Stage 13 to 4 weeks
Networking Fundamentals
- TCP/IP, DNS, HTTP/HTTPS
- OSI model
- Firewalls, VPNs, proxies
- Wireshark traffic analysis
Cybersecurity
Protect systems, find vulnerabilities, and defend what matters.
Hard6 to 10 monthsgrow
Your Progress0%
Overview
Cybersecurity professionals protect systems and data from attacks. Ethical hackers find vulnerabilities before malicious actors do. One of the fastest-growing, highest-demand fields in tech globally.
Who is this for?
- ✓ Students starting from zero who want structure
- ✓ Self-taught learners who need a clear path
- ✓ Career switchers ready to commit consistently
What can you build?
- Vulnerability assessment reports
- Penetration testing scripts
- Security audit documentation
- CTF challenge solutions
Jobs you can get
Security AnalystPenetration TesterCybersecurity EngineerSOC AnalystEthical Hacker
Salary range: $60,000 to $150,000/year
Roadmap
Follow each stage in order. Mark stages complete as you finish them.
- Stage 23 to 4 weeks
Security Concepts
- CIA Triad
- Authentication & authorization
- Common attacks: phishing, MITM, SQLi, XSS
- OWASP Top 10
- Stage 35 to 6 weeks
Ethical Hacking
- Kali Linux setup
- Reconnaissance (OSINT)
- Vulnerability scanning (Nmap, Nessus)
- Exploitation (Metasploit)
- Web app testing (Burp Suite)
- Stage 43 to 4 weeks
Defensive Security
- Log analysis
- SIEM tools (Splunk basics)
- Incident response
- Security hardening
Resources
TryHackMe
FREEThe best beginner cybersecurity platform. Gamified labs and guided paths.
tryhackme.com
HackTheBox
FREEIntermediate to advanced hacking labs. The next step after TryHackMe.
www.hackthebox.com
PortSwigger Web Security Academy
FREEFree world-class web security training from the Burp Suite creators.
portswigger.net/web-security
Google Cybersecurity Certificate
PAIDGoogle's cybersecurity certificate on Coursera. Audit for free.
www.coursera.org/professional-certificates/google-cybersecurity
NetworkChuck YouTube
FREENetworking and cybersecurity content. Engaging and practical.
www.youtube.com/@NetworkChuck
OWASP Top 10
FREEThe definitive list of the 10 most critical web application security risks.
owasp.org/www-project-top-ten
PicoCTF
FREEBeginner Capture The Flag challenges. Best place to start practicing.
picoctf.org
Projects
beginner
#01
Home Network Audit
Use Nmap to scan your own network and document devices, open ports, and risks.
intermediate
#01
Vulnerable App Pentest
Test DVWA or HackTheBox and write a professional penetration test report.
#02
CTF Write-ups
Solve 5 TryHackMe challenges and publish detailed write-ups.
AI Guide
What AI helps with
- ✓ Explaining security concepts and attack vectors
- ✓ Writing security policy documentation
- ✓ Understanding CVEs and vulnerability reports
What AI cannot replace
- ✗ Any task facilitating real attacks on systems you do not own
- ✗ Bypassing security controls in production
- ✗ Generating malicious code of any kind
Recommended Tools
Sample Prompts
Explain how SQL injection works, what damage it can cause, and the 3 most effective prevention methods in a Python + PostgreSQL application.Explain the difference between symmetric and asymmetric encryption, when each is used, and give real-world examples of both.Career Path
Security AnalystPenetration TesterCybersecurity EngineerSOC AnalystEthical Hacker
$60,000 to $150,000/year
Certifications matter more in cybersecurity than any other tech track. Aim for CompTIA Security+ first, it is widely recognized and achievable for beginners.