Free Security Engineer Roadmap
The builder of defences: harden the systems, secure the network, the cloud and the applications, automate it, then prove it with the certification employers ask for. Security+ first, then Linux and Windows hardening, network security, cloud and DevSecOps, application security, Python, then CISSP.
8 steps · 91 free videos · 12 free reads
Create your free account to open all 2,396 free items
The 103 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.
Before you start
Read these first
The free roadmap
8 steps, in order
The 🔒 rows show what the full roadmap adds at each step. StationX Membership opens every course and its labs: $299 / year ($24.92/mo billed annually). Infrastructure Labs labs are a separate add-on.
Start here →
Step 1 — Security foundation
The baseline every security engineering advert lists first.
Follow the free CompTIA Security+ (SY0-701) roadmap.
🔒 The full roadmap adds here: 6 full courses · hands-on labs 1–148 of 281 (courses in Membership · 71 labs in Membership · 77 labs in Infrastructure Labs)
- Course · CompTIA Security+ Certification (SY0-701): The Total Course · 🔒 Membership
- Course · Security+ (SY0-701) - Self-paced Course! · 🔒 Membership
- Course · CompTIA Security+ SY0-701: General Security Concepts · 🔒 Membership
- Course · CompTIA Security+: Viruses, Threats and Compromise Indicators · 🔒 Membership
- Course · CompTIA Security+ Labs · 🔒 Membership
- Course · Security+ Just Labs: The Ultimate Hands-On Bootcamp · 🔒 Membership
- Lab 1 of 281 · Additional Scanning Options · 🔒 Membership
- Lab 2 of 281 · Basics of Metasploit · 🔒 Membership
- Lab 3 of 281 · BCP DRP and Test Planning · 🔒 Membership
- Lab 4 of 281 · BitLocker Setup · 🔒 Membership
- Lab 5 of 281 · Block Incoming Traffic on Known Port · 🔒 Membership
- Lab 6 of 281 · Comparing Controls · 🔒 Membership
- Lab 7 of 281 · Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 Server · 🔒 Membership
- Lab 8 of 281 · Creation of BCP and DRP · 🔒 Membership
- Lab 9 of 281 · Data Backup to Prep for Recovery · 🔒 Membership
- Lab 10 of 281 · Event Log · 🔒 Membership
- Lab 11 of 281 · Host Data Integrity Baselining · 🔒 Membership
- Lab 12 of 281 · Installing Patches and Testing Software · 🔒 Membership
- Lab 13 of 281 · MITRE - Attack · 🔒 Membership
- Lab 14 of 281 · MITRE - Defend · 🔒 Membership
- Lab 15 of 281 · Network Discovery · 🔒 Membership
- Lab 16 of 281 · Network Segmentation (FW/DMZ/WAN/LAN) · 🔒 Membership
- Lab 17 of 281 · Network Topology Generation · 🔒 Membership
- Lab 18 of 281 · Open Source Collection · 🔒 Membership
- Lab 19 of 281 · Open Source Password Cracking · 🔒 Membership
- Lab 20 of 281 · Scanning From Windows · 🔒 Membership
- Lab 21 of 281 · Windows Event Log Manipulation via Windows Event Viewer · 🔒 Membership
- Lab 22 of 281 · Wireshark · 🔒 Membership
- Lab 23 of 281 · Manage Users and Groups in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 24 of 281 · Manage Users and Groups in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 25 of 281 · Can You Manage Users and Groups in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 26 of 281 · Configure Password Management in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 27 of 281 · Configure Password Management in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 28 of 281 · Can You Manage Password Requirements in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 29 of 281 · Configure Standard Linux Permissions [Guided] · 🔒 Infrastructure Labs
