Cybersecurity Engineering Bootcamp Certificate

Checkpoint 1: Map assets, identities, data flows, trust boundaries and likely abuse cases; rank risks by likelihood/impact and define measurable security requirements.
Checkpoint 2: Implement strong authentication and authorization with least privilege, secure secrets and one MFA/passkey or equivalent higher-assurance path.
Checkpoint 3: Protect sensitive data in transit and at rest; document keys/secrets, backups, retention and privacy tradeoffs with verifiable configuration.
Checkpoint 4: Harden host/network exposure: patching, services/ports, firewall or security-group rules, SSH/admin path and logging; verify the reduced attack surface.
Checkpoint 5: Test and fix representative OWASP 2025 risks such as broken access control, misconfiguration, injection, auth failure or supply-chain weakness.
Checkpoint 6: Centralize useful security telemetry, define detections, simulate a compromise, triage scope, contain it and produce an incident timeline/postmortem.

Day 1: Choose the service and data; create architecture/data-flow diagrams, threat model, security requirements, risk register and explicit non-goals.
Day 2: Implement identity, authorization, secret management and least privilege; test failed, excessive and unauthorized access paths.
Day 3: Add encryption/TLS and data-at-rest protections; test backup/recovery and document privacy, retention and key-management choices.
Day 4: Harden system/network configuration and test exposure; document ports, dependencies, update strategy and one attack-surface reduction.
Day 5: Run authorized application-security tests mapped to OWASP Top 10:2025; remediate findings and add automated dependency/code/security checks.
Day 6: Instrument logs/detections; inject a simulated credential, web or lateral-movement incident; investigate, contain, recover and preserve evidence.
Day 7: Publish repo/lab notes, threat model, control evidence, test report, detection queries/screenshots, incident timeline, runbook and residual-risk memo.