible for exam 312-97, so the training and the exam are always taken together.
How does it relate to CASE?
CASE focuses on secure application development. E|CDE extends that approach to the whole pipeline and to automation, and CASE holders are part of its target audience.