- Lab 30 of 281 · Configure Standard Windows Permissions [Guided] · 🔒 Infrastructure Labs
- Lab 31 of 281 · Can You Configure Standard Linux and Windows Permissions? [Advanced] · 🔒 Infrastructure Labs
- Lab 32 of 281 · Can You Manage Access in Linux and Windows? [Expert] · 🔒 Infrastructure Labs
- Lab 33 of 281 · Can You Harden the SSH Service on a Linux Server? [Advanced} · 🔒 Infrastructure Labs
- Lab 34 of 281 · Force Users to Change Password Upon First Sign In [Guided] · 🔒 Infrastructure Labs
- Lab 35 of 281 · Remove a User Account [Guided] · 🔒 Infrastructure Labs
- Lab 36 of 281 · Can You Add Server Access for a Group? [Advanced] · 🔒 Infrastructure Labs
- Lab 37 of 281 · Examine Log Files to Block Bad Actors [Guided] · 🔒 Infrastructure Labs
- Lab 38 of 281 · Harden a Server by Limiting Access to a Single Subnet [Guided] · 🔒 Infrastructure Labs
- Lab 39 of 281 · Can You Harden a Server by Restricting Access per Protocol? [Advanced] · 🔒 Infrastructure Labs
- Lab 40 of 281 · Can You Harden a Linux Web Server? [Expert] · 🔒 Infrastructure Labs
- Lab 41 of 281 · Deploy a Private Certificate Authority [Guided] · 🔒 Infrastructure Labs
- Lab 42 of 281 · Configure Custom Certificate Templates and Deployment Options [Guided] · 🔒 Infrastructure Labs
- Lab 43 of 281 · Manually Request a PKI Certificate [Guided] · 🔒 Infrastructure Labs
- Lab 44 of 281 · Can You Deploy a Certificate Authority and Issue Certificates? [Advanced] · 🔒 Infrastructure Labs
- Lab 45 of 281 · Enable DNSSEC [Guided] · 🔒 Infrastructure Labs
- Lab 46 of 281 · Use EFS To Encrypt Files on NTFS Volumes [Guided] · 🔒 Infrastructure Labs
- Lab 47 of 281 · Can You Secure DNS Resource Records and Windows NTFS Volume File Objects? [Advanced] · 🔒 Infrastructure Labs
- Lab 48 of 281 · Enable SSL/TLS on a Website [Guided] · 🔒 Infrastructure Labs
- Lab 49 of 281 · Enable Client SSL/TLS [Guided] · 🔒 Infrastructure Labs
- Lab 50 of 281 · Can You Secure a Website with an SSL/TLS Certificate? [Advanced] · 🔒 Infrastructure Labs
- Lab 51 of 281 · Can You Use PKI to Secure a Network Environment? [Expert] · 🔒 Infrastructure Labs
- Lab 52 of 281 · Cryptography: Attacking Classic Ciphers · 🔒 Membership
- Lab 53 of 281 · Cryptography: Breaking Repeated Key XOR Cipher · 🔒 Membership
- Lab 54 of 281 · Cryptography: Breaking Weak RSA Keys · 🔒 Membership
- Lab 55 of 281 · Cryptography: Decrypting Files With a Dictionary Attack · 🔒 Membership
- Lab 56 of 281 · Cryptography: Forging Digital Signatures · 🔒 Membership
- Lab 57 of 281 · Cryptography: Forging MACs With Side Channels · 🔒 Membership
- Lab 58 of 281 · Cryptography: Hidden Veracrypt Containers · 🔒 Membership
- Lab 59 of 281 · Cryptography: Man In the Middle Attack · 🔒 Membership
- Lab 60 of 281 · Cryptography: Password Cracking · 🔒 Membership
- Lab 61 of 281 · Cryptography: Setting Up HTTPS in Windows and Linux · 🔒 Membership
- Lab 62 of 281 · Cryptography: Setting Up Two Factor Authentication · 🔒 Membership
- Lab 63 of 281 · Cryptography: Steganography · 🔒 Membership
- Lab 64 of 281 · Cryptography: Using GPG for Encryption and Key Management · 🔒 Membership
- Lab 65 of 281 · Cryptography: Using the OpenSSL CLI Tool · 🔒 Membership
- Lab 66 of 281 · Getting Started with Security Concepts in Windows and Linux Environments [Getting Started] · 🔒 Infrastructure Labs
- Lab 67 of 281 · Configure Windows Firewall ACL Rules [Guided] · 🔒 Infrastructure Labs
- Lab 68 of 281 · Configure Linux Firewall ACL Rules [Guided] · 🔒 Infrastructure Labs
