- 1SOC Analyst: Detection and Triage
- 2Incident Response and Forensics
- 3Detection Engineering as Code
- 4Malware Analysis
root@lab:~# cat roadmap.md
The cybersecurity roadmap
From your first shell to a security career. Start with why it matters, then follow the line.
Every course and unit in order
Start here
Part 1
Computer basics
Part 2
Security foundations
- 1Encoding, hashing and encryption
- 2Hashes and integrity
- 3Passwords done right
- 4Symmetric encryption
- 5Public keys and key exchange
- 6Digital signatures
- 7Certificates and PKI
- 8Key management: where keys live
- 9Password managers, MFA and passkeys
- 10Encryption at rest: laptops, phones and backups
- 11Crypto in practice: the review
- 1How LLMs work, for defenders
- 2Anatomy of an LLM app
- 3AI at work: use policy and governance
- 4Prompt injection: detect and contain
- 5Untrusted content: documents, pages and email
- 6Sensitive data leakage
- 7Excessive agency: tools, approval and MCP
- 8AI coding assistants and agents on developer machines
- 9Model and AI supply chain
- 10Exposed AI infrastructure
- 11Monitoring and evaluating AI apps
- 12Capstone: audit an AI app against the OWASP LLM Top 10
- 1Who attacks and how
- 2Anatomy of a phishing email
- 3AI scams, deepfakes and verification
- 4Email authentication and headers
- 5Suspicious links and attachments
- 6Account takeover and MFA fatigue
- 7Phone, SMS and help desk attacks
- 8Ransomware from the defender's side
- 9Third parties and the supply chain
- 10Reporting and incident communication
- 1How a cloud account is laid out
- 2IAM fundamentals and policy evaluation
- 3Identities, roles and keys
- 4Storage security
- 5Network security in a VPC
- 6Investigating with CloudTrail
- 7Secrets management
- 8From CI to cloud without stored keys
- 9SaaS platforms and integrations
- 10Serverless, containers and AI services
- 11Guardrails, central logs and resilience
- 12Capstone: audit the account
Part 3
Career paths
- 1Web Application Security Testing
- 2Network Penetration Testing
- 3Active Directory Security
- 4Red Team Operations
- 1Cloud and Identity Security
- 2Container and Kubernetes Security
- 3Software Supply Chain Security
- 1Securing LLM Apps
- 2Agentic AI and MCP Security
- 3AI-Augmented Security Operations