Cybersecurity Analyst / Ethical Hacker Roadmap — Step-by-step Learnin…

The Cybersecurity Analyst / Ethical Hacker roadmap

1. Foundations of Cybersecurity — beginner
   • The CIA Triad — beginner
   • The Threat Landscape — beginner
   • The Cyber Kill Chain — beginner
   • Blue Team vs Red Team vs Purple Team — beginner
   • Legal and Ethical Boundaries of Hacking — beginner
2. Networking for Security — beginner
   • OSI Model and TCP/IP — beginner
   • Common Ports and Protocols — beginner
   • Packet Analysis with Wireshark — beginner
   • DNS and DNS Security — beginner
   • VPNs and Proxies — beginner
   • Wireless Network Security — beginner
3. Operating Systems Security — beginner
   • Linux Fundamentals for Security — beginner
   • Linux Hardening Basics — beginner
   • Windows Fundamentals for Security — beginner
   • Windows Hardening Basics — beginner
   • Privilege Escalation Concepts — intermediate
   • Active Directory Attack Surface — intermediate
4. Cryptography Fundamentals — beginner
   • Symmetric vs Asymmetric Encryption — beginner
   • Hashing and Password Storage — beginner
   • TLS and PKI — beginner
   • Common Cryptographic Attacks — intermediate
   • Steganography Basics — beginner
5. Social Engineering and Physical Security — intermediate
   • Phishing and Spear Phishing — intermediate
   • Pretexting and Vishing — intermediate
   • Physical Security Testing — intermediate
   • Security Awareness Training — intermediate
6. Web Application Security — intermediate
   • OWASP Top 10 Overview — intermediate
   • SQL Injection — intermediate
   • Cross-Site Scripting (XSS) — intermediate
   • CSRF and SSRF — intermediate
   • Authentication and Session Vulnerabilities — intermediate
   • IDOR and Broken Access Control — intermediate
   • API Security Fundamentals — intermediate
7. Network Security and Defense — intermediate
   • Firewalls and Network Segmentation — intermediate
   • IDS and IPS — intermediate
   • Zero Trust Architecture — intermediate
   • Endpoint Detection and Response (EDR) — intermediate
   • Network Traffic Monitoring — intermediate
   • DMZ and Network Architecture — intermediate
8. Malware Analysis Basics — advanced
   • Types of Malware — advanced
   • Static Malware Analysis — advanced
   • Dynamic Malware Analysis — advanced
   • Setting Up a Malware Analysis Lab — advanced
   • Indicators of Compromise (IOCs) — advanced
9. Vulnerability Assessment — intermediate
   • Vulnerability Scanning Fundamentals — intermediate
   • CVE and CVSS Scoring — intermediate
   • Scanning with Nessus and OpenVAS — intermediate
   • Triaging False Positives — intermediate
   • Patch Management — intermediate
10. Cloud Security Basics — intermediate
    • The Shared Responsibility Model — intermediate
    • Cloud IAM and Misconfigurations — intermediate
    • Cloud Storage Security — intermediate
    • Container and Kubernetes Security — intermediate
    • Cloud Security Posture Management — intermediate
11. Penetration Testing Methodology — advanced
    • Penetration Testing Methodology Overview — advanced
    • Reconnaissance and OSINT — advanced
    • Scanning and Enumeration — advanced
    • Exploitation Techniques — advanced
    • Post-Exploitation and Lateral Movement — advanced
    • Practical Privilege Escalation — advanced
    • Writing a Penetration Test Report — advanced
12. Ethical Hacking Tools — advanced
    • Nmap — advanced
    • Burp Suite — advanced
    • Metasploit Framework — advanced
    • Wireshark and tcpdump — advanced
    • Password Cracking Tools — advanced
    • Kali Linux and Security Distros — beginner
13. Security Operations — intermediate
    • What Is a SOC — intermediate
    • SIEM Fundamentals — intermediate
    • Working with Splunk and the Elastic Stack — intermediate
    • Log Analysis — intermediate
    • Alert Triage — intermediate
    • Incident Response Process — intermediate
    • Threat Hunting Basics — advanced
14. Governance, Risk and Compliance — intermediate
    • Security Frameworks Overview — intermediate
    • Risk Assessment Fundamentals — intermediate
    • Compliance Regulations — intermediate
    • Writing Security Policies — intermediate
15. Certifications, Career and Capstone — advanced
    • The Certification Landscape — advanced
    • Practicing with CTFs and Labs — advanced
    • Building a Home Security Lab — advanced
    • Building a Cybersecurity Portfolio — advanced
    • Case Study: Web Application Penetration Test — advanced
    • Case Study: Incident Response Simulation — advanced
    • Resume and Interview Prep — advanced
    • Capstone: End-to-End Security Assessment — advanced