🔐 DevSecOps Engineer

Cybersecurity career path

Build security into CI/CD, infrastructure as code, containers and the software supply chain: SAST/SCA, secrets, policy as code, signing and Kubernetes hardening.

Typical roles

• DevSecOps Engineer
• Software Supply Chain Security Engineer
• Cloud-Native / Kubernetes Security Engineer
• Security Champion Lead

Suggested certifications, by phase

Foundation

• Security+ CompTIA Security+
• ECC DSE EC-Council DevSecOps Essentials
• DSOF PeopleCert DevSecOps Foundation
• KCNA Cloud Native Computing Foundation Kubernetes and Cloud Native Associate
• KCSA Kubernetes and Cloud Native Security Associate

Core

• PDSO CDP PDSO Certified DevSecOps Professional
• ECDE EC-Council Certified DevSecOps Engineer
• DSOP PeopleCert DevSecOps Practitioner
• CSC Practical DevSecOps Certified Security Champion
• GH-500 GitHub Advanced Security
• VA-003 HashiCorp Certified: Vault Associate (003)
• CKA Cloud Native Computing Foundation Certified Kubernetes Administrator
• KCA Kyverno Certified Associate
• CAPA Certified Argo Project Associate

Advanced

• PDSO CDE PDSO Certified DevSecOps Expert
• MDSO Mosse Institute Certified DevSecOps Engineer
• CKS Cloud Native Computing Foundation Certified Kubernetes Security Specialist
• CTMP Practical DevSecOps Certified Threat Modeling Professional
• PDSO CCSE Practical DevSecOps Certified Container Security Expert

Mastery

• CSSE Practical DevSecOps Certified Software Supply Chain Security Expert
• CCNSE Practical DevSecOps Certified Cloud-Native Security Expert
• GCSA GIAC Cloud Security Automation

A suggestion, not a set of prerequisites — one or two certifications per phase is plenty.