Your four-phase learning plan
Use this roadmap as a guide, not a guarantee. Timelines depend on your experience and study schedule.
01
Phase 1: Build your foundations
Learn TCP/IP, Linux, Windows fundamentals and security basics.
02
Phase 2: Learn the practical tools
Practice log analysis, phishing investigation and security monitoring.
03
Phase 3: Complete a real project
Set up a safe home lab with Sysmon and a SIEM such as Wazuh.
04
Phase 4: Make your work job-ready
Create incident reports, detection rules and a job-ready portfolio.
Build your progress checklist
Tick off the activities you complete. Your progress is stored on this device, in this browser.
Useful certification options
- ISC2 Certified in Cybersecurity (CC)
- CompTIA Security+ (optional)
- Microsoft SC-900
Exam requirements and pricing vary. Always confirm details with the official certification provider.
Portfolio projects to build
- SOC alert investigation lab
- Phishing email analysis
Roles to explore
SOC Analyst, Security Analyst, Junior Incident Responder.