Cyber Security & Ethical Hacking (Job-Ready Program)
The Cyber Security & Ethical Hacking Program is designed to equip learners with the skills needed to protect systems, networks, and data from cyber threats.
- Home
- Cyber Security
Why Choose Firstborn Technologies?
Join our 9-month Cyber Security program and become job-ready with real projects, internship experience, and certification from Firstborn Technologies.
Industry-relevant curriculum
Hands-on practical training
Real-world projects
Job & freelance preparation
About this program
With cybercrime on the rise globally, organizations are actively seeking professionals who can identify vulnerabilities, secure systems, and respond to attacks. This program focuses on practical cybersecurity techniques, ethical hacking tools, and real-world simulations.
- Understand cybersecurity principles and threat landscapes
- Perform ethical hacking and penetration testing
- Secure networks, systems, and applications
- Identify and exploit vulnerabilities in a controlled environment
- Implement security best practices and policies
- Use industry-standard security tools
- Respond to and mitigate cyber threats
Cyber Security
1. CompTIA Security+ (SY0-701)
Target audience: Career changers, IT support staff moving into security, new hires Duration suggestion: 6–8 weeks
- General Security Concepts
- CIA triad, security controls (technical, managerial, operational, physical)
- Change management, cryptographic basics (PKI, encryption, hashing)
- Threats, Vulnerabilities, and Mitigations
- Threat actors and motivations
- Attack surfaces, vulnerability types (misconfigurations, zero-days, supply chain)
- Malware types, social engineering, indicators of compromise
- Security Architecture
- Network architecture models (zero trust, SASE, segmentation)
- Cloud, virtualization, and IoT security considerations
- Data protection strategies (classification, DLP, encryption at rest/in transit)
- Security Operations
- Hardening techniques, secure baselines
- Identity and access management (IAM), authentication methods, MFA
- Incident response basics, digital forensics fundamentals
- Vulnerability management, SIEM/log monitoring basics
- Security Program Management and Oversight
- Governance, risk management, compliance frameworks (NIST, ISO 27001, GDPR)
- Third-party risk, audits, security awareness training
Lab suggestions: basic firewall/ACL configuration, phishing simulation exercise, setting up MFA, log review in a SIEM sandbox.
2. (ISC)² Certified in Cybersecurity (CC)
Target audience: Absolute beginners, non-technical staff transitioning into cyber
Duration suggestion: 3–4 weeks
- Security Principles (CIA triad, risk, governance basics)
- Business Continuity, Disaster Recovery, and Incident Response Concepts
- Access Control Concepts
- Network Security
- Security Operations
3. CompTIA CySA+ (Cybersecurity Analyst, CS0-003)
Target audience: SOC analysts, security operations staff
Duration suggestion: 6–8 weeks
- Security Operations
- Threat intelligence, threat hunting
- Network and endpoint security monitoring, malware analysis
- Vulnerability Management
- Vulnerability scanning, scoring (CVSS), prioritization
- Remediation and reporting
- Incident Response and Management
- Attack frameworks (MITRE ATT&CK, Cyber Kill Chain)
- Incident response process, forensic techniques
- Reporting and Communication
- Stakeholder communication, metrics, compliance reporting
CompTIA PenTest+ (PT0-002/PT0-003)
Target audience: Aspiring penetration testers
Duration suggestion: 8 weeks
- Planning and Scoping (engagement rules, legal considerations)
- Information Gathering and Vulnerability Scanning
- Attacks and Exploits (network, application, wireless, social engineering)
- Reporting and Communication
- Tools and Code Analysis (scripting basics for automation: Python, Bash, PowerShell)
Lab suggestions: Kali Linux setup, Nmap scanning, Metasploit basics, web app testing with Burp Suite.
5. Certified Ethical Hacker (CEH)
Target audience: Offensive security track entry Duration suggestion: 8–10 weeks
- Introduction to Ethical Hacking & Footprinting/Reconnaissance
- Scanning Networks & Enumeration
- Vulnerability Analysis
- System Hacking & Malware Threats
- Sniffing, Social Engineering, Denial-of-Service
- Session Hijacking & Evading IDS/Firewalls/Honeypots
- Hacking Web Servers & Web Applications
- SQL Injection & Wireless Network Hacking
- Hacking Mobile Platforms & IoT/OT Hacking
- Cloud Computing & Cryptography
6. SSCP (Systems Security Certified Practitioner)
Target audience: Hands-on security administrators/operators
Duration suggestion: 6 weeks
- Security Operations and Administration
- Access Controls
- Risk Identification, Monitoring, and Analysis
- Incident Response and Recovery
- Cryptography
- Network and Communications Security
- Systems and Application Security
7. CISSP (Certified Information Systems Security Professional)
Target audience: Senior security professionals, architects, managers (5+ yrs experience typically expected) Duration suggestion: 10–12 weeks
8 Domains (CBK):
- Security and Risk Management
- Asset Security
- Security Architecture and Engineering
- Communication and Network Security
- Identity and Access Management (IAM)
- Security Assessment and Testing
- Security Operations
- Software Development Security
9. CISA (Certified Information Systems Auditor)
Target audience: IT auditors, compliance professionals Duration suggestion: 8 weeks
- Information Systems Auditing Process
- Governance and Management of IT
- Information Systems Acquisition, Development, and Implementation
- Information Systems Operations and Business Resilience
- Protection of Information Assets
10. OSCP (Offensive Security Certified Professional)
Target audience: Advanced/professional penetration testers Duration suggestion: 12+ weeks (self-paced lab-heavy)
- Penetration Testing Methodology and Report Writing
- Information Gathering and OSINT
- Vulnerability Scanning and Exploitation Basics
- Client-Side Attacks and Web Application Attacks
- Buffer Overflows (Windows/Linux)
- Privilege Escalation (Windows/Linux)
- Active Directory Attacks
- Antivirus Evasion, Port Redirection, and Tunneling
- Full Practical Exam: 24-hour hands-on penetration test + report
