Cybersecurity Engineer Roadmap
Phase 1:Foundations
beginner3 weeksNetworking Basics
TCP/IP, DNS, HTTP, firewalls, and how data moves across networks. You can't secure what you don't understand.
beginner2 weeksLinux Fundamentals
Navigate the command line, manage files and permissions, and run processes. Most security tooling lives on Linux.
beginner2 weeksHow the Web Works
HTTP request/response cycle, cookies, sessions, and the browser security model, which is the attack surface for most web vulnerabilities.
Phase 2:Practical Security Skills
beginner4 weeksEthical Hacking Basics
Reconnaissance, scanning, exploitation, and privilege escalation. TryHackMe guided paths walk you through each stage.
intermediate3 weeksWeb Application Security
OWASP Top 10: SQL injection, XSS, IDOR, broken auth. These vulnerabilities appear in most real penetration tests.
intermediate2 weeksCryptography Fundamentals
Symmetric/asymmetric encryption, hashing, TLS/SSL, and certificate chains. Essential for understanding almost every security protocol.
intermediate4 weeksCTF Challenges
Capture the Flag competitions build problem-solving skills and are a direct signal employers look for. Start on TryHackMe, graduate to HackTheBox.
Phase 3:Certifications
beginner2 weeksMicrosoft SC-900
Free Microsoft cert covering cloud security, compliance, and identity fundamentals. A quick win with a real credential.
intermediate6 weeksCompTIA Security+
The most widely required entry-level security certification. Covers risk management, cryptography, threat intelligence, and incident response.
Next steps
Keep exploring
Languages in this roadmap
Other goals