跳到主要内容

Cybersecurity

Networks, systems and the attacker mindset — with the ethics and legal boundaries that make the work legitimate rather than criminal.

3 stages15 steps~572 hours~10 months
Track this roadmap free
  1. 1

    Groundwork

    Beginner~10 weeks

    Networking and operating systems. There is no shortcut past these.

    • TCP/IP, DNS, HTTP and how packets actually move

      Skill~30h

    • Linux administration and the command line

      Skill~30h

    • Cryptography fundamentals: hashing, symmetric, public key

      Skill~25h

    • CompTIA Security+ certification

      Certification~60h

    • Build and harden a home lab

      Project~25h
  2. 2

    Defence

    Intermediate~14 weeks

    Detection, response and the daily work of a security team.

    • Threat modelling and the OWASP Top 10

      Skill~25h

    • SIEM, log analysis and detection engineering

      Skill~35h

    • Incident response process and forensics basics

      Skill~30h

    • Identity and access management

      Skill~22h

    • Run a full detection-and-response exercise in your lab

      Project~30h
  3. 3

    Offence and assurance

    Advanced~16 weeks

    Authorised testing, cloud security and the compliance frameworks clients ask about.

    • Penetration testing methodology and legal authorisation

      Skill~40h

    • Cloud security: AWS, Azure or GCP

      Skill~35h

    • Compliance frameworks: SOC 2, ISO 27001, GDPR

      Reading~25h

    • Capture-the-flag competitions and a public write-up

      Project~40h

    • OSCP or CISSP, depending on your direction

      Certification~120h