- Lab 69 of 281 · Configure Security Settings by Using Microsoft Group Policy [Guided] · 🔒 Infrastructure Labs
- Lab 70 of 281 · Identify Non-secure Network Traffic [Guided] · 🔒 Infrastructure Labs
- Lab 71 of 281 · Can You Secure Host Settings Through Firewall Settings and Group Policy? [Advanced] · 🔒 Infrastructure Labs
- Lab 72 of 281 · Configure IPSec [Guided] · 🔒 Infrastructure Labs
- Lab 73 of 281 · Configure a Windows PPTP VPN [Guided] · 🔒 Infrastructure Labs
- Lab 74 of 281 · Can You Secure Network Access? [Advanced] · 🔒 Infrastructure Labs
- Lab 75 of 281 · Can You Harden Windows Hosts? [Expert] · 🔒 Infrastructure Labs
- Lab 76 of 281 · Back Up and Restore Data in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 77 of 281 · Back Up and Restore Data in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 78 of 281 · Can You Back Up and Restore Data in Windows and Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 79 of 281 · Configure and Test the Firewall in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 80 of 281 · Configure and Test the Firewall in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 81 of 281 · Can You Configure the Firewall in Linux and Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 82 of 281 · Configure Patch Management in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 83 of 281 · Configure Update Management in Windows [Guided] · 🔒 Infrastructure Labs
- Lab 84 of 281 · Can You Configure Update Management in Linux and Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 85 of 281 · Can You Manage Windows and Linux Systems? [Expert] · 🔒 Infrastructure Labs
- Lab 86 of 281 · Applying Filters to TCPDump and Wireshark · 🔒 Membership
- Lab 87 of 281 · DNS as a Remote Shell · 🔒 Membership
- Lab 88 of 281 · Firewall Setup and Configuration · 🔒 Membership
- Lab 89 of 281 · Gap Analysis of Firewall Rules · 🔒 Membership
- Lab 90 of 281 · Implementing Least-Privilege on Windows · 🔒 Membership
- Lab 91 of 281 · Setting Up Zones in a Firewall · 🔒 Membership
- Lab 92 of 281 · Snorby Setup and Operation · 🔒 Membership
- Lab 93 of 281 · TCPDump · 🔒 Membership
- Lab 94 of 281 · Tweaking Firewall Rules for Detection · 🔒 Membership
- Lab 95 of 281 · Using Snort and Wireshark to Analyze Traffic · 🔒 Membership
- Lab 96 of 281 · Getting Started with Cybersecurity Defensive Tools [Getting Started] · 🔒 Infrastructure Labs
- Lab 97 of 281 · Managing Log Files on a Windows Server [Guided] · 🔒 Infrastructure Labs
- Lab 98 of 281 · Configure Windows Defender on a Windows System [Guided] · 🔒 Infrastructure Labs
- Lab 99 of 281 · Configure a Local Security Policy on Server 2016 [Guided] · 🔒 Infrastructure Labs
- Lab 100 of 281 · Can You Use the Sysinternals Suite to Review Permissions on a Windows System? [Advanced] · 🔒 Infrastructure Labs
- Lab 101 of 281 · Using Encryption to Secure Information [Guided] · 🔒 Infrastructure Labs
- Lab 102 of 281 · Can You Configure Drive Encryption by Using LUKS and BitLocker? [Advanced] · 🔒 Infrastructure Labs
- Lab 103 of 281 · Can You Configure Remote Administration by Using PuTTY and SSH? [Expert] · 🔒 Infrastructure Labs
- Lab 104 of 281 · Use a Password Cracking Utility in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 105 of 281 · Can You Use PowerShell to Gather Computer Information in Windows? [Advanced] · 🔒 Infrastructure Labs
- Lab 106 of 281 · Escalate Privileges in Linux [Guided] · 🔒 Infrastructure Labs
