Cloud & DevSecOps

Container and Kubernetes Security

A hands-on 3 days programme that builds practical, job-ready capability in this area. Delivered through guided walkthroughs, worked examples and reusable checklists you can apply immediately.

◉ Cloud & DevSecOps◇ 3 Days Programme✓ Practical & Applied
Duration3 Days
ModeOnsite / Instructor-Led
LevelIntermediate
TrainerMd Jahangir Alam
FormatLecture + Workshop
Course Objective

What this programme helps you achieve

A hands-on 3 days programme that builds practical, job-ready capability in this area. Delivered through guided walkthroughs, worked examples and reusable checklists you can apply immediately.

Understand

Build a clear, structured understanding of the core concepts, terminology and drivers behind this domain.

Apply

Translate the framework into practical actions, controls and working methods you can use on real engagements.

Assess

Evaluate current-state maturity, identify gaps and prioritise the improvements that reduce the most risk.

Deliver

Produce the artefacts, evidence and reporting expected of a competent practitioner in this area.

Market Need

Why this matters now

Container and Kubernetes Security addresses a capability that organisations increasingly need but often lack in a structured, defensible form. Teams frequently rely on ad-hoc knowledge, scattered documents or vendor claims instead of a repeatable method.

This programme closes that gap. It gives participants a shared vocabulary, a practical method and a set of reusable artefacts so the organisation can operate this domain consistently rather than reactively.

Framework alignment: Aligned with CIS Kubernetes Benchmark and NSA/CISA Kubernetes hardening.
Why Attend?

What makes this programme useful

01

Practical Focus

Every module is grounded in real scenarios, walkthroughs and reusable checklists rather than theory alone.

02

Career Relevant

Skills map directly to in-demand roles and to how organisations actually operate this domain.

03

Structured Path

A logical progression from fundamentals to applied practice, with a clear takeaway toolkit.

Key Learning Areas

What participants will learn

Container fundamentals and threat model
Image security, scanning and signing
Docker/runtime hardening and configuration
Kubernetes architecture and attack surface
RBAC, service accounts and least privilege
Network policies and workload isolation
Secrets, admission control and policy enforcement
Runtime security, monitoring and CIS benchmarks
3 Days Agenda

Structured learning flow

Day 1

Day 1 — Containers & Images

Container fundamentals and threat model; Image security, scanning and signing; Docker/runtime hardening and configuration.

Day 2

Day 2 — Kubernetes & RBAC

Kubernetes architecture and attack surface; RBAC, service accounts and least privilege; Network policies and workload isolation.

Day 3

Day 3 — Policy, Runtime & Benchmarks

Secrets, admission control and policy enforcement; Runtime security, monitoring and CIS benchmarks.

Audience & Entry Level

Who should attend?

This programme is designed for professionals who work with, or are moving into, this area of cybersecurity, governance or technology.

Cloud EngineerDevOps / DevSecOps EngineerApplication DeveloperSecurity ArchitectPlatform / SRE TeamAppSec EngineerIT Security TeamSolution Architect

Recommended prerequisite

A general awareness of information security or IT concepts is helpful. No specific certification is required to attend.

Learning Outcome

What participants should be able to do after the course

  • Confidently work with container fundamentals and threat model.
  • Confidently work with image security, scanning and signing.
  • Confidently work with docker/runtime hardening and configuration.
  • Confidently work with kubernetes architecture and attack surface.
  • Confidently work with rbac, service accounts and least privilege.