
Security Engineer — career path
StationX Advanced
The builder of defences: harden the systems, secure the network, the cloud and the applications, automate it, then prove it with the certification employers ask for. Security+ first, then Linux and Windows hardening, network security, cloud and DevSecOps, application security, Python, then CISSP.
13 courses · 119 sections · 695 lectures · 120 labs · ≈ 151 h of hands-on labs
Free to start: the free lessons and guides for this roadmap →
Try a free SOC lab: Shut the door (~4 min) → A scripted simulation in your browser. No account needed.
The path
Start here →
Step 1 — Security foundation
The baseline every security engineering advert lists first.
follows the whole CompTIA Security+ (SY0-701) roadmap: 11 courses · 76 sections · 867 lectures · 148 labs · ≈ 172 h of hands-on labs
Learn

- PathFollow the CompTIA Security+ (SY0-701) path — the certification most engineering roles ask for at entry
11 courses · 76 sections · 867 lectures · 148 labs · ≈ 172 h of hands-on labs
9 steps — The industry-standard entry certification for a cyber security role.
Step 2 — Harden Linux
Lock down the operating system most servers run.
2 courses · 26 sections · 150 lectures · 29 labs
Learn
- CourseLinux Administration Bootcamp: Go from Beginner to Advanced (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
17 sections · 86 lectures
- Training Overview 2
- Overview 1
- Installing and Connecting to a Linux System 10
- Linux Fundamentals 14
- Intermediate Linux Skills 16
- The Linux Boot Process and System Logging 4
- Disk Management 4
- LVM - The Logical Volume Manager 8
- User Management 3
- Networking 6
- Advanced Linux Permissions 3
- Shell Scripting 3
- Advanced Command Line Skills - Command Line Kung Fu 6
- Extras 3
- Summary 1
- Course Slides 1
- Audio Version of Training 1
- CourseLinux Security and Hardening, The Practical Security Guide (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
9 sections · 64 lectures
- Training Overview 2
- Course Overview and Downloads 1
- General Security 6
- Physical Security 12
- Account Security 10
- Network Security 14
- File System Security 13
- Additional Security Resources 5
- Audio Version of Training 1
Practise
- LabsLinux Security & Hardening — 15 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Physical SecurityDuration: 1 h
- Securing Linux - Advanced IPTablesDuration: 1 h
- Securing Linux - App ArmorDuration: 3 h
- Securing Linux - Basic RestrictionsDuration: 1 h
- Securing Linux - Capabilities and ACLsDuration: 1 h
- Securing Linux - Centralized AuthenticationDuration: 3 h
- Securing Linux - EncryptionDuration: 1 h
- Securing Linux - FirewallsDuration: 1 h
- Securing Linux - Monitoring with SecurityOnionDuration: 2 h
- Securing Linux - Network Intrusion DetectionDuration: 1 h
- Securing Linux - Physical SecurityDuration: 1 h
- Securing Linux - Secure Remote AccessDuration: 2 h
- Securing Linux - SELinuxDuration: 2 h
- Securing Linux for System AdministratorsDuration: 1 h
- SETUIDDuration: 1 h
- LabsIntroduction to Linux — 14 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Intro To Linux - Backing Up, Compression, and SchedulingDuration: 1 h
- Intro to Linux - Bash ScriptingDuration: 3 h
- Intro To Linux - Command Line BasicsDuration: 1 h
- Intro To Linux - File SystemsDuration: 1 h
- Intro To Linux - Installing SoftwareDuration: 1 h
- Intro To Linux - KernelDuration: 1 h
- Intro To Linux - Networking ToolsDuration: 1 h
- Intro to Linux - Pipes and FiltersDuration: 2 h
- Intro To Linux - Processes and BootingDuration: 1 h
- Intro to Linux - Routing and SSH TunnelsDuration: 2 h
- Intro To Linux - Sed and AwkDuration: 1 h
- Intro To Linux - Text EditorsDuration: 1 h
- Intro To Linux - Users and GroupsDuration: 1 h
- Linux Familiarization LabDuration: 1 h
Step 3 — Harden Windows and Active Directory
Secure the identity system every enterprise attacker targets.