- Lab 107 of 281 · Can You Enumerate Network Services by Using Port Scanning in Linux? [Advanced] · 🔒 Infrastructure Labs
- Lab 108 of 281 · Auditing Service Accounts and Setting Up Automated Log Collection · 🔒 Membership
- Lab 109 of 281 · Centralized Monitoring · 🔒 Membership
- Lab 110 of 281 · CIRP Creation and Disaster · 🔒 Membership
- Lab 111 of 281 · Creation of Standard Operating Procedures for Recovery · 🔒 Membership
- Lab 112 of 281 · Data Downloads and Validation · 🔒 Membership
- Lab 113 of 281 · Force Point: DLP Email Overview · 🔒 Membership
- Lab 114 of 281 · Force Point: DLP Network Overview · 🔒 Membership
- Lab 115 of 281 · Identifying Key Assets · 🔒 Membership
- Lab 116 of 281 · Leveraging Internal Intelligence Resources · 🔒 Membership
- Lab 117 of 281 · Log Correlation & Analysis to Identify Potential IOC · 🔒 Membership
- Lab 118 of 281 · Monitoring and Verifying Management Systems · 🔒 Membership
- Lab 119 of 281 · Open and Close Ports on Windows 7 · 🔒 Membership
- Lab 120 of 281 · Phishing · 🔒 Membership
- Lab 121 of 281 · Post Incident Service Restoration · 🔒 Membership
- Lab 122 of 281 · Ransomware · 🔒 Membership
- Lab 123 of 281 · Recover from SQL Injection Attack · 🔒 Membership
- Lab 124 of 281 · Sensitive Information Identification · 🔒 Membership
- Lab 125 of 281 · Vulnerability Identification and Remediation · 🔒 Membership
- Lab 126 of 281 · Use Git to Manage Code [Guided] · 🔒 Infrastructure Labs
- Lab 127 of 281 · Analyze Log Files for Malicious Activity [Guided] · 🔒 Infrastructure Labs
- Lab 128 of 281 · Identify and Manage Old Software [Guided] · 🔒 Infrastructure Labs
- Lab 129 of 281 · Deploy a Docker Container [Guided] · 🔒 Infrastructure Labs
- Lab 130 of 281 · Deploy a Virtual Machine [Guided] · 🔒 Infrastructure Labs
- Lab 131 of 281 · Configure a Jump Box [Guided] · 🔒 Infrastructure Labs
- Lab 132 of 281 · Manage File Redundancy for Resilience and Recovery [Guided] · 🔒 Infrastructure Labs
- Lab 133 of 281 · Manage System Restore Using Windows 11 [Guided] · 🔒 Infrastructure Labs
- Lab 134 of 281 · Use Alerting and Monitoring Tools [Guided] · 🔒 Infrastructure Labs
- Lab 135 of 281 · Digitally Sign Code To Verify Authenticity [Guided] · 🔒 Infrastructure Labs
- Lab 136 of 281 · Configure a Wireless Access Point [Guided] · 🔒 Infrastructure Labs
- Lab 137 of 281 · Sanitize Storage Disks [Guided] · 🔒 Infrastructure Labs
- Lab 138 of 281 · Enhance Security by Using SELinux [Guided] · 🔒 Infrastructure Labs
- Lab 139 of 281 · Manage Configurations by Using Ansible [Guided] · 🔒 Infrastructure Labs
- Lab 140 of 281 · Configure Devices by Using Ansible [Guided] · 🔒 Infrastructure Labs
- Lab 141 of 281 · Perform Security Audits on Linux Services [Guided] · 🔒 Infrastructure Labs
- Lab 142 of 281 · Baseline Systems in Accordance with Policy Documentation · 🔒 Membership
- Lab 143 of 281 · Conduct Baseline Comparison for Indicators of Compromise · 🔒 Membership
- Lab 144 of 281 · Creating a Baseline Using Autopsy · 🔒 Membership
- Lab 145 of 281 · Creating a Secondary Baseline and Conducting Comparison · 🔒 Membership
- Lab 146 of 281 · Manually Creating a Baseline with MD5Deep · 🔒 Membership
- Lab 147 of 281 · Recovering Data and Data Integrity Checks · 🔒 Membership
- Lab 148 of 281 · Windows Deployment Services · 🔒 Membership
Try a free SOC lab: Shut the door (~4 min) → A scripted simulation in your browser. No account needed.
Step 2 — Harden Linux
Lock down the operating system most servers run.
