Security Education Courses

SEC565 focuses on the strategies, tactics, and techniques used by red teams to emulate advanced adversaries and conduct realistic penetration testing. This course provides in-depth training on planning, executing, and reporting red team operations, with an emphasis on simulating real-world cyberattacks across various attack vectors, such as phishing, social engineering, lateral movement, and privilege escalation. Participants will learn how to apply the MITRE ATT&CK framework for adversary emulation and how to tailor their operations to test an organization’s defenses. Through hands-on labs and real-world scenarios, SEC565 equips professionals with the skills to conduct thorough red team assessments, identify vulnerabilities, and improve an organization’s overall security resilience.

SEC555 is a hands-on course that teaches security professionals how to effectively leverage Security Information and Event Management (SIEM) platforms for detecting, analyzing, and responding to cyber threats. The course focuses on configuring, tuning, and optimizing SIEM solutions to gather actionable intelligence from logs, events, and network data. Participants will explore advanced analytics techniques, threat hunting methodologies, and real-world scenarios to identify malicious activity and improve incident response. Through practical exercises and case studies, SEC555 equips attendees with the skills to transform their SIEM into a powerful tool for proactive defense and tactical decision-making in dynamic security environments.

SEC549 focuses on designing and implementing robust cloud security architectures tailored to enterprise environments. This course provides a deep dive into securing multi-cloud and hybrid cloud infrastructures, addressing challenges such as identity and access management (IAM), secure workload deployment, data protection, and compliance. Participants will learn to build scalable, defensible cloud architectures using industry best practices and native security tools across platforms like AWS, Azure, and Google Cloud. Through hands-on labs and case studies, SEC549 equips security professionals with the knowledge and skills to develop resilient cloud security strategies that align with business goals and withstand evolving threats.

SEC542 provides hands-on training for identifying and exploiting vulnerabilities in web applications while teaching the ethical hacking techniques necessary to secure them. Participants will explore critical areas such as injection flaws, cross-site scripting (XSS), authentication bypasses, and security misconfigurations. The course includes advanced topics like automated scanning, manual testing techniques, and analyzing modern web technologies such as APIs, frameworks, and single-page applications. Through practical labs and real-world scenarios, SEC542 equips security professionals with the skills to assess web applications effectively and provide actionable remediation strategies to strengthen overall security posture.

SEC540 teaches security professionals how to integrate security into the DevOps pipeline and automate security practices for cloud-native environments. The course focuses on securing infrastructure-as-code (IaC), containerized applications, and CI/CD workflows across platforms like AWS, Azure, and Google Cloud. Participants will learn how to use tools and techniques for vulnerability scanning, compliance checks, and automated threat detection. Hands-on labs emphasize implementing DevSecOps principles, creating secure deployment pipelines, and leveraging cloud-native security services. SEC540 equips attendees with the skills to build scalable, secure, and automated solutions that align with modern development and operational practices.

SEC522 provides a comprehensive approach to securing modern application ecosystems, including web applications, APIs, and microservices. The course covers foundational and advanced security concepts such as secure coding practices, authentication and authorization mechanisms, API security frameworks (like OAuth and OpenID Connect), and protecting microservices architectures. Participants will explore vulnerabilities like injection attacks, broken access controls, and insecure deserialization, while learning how to defend against them using practical mitigation strategies. Through hands-on labs and real-world scenarios, SEC522 equips security professionals with the skills to identify and address security risks in contemporary application environments, ensuring robust and scalable protection.

SEC511 focuses on building and enhancing continuous monitoring and security operations capabilities to detect, analyze, and respond to threats effectively. This course teaches participants how to implement advanced monitoring strategies, leverage Security Information and Event Management (SIEM) systems, and utilize network traffic analysis tools for real-time threat detection. Topics include incident detection, threat hunting, forensic investigation, and operationalizing threat intelligence. Through hands-on labs and case studies, students will gain the skills to develop robust monitoring solutions, automate workflows, and strengthen an organization’s security operations center (SOC) to address evolving cyber threats proactively.

MGT551 equips leaders with the knowledge and skills to design, build, and manage effective Security Operations Centers (SOCs). This course covers the entire lifecycle of a SOC, from establishing objectives and defining workflows to implementing technologies and recruiting the right talent. Participants will explore topics such as threat detection, incident response, automation, and metrics for measuring SOC performance. The curriculum emphasizes strategic planning and operational excellence, ensuring that SOCs can adapt to evolving threats and business needs. Through case studies and practical exercises, MGT551 prepares security leaders to create high-performing SOCs that deliver measurable security value to their organizations.

MGT525 focuses on the critical skills required to successfully lead and manage cybersecurity projects while fostering effective communication with technical and non-technical stakeholders. This course emphasizes project management techniques tailored to cybersecurity initiatives, including risk assessment, resource allocation, and timeline management. Participants will also develop communication strategies to translate complex security concepts into actionable insights for executives, teams, and external partners. Through practical exercises and real-world scenarios, MGT525 equips cybersecurity leaders to manage initiatives effectively, align projects with organizational goals, and drive collaboration across diverse teams to achieve security success.

LDR520 provides executives and managers with a strategic understanding of cloud security to enable informed decision-making and effective leadership in cloud adoption. The course explores cloud security principles, risk management, and governance frameworks, focusing on major platforms like AWS, Azure, and Google Cloud. Participants will learn to evaluate cloud security risks, ensure regulatory compliance, and align security strategies with business objectives. Through case studies and interactive discussions, LDR520 equips leaders to guide their organizations in securely leveraging cloud technologies, fostering collaboration between technical teams and business stakeholders, and responding to the unique challenges of the cloud environment.

MGT516 is designed to help security leaders develop, implement, and manage effective vulnerability management programs that protect organizations from emerging threats. The course covers the entire vulnerability lifecycle, from identification and assessment to remediation and mitigation strategies. Participants will learn how to prioritize vulnerabilities based on risk, integrate vulnerability management into broader security operations, and measure the effectiveness of their programs. Through hands-on exercises and case studies, MGT516 equips professionals with the skills to lead cross-functional teams, communicate risks effectively to stakeholders, and continuously improve vulnerability management processes to reduce the organization’s attack surface.

MGT433 focuses on understanding and managing the human element in cybersecurity, recognizing that employees, contractors, and third-party vendors can be the weakest link in an organization’s security posture. The course explores the psychology of human behavior, common security risks posed by insiders, and how to mitigate them through training, awareness programs, and behavior-driven security policies. Participants will learn how to develop and implement strategies to reduce human risk, including phishing prevention, social engineering defenses, and fostering a security-aware culture. Through practical case studies and exercises, MGT433 equips leaders with the tools to manage human risk effectively and enhance overall organizational resilience.