
Security Engineer — career path
StationX Advanced
The builder of defences: harden the systems, secure the network and the cloud, then prove it with the certification employers ask for. Security+ first, then Linux and Windows hardening, network security, cloud, then CISSP.
The path
Step 1 — Security foundation
The baseline every security engineering advert lists first.
follows a certification path
Learn
- PathFollow the CompTIA Security+ (SY0-701) path — the certification most engineering roles ask for at entry
Step 2 — Harden Linux
Lock down the operating system most servers run.
2 courses · 29 labs
Learn
- CourseLinux Security and Hardening, The Practical Security Guide 🔒 StationX Unlimited
9 sections · 64 lectures
- Training Overview 2
- Course Overview and Downloads 1
- General Security 6
- Physical Security 12
- Account Security 10
- Network Security 14
- File System Security 13
- Additional Security Resources 5
- Audio Version of Training 1
- CourseLinux Administration Bootcamp: Go from Beginner to Advanced 🔒 StationX Unlimited
17 sections · 86 lectures
- Training Overview 2
- Overview 1
- Installing and Connecting to a Linux System 10
- Linux Fundamentals 14
- Intermediate Linux Skills 16
- The Linux Boot Process and System Logging 4
- Disk Management 4
- LVM - The Logical Volume Manager 8
- User Management 3
- Networking 6
- Advanced Linux Permissions 3
- Shell Scripting 3
- Advanced Command Line Skills - Command Line Kung Fu 6
- Extras 3
- Summary 1
- Course Slides 1
- Audio Version of Training 1
Practise
- LabsLinux Security & Hardening — 15 labs 🔒 StationX Unlimited
- Physical Security
- SETUID
- Securing Linux - Advanced IPTables
- Securing Linux - App Armor
- Securing Linux - Basic Restrictions
- Securing Linux - Capabilities and ACLs
- Securing Linux - Centralized Authentication
- Securing Linux - Encryption
- Securing Linux - Firewalls
- Securing Linux - Monitoring with SecurityOnion
- Securing Linux - Network Intrusion Detection
- Securing Linux - Physical Security
- Securing Linux - SELinux
- Securing Linux - Secure Remote Access
- Securing Linux for System Administrators
- LabsIntroduction to Linux — 14 labs 🔒 StationX Unlimited
- Intro To Linux - Backing Up, Compression, and Scheduling
- Intro To Linux - Command Line Basics
- Intro To Linux - File Systems
- Intro To Linux - Installing Software
- Intro To Linux - Kernel
- Intro To Linux - Networking Tools
- Intro To Linux - Processes and Booting
- Intro To Linux - Sed and Awk
- Intro To Linux - Text Editors
- Intro To Linux - Users and Groups
- Intro to Linux - Bash Scripting
- Intro to Linux - Pipes and Filters
- Intro to Linux - Routing and SSH Tunnels
- Linux Familiarization Lab
Step 3 — Harden Windows and Active Directory
Secure the identity system every enterprise attacker targets.
2 courses · 18 labs
Learn
- CourseActive Directory with Windows Server 2016 🔒 StationX Unlimited
7 sections · 62 lectures
- Training Overview 2
- Introduction 1
- Install and Configure AD DS 16
- Managing and Maintaining AD DS 16
- Create and Manage Group Policy 10
- Implement AD Certificate Services 8
- Implement Identity Federation and Access Solutions 9
- CourseMicrosoft Windows Server 2019 - Hands-on Training Part I 🔒 StationX Unlimited
14 sections · 74 lectures
- Training Overview 1
- Section 1: Course Overview 1
- Section 2: Building Your Virtual Lab Environment Using VirtualBox 6
- Section 3: Troubleshooting VirtualBox 2
- Section 4: Building a Windows Server Domain Using PowerShell 7
- Section 5: Domain Naming System (DNS) 8
- Section 6: Configuring the Dynamic Host Configuration Protocol (DHCP) 11
- Section 7: Active Directory Administration 5
- Section 8: Server 2019 Administration 11
- Section 9: Group Policy 7
- Section 10: Disk Management 4
- Section 11: Firewall Administration 4
- Section 12: Troubleshooting 6
- Audio Version of Training 1
Practise
- LabsWindows Security & System Hardening — 3 labs 🔒 StationX Unlimited
- LabsWindows Administration Fundamentals — 15 labs 🔒 StationX Unlimited
- Backup and Restore Data in Windows
- Configure Network Load Balancing for a Web Farm
- Configure Security Settings by Using Microsoft Group Policy
- Configure Standard Windows Permissions
- Configure Update Management in Windows
- Configure Windows Defender on a Windows System
- Configure Windows Firewall ACL Rules
- Configure a Local Security Policy on Server 2019
- Configure and Test the Firewall in Windows
- Creating a List of Installed Programs, Services and User Accounts from a WIN2K12 Server
- Disable User Account on Windows 10
- Install and Manage Windows Admin Center Extensions
- Manage Users and Groups in Windows
- Use EFS to Encrypt Files on NTFS Volumes
- Using PowerShell to Analyze a System
Step 4 — Network security engineering
Firewalls, IDS and traffic analysis — the controls between the attacker and the estate.
