Duration 35 days – 245 hrs 

 

Overview  

 

This bootcamp roadmap is a structured, role-ready cybersecurity learning journey designed to take learners from basic security fundamentals to advanced cybersecurity defense and operations, aligned with ISO/IEC 27001 best practices.

 

Participants will progressively build the skills needed to secure systems and networks, monitor and detect threats, respond to incidents, manage vulnerabilities, and ultimately develop an organization-ready cybersecurity improvement plan.

Ideal for IT teams and organizations that want a practical, risk-based cybersecurity capability—from building security baselines to preparing for SOC operations and advanced threat defense.

 

1) Cybersecurity Practitioner Level 1: System Hardening, IAM & Security Baselines

Duration: 5 Days – 35 Hours

Course Overview

A hands-on course focused on building a security baseline for Windows/Linux systems and user environments. Learners will implement practical controls like secure configuration, patching, encryption, endpoint protection, and identity access management aligned with ISO 27001 controls.

 

Objectives

• Apply OS hardening for Windows and Linux
• Implement baseline security settings and checklists
• Improve identity security (passwords, MFA, access control)
• Deploy patching and endpoint security practices
• Create a minimum cybersecurity baseline for SMEs

 

Target Audience

• IT support / sysadmins / infrastructure teams
• Junior cybersecurity staff
• Technical leads managing small-to-medium environments

 

Prerequisites

• Your Cybersecurity Fundamentals course
• Basic Windows/Linux and networking knowledge

 

Course Outline

Module 1: Security Baselines & Secure Admin Practices
Module 2: Windows Hardening Essentials (local policies, services, RDP controls)
Module 3: Linux Hardening Essentials (permissions, SSH hardening, updates)
Module 4: Patch & Vulnerability Exposure Reduction
Module 5: Endpoint Protection (AV/EDR concepts, device control)
Module 6: Identity Security (RBAC, MFA, admin accounts, privilege control)
Module 7: Logging Basics (what to log, retention, basic review)
Module 8: Hands-on Lab: Build a “Minimum Secure Baseline” checklist

 

2) Network Security Essentials: Firewalls, Segmentation, Secure Wi-Fi & VPN

Duration: 5 Days – 35 Hours

Course Overview

Build strong foundational defenses by learning practical network security engineering: firewall rule design, VLAN segmentation, secure remote access, Wi-Fi security, and monitoring concepts.

 

Objectives

• Design segmentation to reduce blast radius
• Build firewall rules safely (least privilege)
• Secure Wi-Fi and guest networks
• Implement safe remote access via VPN concepts
• Identify common insecure network patterns

 

Target Audience

• Network admins / IT infrastructure teams
• System administrators supporting networks
• Junior security engineers

 

Prerequisites

• Cybersecurity Fundamentals
• Networking basics (IP/subnet/VLAN concepts helpful)

 

Course Outline

Module 1: Network Security Principles (trust zones, segmentation strategy)
Module 2: Firewall Deep Dive (stateful rules, inbound vs outbound)
Module 3: VLANs + Network Isolation Design
Module 4: Secure Wi-Fi (WPA2/3, guest isolation, rogue AP risks)
Module 5: VPN Concepts (remote access vs site-to-site, MFA)
Module 6: IDS/IPS Concepts + Practical Use Cases
Module 7: Hands-on Labs:

• Build a secure rule set
• Validate segmentation effectiveness
• Identify misconfigurations from sample network diagrams

 

3) SOC Analyst Bootcamp: Security Monitoring, SIEM & Alert Triage

Duration: 4 Days – 28 Hours

Course Overview

This course trains learners to operate like a Security Operations Center (SOC) Analyst—monitoring logs, detecting suspicious behavior, triaging alerts, escalating incidents, and improving visibility using a SIEM approach.