🔒 The full roadmap adds here: 2 full courses · hands-on labs 149–177 of 281 (Membership)
- Course · Linux Administration Bootcamp: Go from Beginner to Advanced · 🔒 Membership
- Course · Linux Security and Hardening, The Practical Security Guide · 🔒 Membership
- Lab 149 of 281 · Physical Security · 🔒 Membership
- Lab 150 of 281 · Securing Linux - Advanced IPTables · 🔒 Membership
- Lab 151 of 281 · Securing Linux - App Armor · 🔒 Membership
- Lab 152 of 281 · Securing Linux - Basic Restrictions · 🔒 Membership
- Lab 153 of 281 · Securing Linux - Capabilities and ACLs · 🔒 Membership
- Lab 154 of 281 · Securing Linux - Centralized Authentication · 🔒 Membership
- Lab 155 of 281 · Securing Linux - Encryption · 🔒 Membership
- Lab 156 of 281 · Securing Linux - Firewalls · 🔒 Membership
- Lab 157 of 281 · Securing Linux - Monitoring with SecurityOnion · 🔒 Membership
- Lab 158 of 281 · Securing Linux - Network Intrusion Detection · 🔒 Membership
- Lab 159 of 281 · Securing Linux - Physical Security · 🔒 Membership
- Lab 160 of 281 · Securing Linux - Secure Remote Access · 🔒 Membership
- Lab 161 of 281 · Securing Linux - SELinux · 🔒 Membership
- Lab 162 of 281 · Securing Linux for System Administrators · 🔒 Membership
- Lab 163 of 281 · SETUID · 🔒 Membership
- Lab 164 of 281 · Intro To Linux - Backing Up, Compression, and Scheduling · 🔒 Membership
- Lab 165 of 281 · Intro to Linux - Bash Scripting · 🔒 Membership
- Lab 166 of 281 · Intro To Linux - Command Line Basics · 🔒 Membership
- Lab 167 of 281 · Intro To Linux - File Systems · 🔒 Membership
- Lab 168 of 281 · Intro To Linux - Installing Software · 🔒 Membership
- Lab 169 of 281 · Intro To Linux - Kernel · 🔒 Membership
- Lab 170 of 281 · Intro To Linux - Networking Tools · 🔒 Membership
- Lab 171 of 281 · Intro to Linux - Pipes and Filters · 🔒 Membership
- Lab 172 of 281 · Intro To Linux - Processes and Booting · 🔒 Membership
- Lab 173 of 281 · Intro to Linux - Routing and SSH Tunnels · 🔒 Membership
- Lab 174 of 281 · Intro To Linux - Sed and Awk · 🔒 Membership
- Lab 175 of 281 · Intro To Linux - Text Editors · 🔒 Membership
- Lab 176 of 281 · Intro To Linux - Users and Groups · 🔒 Membership
- Lab 177 of 281 · Linux Familiarization Lab · 🔒 Membership
Step 3 — Harden Windows and Active Directory
Secure the identity system every enterprise attacker targets.
🔒 The full roadmap adds here: 2 full courses · hands-on labs 178–194 of 281 (Membership)
- Course · Active Directory with Windows Server 2016 · 🔒 Membership
- Course · Microsoft Windows Server 2019 - Hands-on Training Part I · 🔒 Membership
- Lab 178 of 281 · Auditing Service Accounts and Creation of Service Accounts To Run Specific Services · 🔒 Membership
- Lab 179 of 281 · Detecting Changes to System Configurations · 🔒 Membership
- Lab 180 of 281 · PAM Lab · 🔒 Membership
- Lab 181 of 281 · Backup and Restore Data in Windows · 🔒 Membership
- Lab 182 of 281 · Configure a Local Security Policy on Server 2019 · 🔒 Membership
- Lab 183 of 281 · Configure and Test the Firewall in Windows · 🔒 Membership
- Lab 184 of 281 · Configure Network Load Balancing for a Web Farm · 🔒 Membership
- Lab 185 of 281 · Configure Security Settings by Using Microsoft Group Policy · 🔒 Membership
- Lab 186 of 281 · Configure Standard Windows Permissions · 🔒 Membership
- Lab 187 of 281 · Configure Update Management in Windows · 🔒 Membership
- Lab 188 of 281 · Configure Windows Defender on a Windows System · 🔒 Membership
- Lab 189 of 281 · Configure Windows Firewall ACL Rules · 🔒 Membership
- Lab 190 of 281 · Disable User Account on Windows 10 · 🔒 Membership
- Lab 191 of 281 · Install and Manage Windows Admin Center Extensions · 🔒 Membership
- Lab 192 of 281 · Manage Users and Groups in Windows · 🔒 Membership
- Lab 193 of 281 · Use EFS to Encrypt Files on NTFS Volumes · 🔒 Membership
- Lab 194 of 281 · Using PowerShell to Analyze a System · 🔒 Membership
Step 4 — Network security engineering
Firewalls, IDS and traffic analysis — the controls between the attacker and the estate.