3 courses · 20 labs
Learn
- CoursepfSense Fundamentals - Secure Your Network With pfSense 🔒 StationX Unlimited
11 sections · 60 lectures
- Section 1: Introduction 1
- Section 2: Firewalls Refresher 2
- Section 3: pfSense Installation 2
- Section 4: Creating A Virtual Lab 4
- Section 5: pfSense Initial Setup 8
- Section 6: pfSense Firewall 11
- Section 7: pfBlockerNG 3
- Section 8: Snort IDS/IPS 7
- Section 9: Suricata IDS/IPS 7
- Section 10: Configuring a DMZ 12
- Section 11: Maintenance 3
- CourseSnort Intrusion Detection, Rule Writing, and PCAP Analysis 🔒 StationX Unlimited
3 sections · 16 lectures
- Training Overview 2
- Lectures 1
- Hands-on Labs 13
- CourseMaster Wireshark 3 in 5 Days 🔒 StationX Unlimited
6 sections · 34 lectures
- Training Overview 2
- Day One 3
- Day Two 8
- Day Three 7
- Day Four 7
- Day Five 7
Practise
- LabsNetwork Security — 12 labs 🔒 StationX Unlimited
- Assess A High-Risk System
- Auditing Service Accounts
- Block Incoming Traffic on Known Port
- Holistic Network Identification and Protection
- Implement Single System Changes in Firewall
- Network Topology Generation
- Protect Against Beaconing
- Rogue Device Identification and Blocking
- Setting Up SYSLOG Forwarding From a Windows System
- Sinkholing C2 Traffic
- Threat Designation
- Windows System Hardening with PowerShell
- LabsNetwork Intrusion Detection — 8 labs 🔒 StationX Unlimited
- FreeZero Trust Model
Step 5 — Secure the cloud
The fastest-growing skill on security engineering adverts.
2 courses · 13 labs
Learn
- CourseIntroduction to Cloud Security with Microsoft Azure 🔒 StationX Unlimited
8 sections · 41 lectures
- Introduction 3
- Basics of the Cloud 5
- Basics of Azure 5
- Virtualization 8
- Redundancy 5
- Security 6
- Active Directory 6
- Security in Action 3
- CourseIdentity & Access Management - Azure Active Directory 🔒 StationX Unlimited
3 sections · 46 lectures
- Training Overview 2
- Section 1: Introduction 43
- Audio Version of Training 1
Practise
- Labs+Azure Network Security — 13 labs 🔒 StationX Labs+
- Can You Configure an API Management Solution? [Advanced]
- Can You Create a Secure Web App? [Expert]
- Can You Implement Security for an Azure Web App? [Advanced]
- Can You Implement a Secure Azure Virtual Machine Network? [Advanced]
- Configure Global Virtual Network Peering [Guided]
- Configure Route Tables in a Virtual Network [Guided]
- Configure a Network Security Group in a Virtual Network [Guided]
- Configure a Virtual Network Service Endpoint [Guided]
- Create an API Management Instance [Guided]
- Implement Security for an Azure Web App [Guided]
- Implement an Azure Function App [Guided]
- Log Virtual Machine Network Traffic by Using Network Watcher [Guided]
- Monitor Communication Between Virtual Machines by Using Network Watcher [Guided]
Step 6 — Certify it
The senior certification security engineers are hired and promoted on.
follows a certification path
Learn
- PathFollow the CISSP — Certified Information Systems Security Professional path — the certification senior engineering adverts ask for
Where this leads
- CCSP — Certified Cloud Security Professional — Advanced
- AWS Certified Security — Specialty — Advanced
- Microsoft Cybersecurity Architect (SC-100) — Advanced
Advanced · after the job
The AI-Driven Security Engineer
Senior roles are going to the people who can direct AI to build security solutions. When you're working in the role and ready for that step, the AI Master's Program is where it's taught — an advanced, application-only programme.
See the AI Master's Program →Application-only. A separate programme for when you're ready.