2 courses · 21 sections · 136 lectures · 18 labs
Learn
- CourseActive Directory with Windows Server 2016 (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
7 sections · 62 lectures
- Training Overview 2
- Introduction 1
- Install and Configure AD DS 16
- Managing and Maintaining AD DS 16
- Create and Manage Group Policy 10
- Implement AD Certificate Services 8
- Implement Identity Federation and Access Solutions 9
- CourseMicrosoft Windows Server 2019 - Hands-on Training Part I (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
14 sections · 74 lectures
- Training Overview 1
- Section 1: Course Overview 1
- Section 2: Building Your Virtual Lab Environment Using VirtualBox 6
- Section 3: Troubleshooting VirtualBox 2
- Section 4: Building a Windows Server Domain Using PowerShell 7
- Section 5: Domain Naming System (DNS) 8
- Section 6: Configuring the Dynamic Host Configuration Protocol (DHCP) 11
- Section 7: Active Directory Administration 5
- Section 8: Server 2019 Administration 11
- Section 9: Group Policy 7
- Section 10: Disk Management 4
- Section 11: Firewall Administration 4
- Section 12: Troubleshooting 6
- Audio Version of Training 1
Practise
- LabsWindows Security & System Hardening — 3 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Auditing Service Accounts and Creation of Service Accounts To Run Specific ServicesDuration: 1 h
- Detecting Changes to System ConfigurationsDuration: 1 h
- PAM LabDuration: 1 h
- LabsWindows Administration Fundamentals — 15 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Backup and Restore Data in WindowsDuration: 2 h
- Configure a Local Security Policy on Server 2019Duration: 2 h
- Configure and Test the Firewall in WindowsDuration: 2 h
- Configure Network Load Balancing for a Web FarmDuration: 2 h
- Configure Security Settings by Using Microsoft Group PolicyDuration: 2 h
- Configure Standard Windows PermissionsDuration: 2 h
- Configure Update Management in WindowsDuration: 2 h
- Configure Windows Defender on a Windows SystemDuration: 2 h
- Configure Windows Firewall ACL RulesDuration: 2 h
- Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 ServerDuration: 1 h also on Step 1 (Security+)
- Disable User Account on Windows 10Duration: 1 h
- Install and Manage Windows Admin Center ExtensionsDuration: 2 h
- Manage Users and Groups in WindowsDuration: 2 h
- Use EFS to Encrypt Files on NTFS VolumesDuration: 2 h
- Using PowerShell to Analyze a SystemDuration: 1 h
Step 4 — Network security engineering
Firewalls, IDS and traffic analysis — the controls between the attacker and the estate.
3 courses · 20 sections · 110 lectures · 20 labs
Learn
- CoursepfSense Fundamentals - Secure Your Network With pfSense (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
11 sections · 60 lectures
- Section 1: Introduction 1
- Section 2: Firewalls Refresher 2
- Section 3: pfSense Installation 2
- Section 4: Creating A Virtual Lab 4
- Section 5: pfSense Initial Setup 8
- Section 6: pfSense Firewall 11
- Section 7: pfBlockerNG 3
- Section 8: Snort IDS/IPS 7
- Section 9: Suricata IDS/IPS 7
- Section 10: Configuring a DMZ 12
- Section 11: Maintenance 3
- CourseSnort Intrusion Detection, Rule Writing, and PCAP Analysis (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
3 sections · 16 lectures
- Training Overview 2
- Lectures 1
- Hands-on Labs 13
- CourseMaster Wireshark 3 in 5 Days (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
6 sections · 34 lectures
- Training Overview 2
- Day One 3
- Day Two 8
- Day Three 7
- Day Four 7
- Day Five 7
Practise
- LabsNetwork Security — 12 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Assess A High-Risk SystemDuration: 1 h
- Auditing Service AccountsDuration: 1 h
- Block Incoming Traffic on Known PortDuration: 1 h also on Step 1 (Security+)
- Holistic Network Identification and ProtectionDuration: 2 h
- Implement Single System Changes in FirewallDuration: 1 h
- Network Topology GenerationDuration: 2 h also on Step 1 (Security+)
- Protect Against BeaconingDuration: 1 h
- Rogue Device Identification and BlockingDuration: 1 h
- Setting Up SYSLOG Forwarding From a Windows SystemDuration: 1 h
- Sinkholing C2 TrafficDuration: 1 h
- Threat DesignationDuration: 1 h
- Windows System Hardening with PowerShellDuration: 2 h
- LabsNetwork Intrusion Detection — 8 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Comprehensive Threat ResponseDuration: 2 h
- Conduct Supplemental MonitoringDuration: 1 h
- Create Custom Snort RulesDuration: 1 h
- MITRE ATT&CKDuration: 1 h also on Step 1 (Security+)
- Monitoring for False PositivesDuration: 1 h
- Monitoring Network TrafficDuration: 1 h
- Monitoring Network Traffic for Potential IOA/IOCDuration: 1 h
- SNORT Configuration and Operation LabDuration: 1 h
- FreeZero Trust Model
Step 5 — Secure the cloud and the pipeline
Cloud security and DevSecOps — the fastest-growing skills on security engineering adverts.
