Professional Cybersecurity and Specialization

The final level develops independent professional cybersecurity practice through a shared core and focused specialization.

Professional Core

• Risk assessment and threat modeling.
• Advanced incident analysis.
• Security automation using programming.
• Governance, ethics, communication, and professional reporting.

Specialization Tracks

SOC and Blue Team

• Advanced SIEM and EDR.
• Network detection and threat hunting.
• Detection engineering and rule improvement.

Application Security

• Authorized web application security testing.
• Authentication and access control security.
• Secure development and DevSecOps.
• Vulnerability reporting, remediation, and retesting.

GRC

• Governance and risk assessment.
• Security policies and controls.
• Audit and compliance.
• Business continuity and third-party risk.

Practical Work

Work through advanced scenarios aligned with the specialization, emphasizing investigation, decisions, documentation, and independence.

Capstone Project

Plan and execute a professional project aligned with the chosen specialization, including analysis, implementation, documentation, presentation, and recommendations.

Expected Outcomes

• Perform advanced tasks within a focused specialization.
• Analyze risks and incidents using evidence-based reasoning.
• Apply specialized tools and methods independently.
• Produce professional security reports and recommendations.

Prerequisites

• Successful completion of Levels 1 and 2 is mandatory.
• Direct entry to Level 3 is not permitted.
• Completion requires passing the assessments and capstone project.