Start free

← All paths

Security Engineer — career path

StationX Advanced

The builder of defences: harden the systems, secure the network, the cloud and the applications, automate it, then prove it with the certification employers ask for. Security+ first, then Linux and Windows hardening, network security, cloud and DevSecOps, application security, Python, then CISSP.

13 courses · 119 sections · 695 lectures · 120 labs · ≈ 151 h of hands-on labs

Free to start: the free lessons and guides for this roadmap →

Try a free SOC lab: Shut the door (~4 min) → A scripted simulation in your browser. No account needed.

The path

Start here →

Step 1 — Security foundation

The baseline every security engineering advert lists first.

follows the whole CompTIA Security+ (SY0-701) roadmap: 11 courses · 76 sections · 867 lectures · 148 labs · ≈ 172 h of hands-on labs

Learn

CompTIA Security+ badge

11 courses · 76 sections · 867 lectures · 148 labs · ≈ 172 h of hands-on labs

9 steps — The industry-standard entry certification for a cyber security role.

Open the full CompTIA Security+ (SY0-701) roadmap →

Step 2 — Harden Linux

Lock down the operating system most servers run.

2 courses · 26 sections · 150 lectures · 29 labs

Learn

Practise

Step 3 — Harden Windows and Active Directory

Secure the identity system every enterprise attacker targets.

2 courses · 21 sections · 136 lectures · 18 labs

Learn

Step 4 — Network security engineering

Firewalls, IDS and traffic analysis — the controls between the attacker and the estate.

3 courses · 20 sections · 110 lectures · 20 labs

Learn

Free resources

Step 5 — Secure the cloud and the pipeline

Cloud security and DevSecOps — the fastest-growing skills on security engineering adverts.

3 courses · 19 sections · 118 lectures · 13 labs

Learn

Step 6 — Secure the application

Find and fix the flaws attackers use in the code itself, and build an application security programme. The labs harden PHP and C#.NET web apps against the OWASP Top Ten and practise secure coding in C++.

2 courses · 28 sections · 163 lectures · 34 labs

Learn

Practise

Step 7 — Automate it

Script security work in Python instead of doing it by hand.

1 course · 5 sections · 18 lectures · 6 labs

Learn

The tool-building labs here are offensive: an authenticated SQL injection script, a command-and-control (C2) server, a local file inclusion exploit and a banner grabber. They teach Python for security work; no lab here scripts defensive checks or fixes yet.

Step 8 — Certify it

The senior certification security engineers are promoted on.

follows the whole CISSP — Certified Information Systems Security Professional roadmap: 16 courses · 66 sections · 737 lectures · 71 labs · ≈ 70 h of hands-on labs

Learn

ISC2 CISSP badge

16 courses · 66 sections · 737 lectures · 71 labs · ≈ 70 h of hands-on labs

5 steps — The senior security certification, spanning eight domains. Requires five years of experience to certify fully.

Open the full CISSP — Certified Information Systems Security Professional roadmap →

Where this leads

Choose your next roadmap

Advanced · after the job

The AI-Driven Security Engineer

Senior roles are going to the people who can direct AI to build security solutions. When you're working in the role and ready for that step, the AI Master's Program is where it's taught — an advanced, application-only programme.

See the AI Master's Program →Application-only. A separate programme for when you're ready.