Programme Overview
Cybersecurity Practitioner is the second stage of the Cybersecurity programme, and can be taken on its own by learners who already have foundational knowledge (entry via placement assessment). Over four months you move from Blue Team SOC operations and SIEM deployment through Red Team ethical hacking and penetration testing to governance, risk and compliance, finishing with a capstone where you perform a complete VAPT assessment and deliver both a technical report and an executive presentation.
Duration
4 months
Level
Intermediate to professional
Fee
KES 55,000
What you’ll be able to do
- Operate a SIEM and write detection rules
- Analyse security alerts, logs and network traffic
- Perform incident response procedures
- Conduct vulnerability assessments and penetration tests
- Assess web, network and cloud security
- Produce professional security reports
- Develop cybersecurity policies aligned to ISO 27001 and CIS Controls
- Support DPIA, ROPA and Kenya Data Protection Act compliance
Curriculum
01
4 monthsCybersecurity Practitioner
Move from defensive SOC operations through offensive ethical hacking to governance and compliance, producing professional security deliverables throughout.
- SOC operations, SIEM deployment (Wazuh + Sysmon) and detection engineering
- Log analysis, network traffic analysis and incident response
- Vulnerability assessment, CVSS scoring and remediation
- Reconnaissance, OSINT and penetration testing methodologies
- Web application security, OWASP Top 10, Burp Suite, OWASP ZAP
- Network and wireless security testing
- Privilege escalation, post-exploitation and cloud VAPT
- ISO 27001 foundations and CIS Controls
- Kenya Data Protection Act, DPIAs, ROPA and cybersecurity policy
- Final VAPT capstone, technical report and executive presentation
Fees
One four-month stage
KES 55,000
Full fee structure