 

Objectives

• Understand SOC workflows and escalation models
• Interpret common security logs and alerts
• Perform basic investigations using evidence and timelines
• Reduce false positives through tuning and context
• Create actionable incident reports for IT and management

 

Target Audience

• SOC / monitoring teams
• IT operations teams doing security monitoring
• Cybersecurity associates / analysts

 

Prerequisites

• Cybersecurity Fundamentals
• Familiarity with system/network logs is helpful

 

Course Outline

Module 1: SOC Concepts (tiers, SLAs, incident categories)
Module 2: Log Sources (AD, endpoints, firewalls, email, web)
Module 3: SIEM Fundamentals (use cases, correlation, dashboards)
Module 4: Alert Triage & Prioritization (severity + impact)
Module 5: Threat Indicators (IOC basics, suspicious behaviors)
Module 6: Investigation Workflow (timeline, hypothesis, evidence)
Module 7: Reporting & Escalation Writing (executive-ready reports)
Module 8: Hands-on Labs:

• Triage sample alerts
• Identify likely compromise patterns
• Write incident summaries

 

4) Incident Response Mastery: Containment, Investigation & Recovery (IR/DFIR)

Duration: 4 Days – 28 Hours

Course Overview

A practical course covering the full incident lifecycle: prepare → detect → contain → eradicate → recover → lessons learned, including basic digital forensics techniques for evidence handling and investigation readiness.

 

Objectives

• Execute a structured incident response plan
• Contain ransomware/phishing/endpoint compromise incidents
• Preserve and document evidence properly
• Perform basic host/network investigation steps
• Conduct post-incident improvements and reporting

 

Target Audience

• IT admins handling security incidents
• SOC staff and cybersecurity analysts
• IT managers and technical leads

 

Prerequisites

• SOC Analyst Bootcamp recommended (or equivalent experience)

 

Course Outline

Module 1: Incident Response Frameworks & Playbooks
Module 2: Incident Classification & Severity Scoring
Module 3: Evidence Handling & Documentation
Module 4: Endpoint Investigation Basics (processes, persistence clues)
Module 5: Network Investigation Basics (connections, suspicious traffic)
Module 6: Containment & Recovery Strategies (ransomware-ready)
Module 7: Tabletop Exercises (realistic incident scenarios)
Module 8: Post-Incident Review + Improvement Roadmap

 

5) Ethical Hacking Foundations: Vulnerability Discovery, Exploitation Basics & Reporting

 

Recommended Title

Duration: 4 Days – 28 Hours

Course Overview

A beginner-to-intermediate ethical hacking bootcamp that teaches learners how attackers think—while staying defensive and responsible. Focuses on vulnerability discovery, scanning, validation, safe exploitation concepts, and remediation reporting.

 

Objectives

• Run vulnerability scanning and interpret results
• Validate findings and reduce false positives
• Understand common vulnerabilities (OWASP basics)
• Produce a vulnerability report with remediation guidance
• Establish a vulnerability management cycle

 

Target Audience

• Security analysts / engineers
• IT teams assigned to vulnerability management
• Developers/QA who support security testing

 

Prerequisites

• Cybersecurity Fundamentals
• Networking + basic OS troubleshooting

 

Course Outline

Module 1: Ethical Hacking Rules, Scope, and Authorization
Module 2: Reconnaissance & Attack Surface Mapping
Module 3: Vulnerability Scanning & Validation
Module 4: Common Vulnerabilities (auth flaws, misconfig, exposures)
Module 5: Web App Basics (OWASP Top risks overview)
Module 6: Password Attacks & Defense Concepts (safe demonstrations)
Module 7: Reporting & Remediation Guidance
Module 8: Hands-on Labs: scan → validate → document → recommend fixes

 

6) Secure Cloud & DevSecOps: Hardening, Identity, CI/CD & Container Security

Duration: 3 Days – 21 Hours

Course Overview

Modern organizations move to cloud and CI/CD fast—this course helps teams secure cloud workloads using identity-first design, secure configurations, secrets management, logging, and DevSecOps controls.

 

Objectives

• Apply cloud security fundamentals (shared responsibility)
• Secure IAM, roles, and permissions in cloud environments
• Protect secrets and keys safely
• Add security checks into CI/CD pipelines
• Identify container and deployment risks

 

Target Audience

• DevOps / cloud engineers
• Developers supporting deployments
• Security engineers supporting cloud programs

Prerequisites

• Cybersecurity Fundamentals
• Basic knowledge of web apps and cloud concepts

 

