SkillDevOps / Platform EngineerCloud and Network EngineerCybersecurity EngineerBlockchain Developer
Library · concept
Security fundamentals
The ideas every engineer needs to build and run systems safely: confidentiality, integrity and availability, password hashing, encryption, secrets and defence in depth.
Security fundamentals appeared in 70% of the Cybersecurity Engineer and 30% of the DevOps job descriptions we read, and they underpin compliance, IAM and application security.
The examples use Python's argon2-cffi and cryptography libraries. Timings were measured on one test machine; yours will differ, but the ratios hold.
Intermediate lessons for Security fundamentals are being written.
Advanced lessons for Security fundamentals are being written.
- 1BeginnerHarden a Linux server and prove your backups restore
- 2IntermediateConfigure a fleet of servers idempotently with Ansible
- 3IntermediateGuardrails that make insecure cloud setups impossible
- 4IntermediateHarden a host and measure it against a benchmark
- 5IntermediateZero-trust networking for a microservices app on Kubernetes
- 6AdvancedA cloud security posture review with fixes as code
- 7AdvancedA field-encryption and secrets service done right
- 8AdvancedA secure software supply chain with policy as code