Protect people, systems and data: understand attacks, defend against them and respond when they happen.
You have reached the end of the beginner stages. Prove what you learned with a project.
You have reached the end of the intermediate stages. Prove what you learned with a project.
You have reached the end of the advanced stages. Prove what you learned with a project.
Set up a small Linux machine, lock down sign-in, enable a firewall and document every change.
Write a one-page guide that teaches colleagues to spot phishing, with real-looking examples.
Collect logs from two machines into an open-source SIEM and write three detections.
Analyse a public packet capture and write up what happened, step by step.
Solve ten web security labs and write a professional findings report with fixes.
Write a ransomware response playbook and run a tabletop exercise with friends.
The same roadmap as a reading list: every stage, what each topic covers, and which ones are optional.
IP addresses, ports, DNS, TCP/UDP and how data travels between machines.
Files, users, permissions, processes and logs on the system most servers run.
Users, groups, policies and event logs in the system most offices run.
Python or Bash to automate checks and sift through logs.
Confidentiality, integrity, availability, risk and defence in depth.
Encryption, hashing, signatures and certificates, and what each protects.
Authentication, multi-factor sign-in and least privilege.
Phishing, malware, ransomware and web attacks, and how attackers chain them.
Firewalls, VPNs and segmentation that limit how far an attacker can move.
Secure settings, patching and removing what you do not need.
Find, rank and fix weaknesses, starting with the ones attackers actually use.
Capture and read network traffic to see what really happened.
Collect logs in one place, write detections and tell real alerts from noise.
Prepare, detect, contain, recover and learn, without destroying evidence.
Practise investigations in safe, legal environments built for learning.
Track attacker groups and techniques to focus your defences.
Injection, broken access control and other flaws, tested in free labs.
Scope, permission, reconnaissance, exploitation and clear reporting.
Competitions that build problem-solving across many security areas.
Scanners and frameworks testers use, only ever on systems you are allowed to test.
Identity, network and data protection on cloud platforms.
Policies, audits and standards that organisations are measured against.
Report vulnerabilities properly and never test without written permission.
Entry certificates that help a first security CV get past filters.
They monitor systems for threats, investigate alerts, respond to incidents and help the organisation fix weaknesses before attackers use them.
Yes. Many analysts come from IT support or networking. Strong fundamentals, hands-on labs and an entry certificate are a common path.
Only with clear written permission from the owner of the system. Practise on labs and platforms made for learning.
© 2026 KamerLink. All rights reserved.