Course Outline

Module 1: Cloud Security Fundamentals & Shared Responsibility
Module 2: IAM in the Cloud (roles, policies, least privilege)
Module 3: Secure Storage + Encryption Practices
Module 4: Logging, Monitoring & Cloud Visibility
Module 5: DevSecOps Foundations (shift-left security)
Module 6: Secrets Management & Secure Config
Module 7: Containers & Image Risks (baseline security practices)
Module 8: Capstone Lab: Build a secure CI/CD checklist + controls mapping

 

7) ISO/IEC 27001 ISMS Bootcamp: Implementation, Risk Assessment & Internal Audit

Duration: 3 Days – 21 Hours

Course Overview

For organizations preparing for ISO readiness, this bootcamp teaches how to build a working ISMS (Information Security Management System) including scope, risk assessment, controls selection, documentation, and internal audit readiness.

 

Objectives

• Understand ISO 27001 ISMS structure and requirements
• Perform a basic risk assessment & treatment plan
• Create minimum ISMS documents and policies
• Map controls to practical implementation
• Prepare for internal audits and evidence gathering

 

Target Audience

• IT managers, compliance, risk officers
• IT/security team leads supporting ISO readiness
• Organizations aiming for ISO certification

 

Prerequisites

• Cybersecurity Fundamentals (recommended)
• Familiarity with basic IT operations

 

Course Outline

Module 1: ISO 27001 Overview & ISMS Scope
Module 2: Risk Assessment & Risk Treatment Planning
Module 3: Controls Selection & Statement of Applicability (SoA)
Module 4: Required Policies & Evidence Checklist
Module 5: Internal Audit Basics (audit plan, findings, corrective actions)
Module 6: Practical Workshop: Build a “Starter ISMS Pack”

 

8) Advanced Threat Hunting & Purple Team Operations: Detect, Investigate, Improve

Duration: 5 Days – 35 Hours

Course Overview

An advanced defensive course focused on hunting real attacker behaviors, improving detection rules, and building repeatable methods. It blends blue-team detection with red-team simulation (purple team).

 

Objectives

• Perform structured threat hunting based on hypotheses
• Detect suspicious behavior across endpoint and network signals
• Improve alert rules and reduce blind spots
• Simulate attacker techniques safely to validate defenses
• Build repeatable hunt playbooks for the organization

 

Target Audience

• SOC Tier 2/Tier 3 analysts
• Security engineers and incident responders
• Defensive security leads

 

Prerequisites

• SOC Analyst Bootcamp + Incident Response Bootcamp (recommended)

 

Course Outline

Module 1: Threat Hunting Framework & Methodology
Module 2: Detection Engineering Basics
Module 3: Attack Techniques & Behavioral Indicators
Module 4: Hunting Playbooks for Common Intrusions
Module 5: Purple Team Operations & Validation Exercises
Module 6: Reporting Hunts + Improving Controls
Module 7: Capstone: Hunt → Validate → Improve detection rules

 

9) Cyber Defense Capstone: Attack–Defense Simulation + Security Roadmap Workshop

Duration: 2 Days – 14 Hours

Course Overview

A final simulation-based capstone where learners combine everything: security baselines, monitoring, response, and improvements. Ends with a practical security roadmap for their organization.

 

Objectives

• Respond to realistic multi-stage attacks
• Coordinate SOC + IR workflows
• Produce incident reports and corrective actions
• Build a 30–60–90 day security improvement plan
• Align controls with ISO 27001 and practical constraints

 

Target Audience

• Bootcamp graduates
• IT/security teams preparing for real operations

 

Prerequisites

• At least 3 courses from the pathway (SOC + IR strongly recommended)

 

Course Outline

Day 1: Attack Simulation (phishing → compromise → lateral movement)
Day 2: Containment + Recovery + Executive Reporting + Roadmap building

 

Optional “Tracks” You Can Offer (If You Want Role-Based Bundles)

• Blue Team Track (Defense):
  Fundamentals → Practitioner → Network Security → SOC → IR → Threat Hunting → Capstone
• Purple Team Track (Defense + Validation):
  SOC → IR → Vulnerability/Pentest → Threat Hunting → Capstone
• GRC / ISO Track (Compliance + Governance):
  Fundamentals → Practitioner → ISO 27001 ISMS → Capstone Roadmap
• Cloud Security Track:
  Fundamentals → Practitioner → SOC → Cloud & DevSecOps → Capstone