🔒 The full roadmap adds here: 3 full courses · hands-on labs 195–211 of 281 (Membership)
- Course · pfSense Fundamentals - Secure Your Network With pfSense · 🔒 Membership
- Course · Snort Intrusion Detection, Rule Writing, and PCAP Analysis · 🔒 Membership
- Course · Master Wireshark 3 in 5 Days · 🔒 Membership
- Lab 195 of 281 · Assess A High-Risk System · 🔒 Membership
- Lab 196 of 281 · Auditing Service Accounts · 🔒 Membership
- Lab 197 of 281 · Holistic Network Identification and Protection · 🔒 Membership
- Lab 198 of 281 · Implement Single System Changes in Firewall · 🔒 Membership
- Lab 199 of 281 · Protect Against Beaconing · 🔒 Membership
- Lab 200 of 281 · Rogue Device Identification and Blocking · 🔒 Membership
- Lab 201 of 281 · Setting Up SYSLOG Forwarding From a Windows System · 🔒 Membership
- Lab 202 of 281 · Sinkholing C2 Traffic · 🔒 Membership
- Lab 203 of 281 · Threat Designation · 🔒 Membership
- Lab 204 of 281 · Windows System Hardening with PowerShell · 🔒 Membership
- Lab 205 of 281 · Comprehensive Threat Response · 🔒 Membership
- Lab 206 of 281 · Conduct Supplemental Monitoring · 🔒 Membership
- Lab 207 of 281 · Create Custom Snort Rules · 🔒 Membership
- Lab 208 of 281 · Monitoring for False Positives · 🔒 Membership
- Lab 209 of 281 · Monitoring Network Traffic · 🔒 Membership
- Lab 210 of 281 · Monitoring Network Traffic for Potential IOA/IOC · 🔒 Membership
- Lab 211 of 281 · SNORT Configuration and Operation Lab · 🔒 Membership
Step 5 — Secure the cloud and the pipeline
Cloud security and DevSecOps — the fastest-growing skills on security engineering adverts.
🔒 The full roadmap adds here: 3 full courses · hands-on labs 212–224 of 281 (courses in Membership · 13 labs in Infrastructure Labs)
- Course · Introduction to Cloud Security with Microsoft Azure · 🔒 Membership
- Course · Identity & Access Management - Azure Active Directory · 🔒 Membership
- Course · The DevSecOps Essentials - The Handbook · 🔒 Membership
- Lab 212 of 281 · Configure a Network Security Group in a Virtual Network [Guided] · 🔒 Infrastructure Labs
- Lab 213 of 281 · Configure Route Tables in a Virtual Network [Guided] · 🔒 Infrastructure Labs
- Lab 214 of 281 · Configure Global Virtual Network Peering [Guided] · 🔒 Infrastructure Labs
- Lab 215 of 281 · Can You Implement a Secure Azure Virtual Machine Network? [Advanced] · 🔒 Infrastructure Labs
- Lab 216 of 281 · Configure a Virtual Network Service Endpoint [Guided] · 🔒 Infrastructure Labs
- Lab 217 of 281 · Implement Security for an Azure Web App [Guided] · 🔒 Infrastructure Labs
- Lab 218 of 281 · Can You Implement Security for an Azure Web App? [Advanced] · 🔒 Infrastructure Labs
- Lab 219 of 281 · Create an API Management Instance [Guided] · 🔒 Infrastructure Labs
- Lab 220 of 281 · Can You Configure an API Management Solution? [Advanced] · 🔒 Infrastructure Labs
- Lab 221 of 281 · Can You Create a Secure Web App? [Expert] · 🔒 Infrastructure Labs
- Lab 222 of 281 · Log Virtual Machine Network Traffic by Using Network Watcher [Guided] · 🔒 Infrastructure Labs
- Lab 223 of 281 · Monitor Communication Between Virtual Machines by Using Network Watcher [Guided] · 🔒 Infrastructure Labs
- Lab 224 of 281 · Implement an Azure Function App [Guided] · 🔒 Infrastructure Labs
Step 6 — Secure the application
Find and fix the flaws attackers use in the code itself, and build an application security programme. The labs harden PHP and C#.NET web apps against the OWASP Top Ten and practise secure coding in C++.
