Security
A DevOps engineer who specializes in security is often referred to as a DevSecOps engineer. DevSecOps engineers have a deep understanding of the CI/CD process as well.
Security Is Everyone's Responsibility
Security is everyone's job. Anyone who has any stake in delivering the software has a role in ensuring the application's security.
The job of a DevOps security engineer is to ensure that security is built in and included from the onset of a project.
DevOps engineers specializing in security have responsibilities that are broken down into two areas: CI/CD processes and environment and data. We will first look at CI/CD process security and the skills required to implement it.
CI/CD process security
Let's revisit the pipeline discussed earlier; numbers have been added to the following diagram to correlate to the following security items:
- Container scanning (1): Container scanning should be added to the process of bringing new containers...
