About Cyber Security
Cyber security is the practice of protecting systems, networks, and data from attack,
and this course walks through it in the order most practitioners actually learn it. It
starts with the foundations: Networking Fundamentals (TCP/IP, DNS, and
HTTP), Operating Systems & Linux, and
Scripting & Automation so you can inspect and automate real
systems.
Next comes Cryptography Fundamentals: hashing, encryption, and PKI.
From there, Network Security covers firewalls, VPNs, and intrusion
detection, while Web Application Security covers the OWASP Top 10 and
the flaws attackers exploit most often. Identity & Access Management
covers authentication, MFA, SSO, and least privilege.
Vulnerability Management & Pentesting teaches you to think like an
attacker with scanning, exploitation, and reporting, and
Cloud & Container Security brings those ideas to AWS, Azure,
Docker, and Kubernetes.
Finally, Threat Detection & Incident Response covers SIEM, logging,
and handling a live breach, Malware Analysis & Forensics covers
investigating what happened, and Governance, Risk & Compliance
covers the frameworks and policies (ISO 27001, NIST, GDPR) that organisations are
measured against.
Content
12 modules
01
Networking Fundamentals
The OSI and TCP/IP models, IP addressing, DNS, HTTP/HTTPS, and how to read traffic with packet analysers.
TCP/IPDNSWireshark
02
Operating Systems & Linux
Working confidently in Linux and Windows: file permissions, processes, services, users, and system hardening basics.
LinuxPermissionsWindows Internals
03
Scripting & Automation
Using Bash and Python to parse logs, automate repetitive checks, and build small security tools.
BashPythonRegex
04
Cryptography Fundamentals
Hashing, symmetric and asymmetric encryption, digital signatures, certificates, and how TLS keeps traffic private.
AES / RSAHashingPKI & TLS
05
Network Security
Defending the perimeter and the interior: firewalls, VPNs, segmentation, IDS/IPS, and securing wireless networks.
FirewallsVPNIDS / IPS
06
Web Application Security
How attackers break web apps and how to stop them: injection, XSS, CSRF, broken access control, and secure coding practices.
OWASP Top 10SQL InjectionXSS
07
Identity & Access Management
Authentication and authorisation done right: MFA, SSO, OAuth/SAML, least privilege, and privileged access management.
MFASSOLeast Privilege
08
Vulnerability Management & Pentesting
Scanning for weaknesses, exploiting them in a lab, and writing clear reports that help teams fix what you find.
NmapMetasploitBurp Suite
09
Cloud & Container Security
Securing cloud accounts, storage, and workloads, plus hardening Docker images and Kubernetes clusters.
AWS / AzureDockerKubernetes
10
Threat Detection & Incident Response
Collecting logs, spotting attacks in a SIEM, and running the incident response lifecycle from detection to recovery.
SIEMMITRE ATT&CKIncident Response
11
Malware Analysis & Forensics
Safely analysing suspicious files, and collecting and examining disk, memory, and network evidence after an incident.
Static AnalysisMemory ForensicsChain of Custody
12
Governance, Risk & Compliance
Assessing risk, writing security policies, and meeting the standards and regulations organisations are audited against.
ISO 27001NIST CSFGDPR
What You Can Do After This Course
By the end of the curriculum you'll have worked through 5 hands-on projects and
covered the core of what a junior security analyst or entry-level security engineer
role expects. Concretely, you'll be able to:
Understand how systems communicate: trace a request across the network and spot what looks abnormal in the traffic.
Work fluently in Linux and scripts: harden a host, read logs, and automate checks with Bash and Python.
Apply cryptography correctly: choose the right hashing and encryption, and explain how TLS and certificates work.
Defend networks and applications: configure firewalls and detection, and prevent the OWASP top risks in code.
Control who gets access: design authentication with MFA and SSO, and enforce least privilege.
Find and report weaknesses: run vulnerability scans and ethical penetration tests, then write findings teams can act on.
Secure the cloud: lock down cloud accounts, containers, and clusters against common misconfigurations.
Detect, respond, and investigate: triage alerts in a SIEM, contain an incident, and analyse malware and forensic evidence.
Speak the language of risk and compliance: map controls to frameworks like ISO 27001 and NIST, and support audits.