Certified Defensive
Security Professional (CDSP)

Basics of cybersecurity and its terminologies, covering core concepts, the CIA triad, common threats, and the mindset needed before diving into technical topics.

Fundamentals of networking — OSI/TCP-IP models, IP addressing, routing, switching, protocols, and packet analysis needed to understand how data moves and how it can be attacked.

Core cloud concepts across AWS, Azure, and GCP — services, IAM, storage, and networking — building the foundation needed to assess and secure cloud environments.

Hands-on Linux administration, command-line proficiency, and scripting with Bash/Python to automate tasks and operate confidently in security tooling environments.

Understanding enterprise Active Directory environments — enumeration, common attack paths, and the hardening and monitoring techniques used to detect and stop AD-based attacks.

Offensive security fundamentals including reconnaissance, scanning, exploitation, and post-exploitation techniques using industry-standard tools like Nmap, Metasploit, and Burp Suite — essential attacker-perspective knowledge for defenders.

Identifying and exploiting web vulnerabilities such as SQL injection, XSS, and authentication flaws, aligned with OWASP Top 10 methodology and manual testing techniques.

Testing REST and other APIs for broken authentication, authorization flaws, and data exposure, using tools like Postman and Burp Suite to secure modern application backends.

In-depth blue team operations spanning SOC Level 1 and Level 2 responsibilities — SIEM monitoring, alert triage, SOAR Automation, threat detection, digital forensics, threat hunting, and incident response.

Practical use of AI in defensive security workflows, including AI-assisted threat detection, alert triage, and an introduction to AI system security risks.

Governance, Risk, and Compliance essentials — security frameworks, risk assessment, audits, and regulatory standards that shape enterprise security programs.

Professional reporting and stakeholder communication skills — writing clear incident reports, presenting findings, and communicating risk to technical and non-technical teams.