Cybersecurity Roadmap
Defend systems, find vulnerabilities, and think like an attacker. The path from security enthusiast to skilled professional.
Cybersecurity
✓
Networking
✓
Operating Systems
✓
Foundations
✓
Cryptography
✓
Reconnaissance
✓
Offensive
✓
Web Security
✓
Exploitation
✓
Blue Team
✓
Firewalls & WAF
✓
Defensive
✓
Compliance
✓
Malware Analysis
✓
Advanced
✓
Cloud Security
✓
Certifications
Keep learning
Text version of this roadmap
1. Foundations
- Networking: TCP/IP, DNS, subnets, firewalls
- Operating Systems: Linux security, Windows hardening
- Cryptography: Symmetric, asymmetric, hashing, TLS
2. Offensive
- Reconnaissance: Nmap, subdomain enum, OSINT
- Web Security: OWASP Top 10, XSS, SQLi, CSRF
- Exploitation: Metasploit, buffer overflows, privilege esc
3. Defensive
- Blue Team: SIEM, IDS/IPS, threat hunting
- Firewalls & WAF: iptables, nftables, Cloudflare WAF
- Compliance: SOC 2, ISO 27001, GDPR, HIPAA
4. Advanced
- Malware Analysis: Reverse engineering, sandboxing
- Cloud Security: AWS/Azure security, IAM policies
- Certifications: Security+, CEH, OSCP, CISSP