Self-directed, alongside my day-to-day compliance work — here's where I am and how I'm getting there.
Looked into how DevSecOps roles are structured, what's in demand globally, and where cloud security overlaps with the GRC/compliance work I already do.
Reviewed an AWS/DevOps bootcamp at TechPanda Institute to weigh structured training against continuing self-directed study.
Working through:
Ongoing — building toward hands-on projects that combine Infrastructure-as-Code with security scanning and AWS-native detection, the same way I approached the phishing-triage agent for application security.
How I'm learning: a steady 1–1.5 hours a day, at a gradual pace rather than intensive sprints — consistency over cramming.