Professional Qualifying Program in Advanced Applied Cybersecurity
Advance from cybersecurity foundations to enterprise defence, ethical assessment and industry-ready security operations.
- Length
- 12 months
- Planned hours
- 720 hours
- Level
- Advanced professional
- Delivery
- Blended: instructor-led theory, supervised labs, workshops and capstone. English, with Arabic support where authorised.
- Next start
- To be confirmed
Overview
Learners progress through structured instruction and supervised laboratories before completing an integrated industry-style capstone, and deliver a professional portfolio demonstrating advanced applied competence.
The Professional Qualifying Programme in Advanced Applied Cybersecurity is a 12-month, practice-intensive pathway for learners seeking broad, job-relevant capability across cybersecurity operations, security engineering, ethical assessment, cloud security, incident response and governance. It is a rigorous progression from secure computing foundations to advanced defensive operations, authorised security assessment and integrated industry practice, designed as the advanced 12-month pathway above the 6-month ACSP foundation programme.
The programme supports preparation for roles such as SOC Analyst, Cybersecurity Analyst, Vulnerability Management Analyst, Junior Security Engineer, Incident Response Associate, Cloud Security Associate, Security Operations Specialist and supervised Penetration Testing Associate. Employment depends on the learner’s experience, portfolio, interview performance and employer requirements.
Who should join, and what to bring.
Who should join
- Graduates pursuing cybersecurity careers.
- IT, networking, cloud, software or systems professionals moving into security roles.
- Learners who completed a foundational cybersecurity programme and want deeper applied competence.
- Career changers who meet the entry assessment and can commit to sustained laboratory practice.
Recommended before you start
- Minimum secondary qualification or equivalent, subject to provider and regulator requirements.
- Working computer literacy and basic understanding of operating systems and networking.
- Recommended: prior foundation training, equivalent work exposure or successful bridge assessment.
- Minimum learner age, identity documents and other admission conditions follow applicable rules.
- A suitable laptop and reliable access to programme platforms are required.
By the end, you will be able to:
- Design, secure and assess enterprise networks, endpoints, identity services and cloud workloads.
- Operate an isolated cyber range and perform only authorised security validation within written scope.
- Automate defensive and assessment tasks using Python and PowerShell with secure data handling.
- Perform vulnerability assessment, remediation validation and supervised ethical penetration testing.
- Build SOC monitoring workflows, develop detection logic and conduct evidence-led threat hunting.
- Coordinate incident response, preserve digital evidence and produce defensible technical findings.
- Apply security engineering principles to applications, APIs, DevSecOps, IoT and software supply chains.
- Translate technical risk into governance, audit evidence, executive communication and improvement plans.
- Deliver an integrated capstone and a professional portfolio demonstrating advanced applied competence.
The programme emphasises lawful, ethical and authorised practice. Security testing is limited to approved training environments and written scopes.
Twelve months, twenty-four modules, 720 guided hours.