🔒 The full roadmap adds here: 2 full courses · hands-on labs 225–258 of 281 (Membership)
- Course · The Complete Application Security Course · 🔒 Membership
- Course · Creating an Application Security Program from the Ground Up · 🔒 Membership
- Lab 225 of 281 · WEB241: Hardening PHP Web Apps - Broken Access Control · 🔒 Membership
- Lab 226 of 281 · WEB241: Hardening PHP Web Apps - Broken Authentication · 🔒 Membership
- Lab 227 of 281 · WEB241: Hardening PHP Web Apps - Cross Site Scripting · 🔒 Membership
- Lab 228 of 281 · WEB241: Hardening PHP Web Apps - CSRF · 🔒 Membership
- Lab 229 of 281 · WEB241: Hardening PHP Web Apps - File Uploads · 🔒 Membership
- Lab 230 of 281 · WEB241: Hardening PHP Web Apps - OS Command Injection · 🔒 Membership
- Lab 231 of 281 · WEB241: Hardening PHP Web Apps - Password Hashing · 🔒 Membership
- Lab 232 of 281 · WEB241: Hardening PHP Web Apps - Path Traversal and LFI · 🔒 Membership
- Lab 233 of 281 · WEB241: Hardening PHP Web Apps - PHP Configuration · 🔒 Membership
- Lab 234 of 281 · WEB241: Hardening PHP Web Apps - Secure Deserialization · 🔒 Membership
- Lab 235 of 281 · WEB241: Hardening PHP Web Apps - Sensitive Data Exposure · 🔒 Membership
- Lab 236 of 281 · WEB241: Hardening PHP Web Apps - SQL Injection · 🔒 Membership
- Lab 237 of 281 · WEB241: Hardening PHP Web Apps - Two Factor Authentication · 🔒 Membership
- Lab 238 of 281 · WEB241: Hardening PHP Web Apps - XXE · 🔒 Membership
- Lab 239 of 281 · Hardening C#.NET Web Apps - Broken Access Control · 🔒 Membership
- Lab 240 of 281 · Hardening C#.NET Web Apps - Broken Authentication · 🔒 Membership
- Lab 241 of 281 · Hardening C#.NET Web Apps - Cross Site Scripting · 🔒 Membership
- Lab 242 of 281 · Hardening C#.NET Web Apps - CSRF · 🔒 Membership
- Lab 243 of 281 · Hardening C#.NET Web Apps - File Uploads · 🔒 Membership
- Lab 244 of 281 · Hardening C#.NET Web Apps - OS Command Injection · 🔒 Membership
- Lab 245 of 281 · Hardening C#.NET Web Apps - Password Hashing · 🔒 Membership
- Lab 246 of 281 · Hardening C#.NET Web Apps - Secure Deserialization · 🔒 Membership
- Lab 247 of 281 · Hardening C#.NET Web Apps - SQL Injection · 🔒 Membership
- Lab 248 of 281 · Hardening C#.NET Web Apps - Two Factor Authentication · 🔒 Membership
- Lab 249 of 281 · Hardening C#.NET Web Apps - Web Configuration · 🔒 Membership
- Lab 250 of 281 · Hardening C#.NET Web Apps - XXE · 🔒 Membership
- Lab 251 of 281 · Secure Coding (C++) - Lab 1: Race Conditions · 🔒 Membership
- Lab 252 of 281 · Secure Coding (C++) - Lab 2: Data Validation · 🔒 Membership
- Lab 253 of 281 · Secure Coding (C++) - Lab 3: Authentication · 🔒 Membership
- Lab 254 of 281 · Secure Coding (C++) - Lab 4: Access Control · 🔒 Membership
- Lab 255 of 281 · Secure Coding (C++) - Lab 5: Cryptography · 🔒 Membership
- Lab 256 of 281 · Secure Coding (C++) - Lab 6: Error Handling · 🔒 Membership
- Lab 257 of 281 · Secure Coding (C++) - Lab 7: Static Analysis · 🔒 Membership
- Lab 258 of 281 · Secure Coding (C++) - Lab 8: Buffer Overflows · 🔒 Membership
Step 7 — Automate it
Script security work in Python instead of doing it by hand.
