Role paths
One ordered plan per role: the lessons in sequence, checkpoints that gate each stage, and a level-4 capstone — original public work a stranger can verify. Pick the job, follow the plan.
Published 2026-10-09 · generated from the lesson data
The eight paths
The SOC analyst path
You watch the alerts, work out which ones matter, and investigate the ones that do.
The Security analyst path
You work out what an attacker did, or is doing, and write it up so someone can act.
The Penetration tester path
You are paid to break in — with permission and in writing — and then explain exactly how.
The Application security engineer path
You stop vulnerabilities from being written rather than finding them after they ship.
The DFIR analyst path
You work out what happened after a breach, in enough detail that it stands up later — your findings may end up in a legal process, and how you handle evidence can decide whether it is admissible.
The Cloud security engineer path
You make sure the cloud account nobody is watching is not the way in.
The IAM engineer path
You decide who can do what, and you make sure nobody quietly accumulates more than they need.
The GRC analyst path
You turn a security standard into things the organization actually does, and prove it did them.