Security Engineer

Acquire the foundations for security engineering. Learn about security principles, cryptography fundamentals, and identity management basics.

• Security Engineer Intro — What does a day in the life of a security engineer look like?
• Security Principles — Learn about the security triad and common security models and principles.
• Introduction to Cryptography — Learn about encryption algorithms such as AES, Diffie-Hellman key exchange, hashing, PKI, and TLS.
• Identity and Access Management — Learn about identification, authentication, authorisation, accounting, and identity management.

Understand how security engineers help their organisations to identify threats and risks to better manage them.

• Governance & Regulation — Explore policies and frameworks vital for regulating cyber security in an organisation.
• Threat Modelling — Building cyber resiliency and emulation capabilities through threat modelling.
• Risk Management — Learn about framing, assessing, responding, and monitoring risk.
• Vulnerability Management — Learn how to identify, detect, mitigate and report a vulnerability effectively.

Explore principles of network & system security, including secure protocols, hardening OS, cloud, and network devices using latest techniques.

• Secure Network Architecture — Learn about and implement security best practices for network environments.
• Linux System Hardening — Learn how to improve the security posture of your Linux systems.
• Microsoft Windows Hardening — To learn key attack vectors used by hackers and how to protect yourself using different hardening techniques.
• Active Directory Hardening — To learn basic concepts regarding Active Directory attacks and mitigation measures.
• Network Device Hardening — Learn techniques for securing and protecting network devices from potential threats and attacks.
• Network Security Protocols — Learn about secure network protocols at the different layers of the OSI model.
• Virtualization and Containers — Introduction to common virtualization technologies and applications.
• Intro to Cloud Security — Learn fundamental concepts regarding securing a cloud environment.
• Auditing and Monitoring — Learn about auditing, monitoring, logging, and SIEM.

Understand how security integrates into the development process of an application, and learn how to mitigate common vulnerabilities in web applications.

• OWASP Top 10 - 2021 — Learn about and exploit each of the OWASP Top 10 vulnerabilities; the 10 most critical web security risks.
• OWASP API Security Top 10 - 1 — Learn the basic concepts for secure API development (Part 1).
• OWASP API Security Top 10 - 2 — Learn the basic concepts for secure API development (Part 2).
• SSDLC — This room focuses on the Secure Software Development Lifecycle (S-SDLC), its processes, and methodologies.
• SAST — Learn about Static Application Security Testing.
• DAST — Learn about Dynamic Application Security Testing.
• Weaponizing Vulnerabilities — Learn how a vulnerability evolves and methods to weaponize multiple vulnerabilities leading to RCE.
• Introduction to DevSecOps — Learn about the story of DevSecOps, Software Development Models & Shifting Left.
• Mother's Secret — Exploit flaws found in Mother's code to reveal its secrets.
• Traverse — Challenge your secure coding skills to restore a compromised website.

Understand how security engineers help their organisations during an incident to reduce the impact of the incident.

• Intro to IR and IM — An introduction to Incident Response and Incident Management.
• Logging for Accountability — Learn about the role accountability plays in logging and incident response.
• Becoming a First Responder — Explaining how first responders work and what to do if you are a first responder to a cyber incident.
• Cyber Crisis Management — An introduction into cyber crisis management and how a CMT works.