DevSecOps for AI-Assisted Development: Hands-On Security

This course contains the use of artificial intelligence.AI coding assistants are changing how software is designed, written, tested, and deployed. While these tools can accelerate development, they also introduce security challenges involving generated code, sensitive data, dependencies, autonomous agents, and development infrastructure.In this hands-on course, you will learn how to apply DevSecOps principles throughout the AI-assisted software development lifecycle.You'll begin with secure software development fundamentals, including threat modeling, shift-left security, OWASP guidance, and the NIST Secure Software Development Framework. You'll then explore how to configure AI coding environments, review generated code, and establish security guardrails for developers and autonomous coding agents.Through practical demonstrations and guided exercises, you'll work with GitHub Actions, Semgrep, CodeQL, Gitleaks, Docker, Trivy, and other security tools to identify vulnerabilities and automate security verification.You'll also explore software supply chain security, Software Bills of Materials (SBOMs), secure container development, MCP integration risks, and enterprise AI development governance.Throughout the course, you will build and secure a sample application using AI-assisted development techniques.By completing the capstone project, you will have practiced implementing a development workflow that combines AI-assisted coding, automated security scanning, human review, and controlled software delivery.This course is designed for software developers, DevOps engineers, security professionals, platform engineers, and technical architects who want practical experience securing modern AI-assisted development workflows.