🔒 The full roadmap adds here: 1 full course · hands-on labs 259–264 of 281 (Membership)
- Course · TOTAL: Introduction to Python · 🔒 Membership
- Lab 259 of 281 · Intro to Python · 🔒 Membership
- Lab 260 of 281 · Python · 🔒 Membership
- Lab 261 of 281 · Python Tool Building - Authenticated SQLi · 🔒 Membership
- Lab 262 of 281 · Python Tool Building - Banner Grabber · 🔒 Membership
- Lab 263 of 281 · Python Tool Building - C2 · 🔒 Membership
- Lab 264 of 281 · Python Tool Building - Local File Inclusion · 🔒 Membership
Step 8 — Certify it
The senior certification security engineers are promoted on.
Follow the free CISSP — Certified Information Systems Security Professional roadmap.
🔒 The full roadmap adds here: 7 full courses · hands-on labs 265–281 of 281 (courses in Membership · 8 labs in Membership · 9 labs in Infrastructure Labs)
- Course · CISSP Certification Introduction. Prepare for the exam right · 🔒 Membership
- Course · Certified Information Systems Security Professional - CISSP · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 1 & 2 Video Boot Camp · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 3 & 4 Video Boot Camp · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 5 & 6 Video Boot Camp · 🔒 Membership
- Course · CISSP Certification: CISSP Domain 7 & 8 Video Boot Camp · 🔒 Membership
- Course · Business Continuity and Disaster Recovery Planning · 🔒 Membership
- Lab 265 of 281 · Using the OWASP Zed Attack Proxy Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 266 of 281 · Using the Burp Suite Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 267 of 281 · Use the Nikto Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 268 of 281 · Use the Arachni Web Application Scanner [Guided] · 🔒 Infrastructure Labs
- Lab 269 of 281 · Use Web Application Scanners [Advanced] · 🔒 Infrastructure Labs
- Lab 270 of 281 · Use Greenbone Security Manager to Identify Vulnerabilities [Guided] · 🔒 Infrastructure Labs
- Lab 271 of 281 · Use Nmap for Enumeration [Guided] · 🔒 Infrastructure Labs
- Lab 272 of 281 · Use hping for Enumeration [Guided] · 🔒 Infrastructure Labs
- Lab 273 of 281 · Use Responder for Enumeration [Guided] · 🔒 Infrastructure Labs
- Lab 274 of 281 · Secure Coding (Java) - Lab 1: Race Conditions · 🔒 Membership
- Lab 275 of 281 · Secure Coding (Java) - Lab 2: Data Validation · 🔒 Membership
- Lab 276 of 281 · Secure Coding (Java) - Lab 3: Authentication · 🔒 Membership
- Lab 277 of 281 · Secure Coding (Java) - Lab 4: Access Control · 🔒 Membership
- Lab 278 of 281 · Secure Coding (Java) - Lab 5: Cryptography · 🔒 Membership
- Lab 279 of 281 · Secure Coding (Java) - Lab 6: Error Handling · 🔒 Membership
- Lab 280 of 281 · Secure Coding (Java) - Lab 7: Static Analysis · 🔒 Membership
- Lab 281 of 281 · Secure Coding (Java) - Lab 8: Insecure Deserialization · 🔒 Membership
Do it hands-on
The full Security Engineer roadmap
The same steps with every course and the hands-on labs, and your progress tracked.
The full roadmap with labs →What Membership includes · Full refund within 30 days if you haven't started a lab · cancel anytimeAdvanced
AI-Driven Security Engineering
Become the Cyber Security Expert the AI Era Needs.
StationX’s AI Master’s teaches you to create and deploy security solutions by directing AI. “No coding background required. You direct the AI; the AI does the building.”
Explore the AI Master’s →Create your free account to open all 2,396 free items
The 103 free items on this page — and every other free lesson, video and guide — open once you have a free StationX account. No card, no trial.