Professional Certificate in Mobile DevSecOps: Automating Security Testing

The Professional Certificate in Mobile DevSecOps: Automating Security Testing is designed for software developers, security professionals, and DevOps engineers who are committed to integrating security into the mobile application development lifecycle. This comprehensive programme equips learners with the knowledge and skills to automate security testing, ensuring that mobile applications are secure from the earliest stages of development. Participants will learn to apply DevSecOps principles, leverage automation tools and frameworks, and conduct comprehensive security assessments using both manual and automated methods.

Key skills and knowledge developed through this programme include the ability to configure and use continuous integration/continuous deployment (CI/CD) pipelines with built-in security testing, understand and implement mobile security standards and best practices, and use tools such as static and dynamic analysis, mobile application protection profiles (MAPPs), and container security tools. Learners will also gain expertise in secure coding practices, threat modeling, and vulnerability management, enabling them to proactively address security issues and enhance the overall security posture of mobile applications.

This programme significantly impacts career trajectories by providing professionals with the expertise needed to advance in roles such as mobile application security engineer, DevSecOps engineer, and security-focused software developer. Graduates are well-prepared to contribute to teams that prioritize security throughout the mobile application development process, ensuring that applications are not only functional but also resilient against potential threats.

1. 1. Introduction to DevSecOps: Learners will study the principles of DevSecOps and its importance in software development. They will gain foundational knowledge on integrating security practices into the development lifecycle.
2. 2. Automation Fundamentals: This module covers the basics of automation in software development, including scripting languages and tools like Jenkins, and how to set up automated pipelines.
3. 3. Security Testing Techniques: Learners will explore various security testing techniques and methods, including static and dynamic analysis, and manual and automated testing approaches.
4. 4. Static Application Security Testing (SAST): This module focuses on static analysis tools and techniques used to detect vulnerabilities in code before it is compiled or deployed.
5. 5. Dynamic Application Security Testing (DAST): Learners will learn about dynamic testing methods and tools, including how to perform penetration testing to identify vulnerabilities in running applications.
6. 6. Container Security: This module covers security best practices for containerized applications, including image scanning, runtime security, and configuration management.
7. 7. Cloud Security: Learners will study cloud security practices and tools, including IAM, network security, and compliance considerations for cloud environments.
8. 8. DevSecOps Tools and Orchestration: This module introduces learners to key DevSecOps tools and how to orchestrate them in a CI/CD pipeline to automate security testing and deployment.
9. 9. Advanced Security Testing Strategies: Learners will delve into advanced security testing strategies, including vulnerability assessments, threat modeling, and secure coding practices.
10. 10. Continuous Security Monitoring and Response: This module focuses on continuous security monitoring techniques and how to set up automated response mechanisms to security incidents.