Security Engineer Path

A dedicated, hands-on security track. As the new security engineer at a food-delivery company, harden a live Linux server (users, SUID, SSH keys, firewall), catch an SSH brute-force attack in the logs, respond to a real compromise (contain, kill a cryptominer, remove persistence), verify downloads and TLS certificates, find and fix a SQL injection, add security headers, remove leaked secrets from code, scan dependencies and container images, and learn cloud identity, threat modelling, risk and compliance (NDPA, ISO 27001, PCI DSS). Ends with Security+ (SY0-701) exam prep and interview practice.

Learning Outcomes

• Explain the CIA triad, risk, defence in depth, least privilege and zero trust
• Harden a Linux server: accounts, file permissions, SUID binaries and key-only SSH
• Reduce the attack surface with port scans and a default-deny firewall
• Detect a brute-force attack in auth logs with grep, awk, sort and uniq, and design a SIEM alert
• Run an incident: contain, eradicate malware and persistence, recover and report
• Use hashes, TLS certificates and keys correctly
• Find and fix SQL injection, XSS and broken access control, and add security headers
• Remove leaked secrets from code and scan dependencies and container images
• Apply cloud identity best practice: MFA, roles, least privilege and shared responsibility
• Threat model with STRIDE, manage vulnerabilities and risk, meet NDPA, ISO 27001 and PCI DSS, and prepare for Security+ and interviews