3 courses · 19 sections · 118 lectures · 13 labs
Learn
- CourseIntroduction to Cloud Security with Microsoft Azure (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
8 sections · 41 lectures
- Introduction 3
- Basics of the Cloud 5
- Basics of Azure 5
- Virtualization 8
- Redundancy 5
- Security 6
- Active Directory 6
- Security in Action 3
- CourseIdentity & Access Management - Azure Active Directory (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
3 sections · 46 lectures
- Training Overview 2
- Section 1: Introduction 43
- Audio Version of Training 1
- CourseThe DevSecOps Essentials - The Handbook (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
8 sections · 31 lectures
- Training Overview 2
- Introduction 1
- Introduction to DevSecOps 7
- Introduction to DevSecOps 6
- Journey with SDLC 4
- Phase wise SLDC Integration with DevSecOps 9
- Course Summary 1
- Audio Version of the Training 1
Practise
- Infra LabsAzure Network Security — 13 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Configure a Network Security Group in a Virtual NetworkLevel: GuidedDuration: 30 min
- Configure Route Tables in a Virtual NetworkLevel: GuidedDuration: 30 min
- Configure Global Virtual Network PeeringLevel: GuidedDuration: 30 min
- Can You Implement a Secure Azure Virtual Machine Network?Level: AdvancedDuration: 1 h
- Configure a Virtual Network Service EndpointLevel: GuidedDuration: 30 min
- Implement Security for an Azure Web AppLevel: GuidedDuration: 30 min
- Can You Implement Security for an Azure Web App?Level: AdvancedDuration: 45 min
- Create an API Management InstanceLevel: GuidedDuration: 30 min
- Can You Configure an API Management Solution?Level: AdvancedDuration: 1 h 30 min
- Can You Create a Secure Web App?Level: ExpertDuration: 1 h
- Log Virtual Machine Network Traffic by Using Network WatcherLevel: GuidedDuration: 30 min
- Monitor Communication Between Virtual Machines by Using Network WatcherLevel: GuidedDuration: 30 min
- Implement an Azure Function AppLevel: GuidedDuration: 30 min
Step 6 — Secure the application
Find and fix the flaws attackers use in the code itself, and build an application security programme. The labs harden PHP and C#.NET web apps against the OWASP Top Ten and practise secure coding in C++.
2 courses · 28 sections · 163 lectures · 34 labs
Learn
- CourseThe Complete Application Security Course (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
16 sections · 120 lectures
- Training Overview 1
- Section : Introduction to this course. 1
- Section : Understanding Secure SDLC 7
- Section : Defense in Depth 7
- Section : Dive into the OWASP Top 10 15
- Section : Supply Chain Security 7
- Section : Cloud and Container Security 12
- Section : Session Management 8
- Risk Rating and Basic Threat Modeling 10
- Section : More Advanced Threat Modeling 10
- Section : Encryption and Hashing 8
- Section : DevSecOps and Secure CICD 10
- Section : Security Scanning and Testing 12
- Section : Introduction to AI Security 10
- Section : Conclusion 1
- Audio Version of the Training 1
- CourseCreating an Application Security Program from the Ground Up (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
12 sections · 43 lectures
- Training Overview 2
- Welcome to the course! 1
- Why do we need application security 4
- Defining the problem 6
- Components of application security 6
- Releasing Secure Code 3
- Security belongs to everyone 5
- Application security as a service 3
- Building a roadmap 4
- Measuring success in your application security program 4
- Continuously improving the program 4
- Audio Version of the Training 1
Practise
- LabsHardening PHP Web Apps — 14 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- WEB241: Hardening PHP Web Apps - Broken Access ControlDuration: 1 h
- WEB241: Hardening PHP Web Apps - Broken AuthenticationDuration: 1 h
- WEB241: Hardening PHP Web Apps - Cross Site ScriptingDuration: 1 h
- WEB241: Hardening PHP Web Apps - CSRFDuration: 1 h
- WEB241: Hardening PHP Web Apps - File UploadsDuration: 1 h
- WEB241: Hardening PHP Web Apps - OS Command InjectionDuration: 1 h
- WEB241: Hardening PHP Web Apps - Password HashingDuration: 1 h
