security-study-plan - 完成实习计划，成为一名成功者

项目说明

!Security Study Plan

A Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, De, and so on with free/paid resources, tools, and concepts to excel.

It will cover but not limited to:

_Done_
1. Common Skills for Security Study Plan
2. AWS Security Study Plan
3. GCP Security Study Plan
4. Web Penetration Testing Study Plan
5. Application Security Testing Plan
6. API Security Study Plan
7. Threat Modeling Study Plan
8. GRC Study Plan
9. Azure Security Study Plan
10. De Study Plan
11. Docker Security Study Plan
12. Kubernetes Security Study Plan
13. Network Security Study Plan
14. Cryptography Study Plan
15. Software Supply Chain Security Study Plan
16. Secure Code Review Study Plan
17. Secure Software De Lifecycle Study Plan
18. Security Architecture Study Plan
19. GenAI Security Study Plan
20. Product Security Study Plan

_Additional Study Plans_
1. Identity and Access Management (IAM) Security Study Plan
2. Blue Team, Detection & Response Study Plan
3. Mobile Application Security Study Plan
4. Reverse Engineering & Malware Analysis Study Plan
5. OSINT & Social Engineering Study Plan

I created this repo after seeing coding-inter, which echoes my journey to getting into the full-time security role.

> I created this study plan to help people looking for guidance and help to plan and prepare for a job-specific skill set.
If you study 3-4 hours per day for the next 6 months, you can get high-paying jobs, provided you do lots of hands-on work, go through each necessary topic/concept more than thrice, and come from a tech background. This worked in my case.

> [!TIP]
> Please note that some topics would be common for any listed security roles. Check common-skills-study-plan

> [!NOTE]
> I will add study references from the beginners' perspective and co topics.
> All the best for your security journey!

What is it?

This is to give a study plan to prepare for a specific role. It is of course multiple months of hard work and dedication which need a proper roadmap.
Hence, this repo would be a point 源码 for all your study plans.

Prerequisites:

Ready to devote time daily

from a tech background, it can take a little more time but still possible to make a career in cybersecurity.

Never give up attitude

Hacker Mindset

Ready to explore on your own

Please note that there are many job titles under each of these study plans, but I am keeping a generic study plan so that you can tick out whichever you already know. This way you would know how much you know and how much you still need to learn to grow up the ladder.

Check out the YouTube video on "Cybersecurity Roadmap for Beginners" and "How to make a career in Cybersecurity".
Then, you will have a better idea of why to use it and how to use this study plan for your preparation.

Why use it?

If you want to work as a security engineer, these are the skills/topics/concepts you need to know and learn thoroughly..

When I started learning security concepts, e was new to me, and I wasted lots of time on Google searches, YouTube , articles, etc. to figure out what was required and what was not.
I am still learning as cybersecurity is e, so we must. My target is to keep this repo up to date, of course, with the help of excellent learners like you.

It takes time to be confident in some skills, treat it as a long plan. It may take months or sometimes a year too, but keep yourself motivated and don't stop learning.
However, If you are familiar with a lot of topics already, it will take less time for you.

How to use it?

E below is like an outline, and you can tick out the items that you ha covered or know in order from top to bottom.

I'm using GitHub's special markdown flavor, including task lists to track progress.
As a Cybersecurity professional, I would recommend you to learn git and clone this repo for your learning purposes.

Update your resume

Before updating or creating a resume for a job, please check:
1. What job title are you trying for?
2. Do you fall in that experience range?
3. Check what skills it is looking for.
4. Check for job location or is it remote(work from home/anywhere)?
5. A free and open-源码 resume builder: rxresu.me
6. ResumeAI — AI resume builder + free ATS checker (3/day anonymous, 10/day free account); State of ATS 2026 (738 employers, 704 portal-; Workday 37.9%)

Prepare your resume based on the abo and your skill sets. Could you try to be honest here?
See if you can finish your resume in 1-2 pages. Check the 1-page resume below links:
1. One page resume template from zety.com
2. Easy Resume
3. Security Resume sample from qwikresume.com
4. How To Write a Security Engineer Resume (With Example)
5. Network Security Engineer Sample
6. Cloud Security Engineer Resume
7. AWS Security Engineer Resume
8. Lead De Resume Example
9. Sr. De Engineer Resume Example
10. Penetration Tester Consultant Resume Sample

Finding the right job

You might see hundreds of job openings, some of which may be from your dream company. But once you look closely, they don't match your skills. The job title was a little misleading and more of a generic description. Security researchers or security analysts are just a few examples.
So, finetune and narrow down the job search with the below websites but not limited to:
1. Which job title you are targeting?
2. What skills do you have vs what skills JD requires?
3. Are years of experience (range) matching?

Now search or subscribe to the job portal below:
1. Linkedin. Yes, nowadays, the job alert setting does a better job in finding the right job for you.
2. Naukri.com (Mostly in Asian countries)
3. indeed.com
4. monster.com
5. instahyre.com
6. cutshort.io
7. Null Jobs Community
8. Cybersecurity Jobs
9. Interactive way to find jobs, skills, salary, etc.

Interview Preparation

You can start preparing for the job interview once you ha knowledge according to the checklist for the given role(s). There are a few common security questions that you should have a look at:
1. All possible security interview questions at one place
2. Cybersecurity Interview Questions and Answers - Youtube
3. Cybersecurity Questions and Answers by Springboard
4. Cybersecurity Questions and Answers form indeed
5. 100+ Q&A for Cybersecurity domain from guru99

Common Interview Questions

* How do you keep updated yourself in the security domain?
* What would you do typically on the first day of your job?
* What personal achie are you most proud of?
* What was your last tough that you found?
* Why should we hire you?
* What did you learn in the last six months, and how was it relevant to your career/project?
* Where do you see after fi of working with this organization?

You can check some common answers from here

Let's contribute and grow this repo together

Want to contribute? Please fork the repo and send PR for review

项目信息

开发语言：未知

Star 数：5095

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, De and so on...展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。