Security Education Courses

SEC542 provides hands-on training for identifying and exploiting vulnerabilities in web applications while teaching the ethical hacking techniques necessary to secure them. Participants will explore critical areas such as injection flaws, cross-site scripting (XSS), authentication bypasses, and security misconfigurations. The course includes advanced topics like automated scanning, manual testing techniques, and analyzing modern web technologies such as APIs, frameworks, and single-page applications. Through practical labs and real-world scenarios, SEC542 equips security professionals with the skills to assess web applications effectively and provide actionable remediation strategies to strengthen overall security posture.

SEC540 teaches security professionals how to integrate security into the DevOps pipeline and automate security practices for cloud-native environments. The course focuses on securing infrastructure-as-code (IaC), containerized applications, and CI/CD workflows across platforms like AWS, Azure, and Google Cloud. Participants will learn how to use tools and techniques for vulnerability scanning, compliance checks, and automated threat detection. Hands-on labs emphasize implementing DevSecOps principles, creating secure deployment pipelines, and leveraging cloud-native security services. SEC540 equips attendees with the skills to build scalable, secure, and automated solutions that align with modern development and operational practices.

SEC522 provides a comprehensive approach to securing modern application ecosystems, including web applications, APIs, and microservices. The course covers foundational and advanced security concepts such as secure coding practices, authentication and authorization mechanisms, API security frameworks (like OAuth and OpenID Connect), and protecting microservices architectures. Participants will explore vulnerabilities like injection attacks, broken access controls, and insecure deserialization, while learning how to defend against them using practical mitigation strategies. Through hands-on labs and real-world scenarios, SEC522 equips security professionals with the skills to identify and address security risks in contemporary application environments, ensuring robust and scalable protection.

SEC511 focuses on building and enhancing continuous monitoring and security operations capabilities to detect, analyze, and respond to threats effectively. This course teaches participants how to implement advanced monitoring strategies, leverage Security Information and Event Management (SIEM) systems, and utilize network traffic analysis tools for real-time threat detection. Topics include incident detection, threat hunting, forensic investigation, and operationalizing threat intelligence. Through hands-on labs and case studies, students will gain the skills to develop robust monitoring solutions, automate workflows, and strengthen an organization’s security operations center (SOC) to address evolving cyber threats proactively.

MGT551 equips leaders with the knowledge and skills to design, build, and manage effective Security Operations Centers (SOCs). This course covers the entire lifecycle of a SOC, from establishing objectives and defining workflows to implementing technologies and recruiting the right talent. Participants will explore topics such as threat detection, incident response, automation, and metrics for measuring SOC performance. The curriculum emphasizes strategic planning and operational excellence, ensuring that SOCs can adapt to evolving threats and business needs. Through case studies and practical exercises, MGT551 prepares security leaders to create high-performing SOCs that deliver measurable security value to their organizations.

MGT525 focuses on the critical skills required to successfully lead and manage cybersecurity projects while fostering effective communication with technical and non-technical stakeholders. This course emphasizes project management techniques tailored to cybersecurity initiatives, including risk assessment, resource allocation, and timeline management. Participants will also develop communication strategies to translate complex security concepts into actionable insights for executives, teams, and external partners. Through practical exercises and real-world scenarios, MGT525 equips cybersecurity leaders to manage initiatives effectively, align projects with organizational goals, and drive collaboration across diverse teams to achieve security success.

LDR520 provides executives and managers with a strategic understanding of cloud security to enable informed decision-making and effective leadership in cloud adoption. The course explores cloud security principles, risk management, and governance frameworks, focusing on major platforms like AWS, Azure, and Google Cloud. Participants will learn to evaluate cloud security risks, ensure regulatory compliance, and align security strategies with business objectives. Through case studies and interactive discussions, LDR520 equips leaders to guide their organizations in securely leveraging cloud technologies, fostering collaboration between technical teams and business stakeholders, and responding to the unique challenges of the cloud environment.

MGT516 is designed to help security leaders develop, implement, and manage effective vulnerability management programs that protect organizations from emerging threats. The course covers the entire vulnerability lifecycle, from identification and assessment to remediation and mitigation strategies. Participants will learn how to prioritize vulnerabilities based on risk, integrate vulnerability management into broader security operations, and measure the effectiveness of their programs. Through hands-on exercises and case studies, MGT516 equips professionals with the skills to lead cross-functional teams, communicate risks effectively to stakeholders, and continuously improve vulnerability management processes to reduce the organization’s attack surface.

ICS515 is a hands-on course designed to equip cybersecurity professionals with the skills needed to detect, analyze, and respond to threats targeting Industrial Control Systems (ICS) and Operational Technology (OT) environments. The course covers key topics such as network visibility, threat intelligence, incident detection, and forensic analysis specific to critical infrastructure sectors like energy, manufacturing, and transportation. Participants will learn how to implement and optimize monitoring solutions, analyze ICS network traffic, and develop response strategies to mitigate cyber threats. Through real-world scenarios and hands-on labs, ICS515 prepares defenders to enhance the security and resilience of industrial environments against evolving cyber risks.

ICS410 provides foundational knowledge and practical skills for securing Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) environments. The course covers ICS architectures, protocols, risk management frameworks, and common attack vectors targeting critical infrastructure. Participants will learn essential security controls, incident response strategies, and best practices for securing industrial networks. With hands-on labs and real-world case studies, ICS410 equips IT and OT professionals with the expertise needed to protect ICS/SCADA environments from cyber threats while ensuring operational reliability and safety.

SEC503 is an advanced course designed to help security professionals master network monitoring, intrusion detection, and threat analysis. The course covers essential topics such as packet analysis, network forensics, SIEM optimization, and anomaly detection techniques. Participants will learn how to detect and respond to cyber threats by analyzing network traffic, logs, and attack patterns. The course also dives into advanced tactics used by attackers, including evasion techniques and encrypted traffic analysis. Through hands-on labs and real-world scenarios, SEC503 equips security analysts, SOC teams, and incident responders with the skills needed to enhance network visibility, improve detection capabilities, and respond effectively to cyber threats.

FOR710 is an expert-level course designed for cybersecurity professionals who want to master the art of reverse engineering and analyzing advanced malware threats. The course focuses on dissecting sophisticated malware, including rootkits, fileless malware, and evasive techniques used by advanced persistent threats (APTs). Participants will learn how to analyze malicious code at the assembly level, use dynamic and static analysis techniques, and leverage tools such as IDA Pro, Ghidra, and debuggers. Through hands-on labs and real-world case studies, FOR710 equips malware analysts, incident responders, and forensic investigators with the skills needed to uncover hidden malware behaviors, develop signatures, and enhance enterprise defense strategies.