- WEB241: Hardening PHP Web Apps - Path Traversal and LFIDuration: 1 h
- WEB241: Hardening PHP Web Apps - PHP ConfigurationDuration: 1 h
- WEB241: Hardening PHP Web Apps - Secure DeserializationDuration: 1 h
- WEB241: Hardening PHP Web Apps - Sensitive Data ExposureDuration: 1 h
- WEB241: Hardening PHP Web Apps - SQL InjectionDuration: 1 h
- WEB241: Hardening PHP Web Apps - Two Factor AuthenticationDuration: 1 h
- WEB241: Hardening PHP Web Apps - XXEDuration: 1 h
- LabsHardening C#.NET Web Apps — 12 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Hardening C#.NET Web Apps - Broken Access ControlDuration: 1 h
- Hardening C#.NET Web Apps - Broken AuthenticationDuration: 1 h
- Hardening C#.NET Web Apps - Cross Site ScriptingDuration: 1 h
- Hardening C#.NET Web Apps - CSRFDuration: 1 h
- Hardening C#.NET Web Apps - File UploadsDuration: 3 h
- Hardening C#.NET Web Apps - OS Command InjectionDuration: 1 h
- Hardening C#.NET Web Apps - Password HashingDuration: 1 h
- Hardening C#.NET Web Apps - Secure DeserializationDuration: 1 h
- Hardening C#.NET Web Apps - SQL InjectionDuration: 1 h
- Hardening C#.NET Web Apps - Two Factor AuthenticationDuration: 1 h
- Hardening C#.NET Web Apps - Web ConfigurationDuration: 1 h
- Hardening C#.NET Web Apps - XXEDuration: 1 h
- LabsSecure Coding (C++) — 8 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Secure Coding (C++) - Lab 1: Race ConditionsDuration: 1 h
- Secure Coding (C++) - Lab 2: Data ValidationDuration: 1 h
- Secure Coding (C++) - Lab 3: AuthenticationDuration: 1 h
- Secure Coding (C++) - Lab 4: Access ControlDuration: 1 h
- Secure Coding (C++) - Lab 5: CryptographyDuration: 1 h
- Secure Coding (C++) - Lab 6: Error HandlingDuration: 1 h
- Secure Coding (C++) - Lab 7: Static AnalysisDuration: 1 h
- Secure Coding (C++) - Lab 8: Buffer OverflowsDuration: 1 h
Step 7 — Automate it
Script security work in Python instead of doing it by hand.
1 course · 5 sections · 18 lectures · 6 labs
Learn
- CourseTOTAL: Introduction to Python (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
5 sections · 18 lectures
- Training Overview 2
- Chapter 1: Welcome to Python! 6
- Introduction to Programming 5
- Data Processing with Python 4
- Audio 1
The tool-building labs here are offensive: an authenticated SQL injection script, a command-and-control (C2) server, a local file inclusion exploit and a banner grabber. They teach Python for security work; no lab here scripts defensive checks or fixes yet.
Practise
- LabsPython for Cybersecurity Tool Development — 6 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
- Intro to PythonDuration: 2 h
- PythonDuration: 2 h
- Python Tool Building - Authenticated SQLiDuration: 2 h
- Python Tool Building - Banner GrabberDuration: 2 h
- Python Tool Building - C2Duration: 2 h
- Python Tool Building - Local File InclusionDuration: 2 h
Step 8 — Certify it
The senior certification security engineers are promoted on.
follows the whole CISSP — Certified Information Systems Security Professional roadmap: 16 courses · 66 sections · 737 lectures · 71 labs · ≈ 70 h of hands-on labs
Learn

- PathFollow the CISSP — Certified Information Systems Security Professional path — the certification senior engineering adverts ask for — needs 5 years' experience to certify, 4 with a qualifying degree or credential (you can pass the exam first)
16 courses · 66 sections · 737 lectures · 71 labs · ≈ 70 h of hands-on labs
5 steps — The senior security certification, spanning eight domains. Requires five years of experience to certify fully.
Open the full CISSP — Certified Information Systems Security Professional roadmap →
Where this leads
Choose your next roadmap
CCSP — Certified Cloud Security Professional

AWS Certified Security — Specialty

Microsoft Cybersecurity Architect (SC-100)

Advanced · after the job
The AI-Driven Security Engineer
Senior roles are going to the people who can direct AI to build security solutions. When you're working in the role and ready for that step, the AI Master's Program is where it's taught — an advanced, application-only programme.
See the AI Master's Program →Application-only. A separate programme for when you're ready.