Secure Computing Foundations and Professional Ethics
- Security principles
- Threat landscape
- Authorised practice
- Lab safety
- Evidence discipline
Enterprise Networking and Protocol Analysis
- TCP/IP
- Routing
- Switching
- DNS
- VPNs
- Packet analysis
- Secure network design
Linux Security Engineering
- Hardening
- Services
- Permissions
- Logging
- Audit
- Shell administration
Windows, Active Directory and Identity Security
- AD architecture
- Group Policy
- Authentication
- Privilege pathways
- Defensive configuration
Python and PowerShell for Security Automation
- Parsing
- APIs
- Automation
- Data handling
- Defensive scripting and secure coding
Virtualisation, Containers and Cyber Range Operations
- Isolated labs
- VM networks
- Containers
- Snapshots
- Safe scenario management
Vulnerability Management and Remediation Engineering
- Asset discovery
- Scanning
- Validation
- Prioritisation
- Patching and retesting
Web Application Security Engineering
- OWASP risks
- Secure design
- Testing workflow
- Mitigation and verification
API, Mobile and Modern Application Security
- API authorisation
- Tokens
- Mobile architecture
- Testing and secure development practices
Network Security Assessment and Ethical Penetration Testing
- Scoped reconnaissance
- Enumeration
- Exploitation validation
- Professional reporting
Wireless, IoT and Embedded Security
- Wireless controls
- IoT attack surface
- Firmware awareness
- Segmentation and secure deployment
SOC Operations and SIEM Administration
- Log pipelines
- Alert triage
- Dashboards
- Case handling and escalation
Detection Engineering and Threat Hunting
- Detection logic
- Telemetry mapping
- Hypothesis-led hunts
- Tuning and validation
Threat Intelligence and Adversary Behaviour
- Intelligence lifecycle
- Indicators
- TTP mapping
- Campaign analysis and briefings
Incident Response and Crisis Coordination
- Preparation
- Containment
- Eradication
- Recovery
- Communications and lessons learned
Digital Forensics and Malware Analysis Fundamentals
- Evidence acquisition
- Timeline analysis
- Host and network artefacts
- Safe static analysis
Cloud Security Engineering
- Shared responsibility
- Identity
- Workload
- Network
- Storage
- Logging and posture management
DevSecOps and Software Supply-Chain Security
- CI/CD controls
- Secrets
- SAST/DAST
- Dependencies
- Containers and release assurance
Data Protection, Cryptography and Resilience
- Encryption
- Key management
- Backup
- Recovery
- Availability and privacy-by-design
Governance, Risk, Compliance and Saudi Cybersecurity Context
- Risk treatment
- Policies
- Audit evidence
- Awareness of applicable Saudi controls
Security Architecture and Zero Trust
- Architecture principles
- Segmentation
- Identity-centric control
- Design review and roadmaps
Purple-Team Operations and Control Validation
- Collaborative adversary simulation
- Detection validation
- Remediation and after-action review
Advanced Integrated Industry Capstone
- Team-based authorised assessment
- Defence improvement
- Executive reporting and demonstration
Professional Portfolio, Career Readiness and Final Competency Assessment
- Portfolio
- Technical interview
- Presentation
- Final practical and development plan
What you will work with, and what you will make.
Tools
- Python
- PowerShell
- Linux
- Windows
- Active Directory
The final set of tools is confirmed for each batch.
Example projects
- Scripts
- Hardening baselines
- Detection rules
- Reports
- Architecture diagrams
The capstone: what you hand in
- Team-based authorised assessment, defence improvement, executive reporting and demonstration.
- Industry-style capstone with technical demonstration and executive presentation.
- Professional portfolio, technical interview, presentation, final practical and development plan.
Assessed on the work you produce.
- Knowledge checks and assignments15%
- Laboratory performance and evidence35%
- Scenario assessments and reporting20%
- Advanced capstone20%
- Final competency assessment and portfolio10%
How it is taught
- Instructor-led concept briefings and demonstrations.
- Supervised cyber-range laboratories with documented authorisation.
- Case studies, design reviews, threat-hunting sprints and incident simulations.
- Industry-style capstone with technical demonstration and executive presentation.
Provider-issued completion certificate, subject to applicable approval and licensing conditions. Completion indicates achievement of TechnoBerg Saudi programme requirements; it does not itself confer a government licence, job guarantee or third-party professional certification. All safety-, ethics- and authorisation-critical outcomes are mandatory, and the capstone, final practical and required portfolio must be completed. Delivery, hours, award wording and start dates remain subject to applicable approvals and provider scheduling.
Certificate wording and issuing details will follow the final TVTC approval. No accreditation is claimed before that approval.
Start dates and fees, on request.
Next start
To be announced
Enquire now and we will tell you the next start date and schedule.
Fees
Request fee details
We send the fee, and any options for paying, with your enquiry reply.
From learning to a technology career.
Strong performance in labs, projects and capstones can lead to further opportunities with TechnoBerg. They are merit-based, subject to availability, legal eligibility and formal selection, and never guaranteed. See the talent pathway