Path to Infosec

Start your cybersecurity journey!

---

Project maintained by jaceflournoy

Intermediate Path in Cybersecurity

Welcome to the Intermediate Path in Cybersecurity. This guide is designed for individuals who have a foundational understanding of IT and cybersecurity and are looking to expand their knowledge and skills to prepare for entry-level cybersecurity roles.

Advanced Networking and System Administration

Deepen your understanding of networking concepts and system administration, which are crucial in cybersecurity.

• Advanced Networking:
  • Focus on network architecture, advanced routing and switching, and network security protocols.
  • Resources:
    • Cisco: CCNA Certification
    • Udemy: The Complete Networking Fundamentals Course
• System Administration for Windows and Linux:
  • Gain proficiency in advanced system administration tasks in both Windows and Linux environments.
  • Resources:
    • Linux Academy: Linux System Administration
    • Microsoft Learn: Windows Server Administration Fundamentals

Cybersecurity Defense and Countermeasures

Learn about defensive cybersecurity strategies and how to implement effective countermeasures against threats.

• Network Defense:
  • Understand network security strategies, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
  • Resources:
    • Cybrary: Network Defense and Countermeasures
    • SANS: Network Security Essentials
• Endpoint Protection and Security:
  • Learn about securing endpoints, including workstations, servers, and mobile devices.
  • Resources:
    • Coursera: Endpoint and Mobile Security

Vulnerability Assessment and Penetration Testing

Build skills in identifying vulnerabilities and conducting penetration tests to assess the security of systems.

• Vulnerability Assessment:
  • Learn techniques to identify and evaluate vulnerabilities in systems and networks.
  • Resources:
    • Pluralsight: Vulnerability Assessment Course
    • Offensive Security: PWK and OSCP
• Penetration Testing Basics:
  • Understand the fundamentals of ethical hacking and penetration testing methodologies.
  • Resources:
    • Hack The Box
    • Udemy: Practical Ethical Hacking – The Complete Course

Cybersecurity Tools and Technologies

Familiarize yourself with advanced tools and technologies used in the cybersecurity industry.

• Security Information and Event Management (SIEM):
  • Gain knowledge of SIEM solutions for real-time analysis and reporting of security alerts.
  • Resources:
    • Splunk Fundamentals
    • AlienVault OSSIM: Open Source SIEM
• Advanced Security Tools:
  • Learn to use advanced tools for network scanning, vulnerability scanning, and penetration testing.
  • Resources:
    • Nessus Vulnerability Scanner
    • Burp Suite Professional

Incident Response and Cyber Forensics

Develop skills in incident response and cyber forensics to handle and investigate cybersecurity incidents.

• Incident Response Procedures:
  • Understand the steps and processes involved in responding to cybersecurity incidents.
  • Resources:
    • SANS: Incident Handler’s Handbook
    • Cybrary: Incident Response and Advanced Forensics
• Introduction to Cyber Forensics:
  • Learn the basics of cyber forensics, including data recovery and evidence collection.
  • Resources:
    • edX: Digital Forensics
    • FutureLearn: Introduction to Cyber Forensics

Preparing for a Cybersecurity Career

Enhance your readiness for entry-level cybersecurity positions by focusing on practical experience and professional development.

• Building a Professional Network:
  • Engage in networking opportunities through LinkedIn, cybersecurity conferences, and local meetups.
  • Resources:
    • LinkedIn
    • Meetup: Cybersecurity Groups
• Resume Building and Interview Preparation:
  • Develop a strong cybersecurity-focused resume and prepare for technical interviews.
  • Resources:
    • TechRepublic: How to prepare for a cybersecurity interview
    • Resume.io: IT Security Resume Guide
• Certification Preparation:
  • Consider preparing for advanced certifications like CEH (Certified Ethical Hacker) or CISSP (Certified Information Systems Security Professional).
  • Resources:
    • EC-Council: CEH Certification
    • ISC²: CISSP Certification