IT & Cybersecurity Career Roadmaps

Cloud & DevSecOps

IAM, logging, and common cloud misconfigs.

Cybersecurity

Portfolio, interviews, and role targeting.

Cybersecurity

CIA triad, threats, and security mindsets.

Foundations · Operating systems

Shells to systemd, hardening, and troubleshooting.

Offensive · Adversary simulation

Recon, exploitation, AD attacks, and reporting.

Defensive · Operations

Monitoring, triage, and incident response.

Offensive

OWASP-focused web offensive skills.

Offensive

Kerberos, ACL abuse, and domain dominance.

Offensive

REST/GraphQL authz and abuse cases.

Cybersecurity

Secure SDLC, reviews, and AppSec programs.

Cloud & DevSecOps

Entra ID, Defender, and Azure hardening.

Defensive

Defense-in-depth for practitioners.

Offensive

Scoped hunting, triage, and writeups.

Cloud & DevSecOps

Detect and respond to cloud intrusions.

Cloud & DevSecOps

Images, runtime, and supply chain.

Cybersecurity

Modern crypto for practitioners, not theorists.

Foundations · Data

PostgreSQL and MySQL ops, replication, and backup.

Defensive

Write, test, and tune high-signal detections.

Cloud & DevSecOps

Shift-left controls in CI/CD.

Defensive

Disk, memory, and timeline analysis.

Defensive

Phishing, BEC, and mail gateway ops.

Offensive

Memory corruption literacy for pentesters.

Cloud & DevSecOps

IAM, org policy, and GCP logging.

Foundations

Version control hygiene for security teams.

Cybersecurity

Policy, risk, and control assurance.

Foundations

Build a safe practice environment.

Cybersecurity

AuthN/AuthZ, federation, and least privilege.

Defensive

Contain, eradicate, and recover with discipline.

Cloud & DevSecOps

Terraform/CloudFormation misconfig hunting.

Cybersecurity

Device, firmware, and fleet risks.

Cloud & DevSecOps

Cluster hardening and workload isolation.

Defensive

Read telemetry like an investigator.

Defensive

Static and dynamic analysis for triage.

Offensive

Android/iOS testing fundamentals.

Foundations · Networking

TCP/IP, routing, switching, and network troubleshooting.

Offensive

External/internal network assessments.

Offensive

Open-source intelligence with ethics.

Cybersecurity

Protect industrial control environments.

Offensive

Write findings executives act on.

Cybersecurity

Data minimization and privacy by design.

Cybersecurity

Adversary emulation with detection feedback.

Foundations

Scripting for recon, automation, and tooling.

Cloud & DevSecOps

Vaults, rotation, and leak response.

Foundations

Prevent vulns at the keyboard.

Cybersecurity

Patterns for resilient systems.

Defensive

Run a SOC that people can sustain.

Defensive

Ingest, normalize, and operate a SIEM.

Offensive

Human attack paths and defenses.

Defensive

Collect, analyze, and operationalize intel.

Cybersecurity

STRIDE, attack trees, and design-time security.

Defensive

Scan, prioritize, and drive remediation.

Defensive

Processes, persistence, and defender telemetry.

Offensive

Wi-Fi assessment and client attacks.

Cloud & DevSecOps

Identity-first access and continuous verify.