Engineers and analysts who can test and defend systems (for example after the Intermediate programme) and want to lead security work: architecture, investigation, programmes and governance.
Expert level
Cybersecurity
Security Engineering, Investigation and Programme Leadership
Think like the owner of a security programme: model threats at scale with ATT&CK, design identity and architecture that resist attack, investigate incidents with forensic evidence, run vulnerability and testing programmes, and govern risk, finishing with a security programme for an organisation reviewed by the NIBVEDA team.
- 42hours of work
- 19parts
- Reviewedcapstone
- Lifetimeaccess
- Threat modelling
- Security architecture
- Digital forensics
- Incident response
- Identity security
- Vulnerability management
- Fuzzing
- Governance and risk
At a glance
Solid Linux, networking and web security skills, practice with a SIEM or log analysis and with cloud basics (the Intermediate programme or equivalent). A virtual machine host, Docker and a code editor. All practice is on systems you own or lab images built for the purpose.
Pass the quizzes and labs, then submit a capstone project. The NIBVEDA team reviews it and either accepts it or sends it back with comments you can act on.
What you will be able to do
- 01Build threat models at scale and map defences and detections to MITRE ATT&CK
- 02Design secure architectures: segmentation, zero trust and strong identity
- 03Investigate incidents using disk, memory and log evidence and write a defensible timeline
- 04Analyse unknown files safely with static techniques in an isolated lab
- 05Find and fix flaws in OAuth and single sign-on flows
- 06Run vulnerability management, application security testing and fuzzing
- 07Write risk registers, policies and a compliance-ready security programme
Curriculum 42 hours in 19 parts
Select a kind to highlight its parts.
Stage 1Investigate an incident from artefacts7 parts · 11 h
- 1Threat modelling at scale with attack trees and ATT&CKLesson · Short, focused reading with questions to check yourself.1 hFree
- 2Secure architecture: segmentation, zero trust and resilienceLesson · Short, focused reading with questions to check yourself.1 h
- 3Attack trees and ATT&CK coverage for a scenarioWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 4Digital forensics and safe malware analysis basicsLesson · Short, focused reading with questions to check yourself.1 h
- 5A forensic timeline from disk, memory and logsWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 6Check yourself: threat modelling and forensicsQuiz · Twelve questions, marked at once, with the reason behind each answer.1 h
- 7Investigate an incident from artefactsLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
Stage 2A security review of an OAuth application6 parts · 10 h
- 8Identity security: OAuth, OpenID Connect and SSOLesson · Short, focused reading with questions to check yourself.1 h
- 9Attack and fix an OAuth loginWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 10Vulnerability management and the secure development lifecycleLesson · Short, focused reading with questions to check yourself.1 h
- 11Build a vulnerability management workflowWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 12Check yourself: identity and vulnerability programmesQuiz · Twelve questions, marked at once, with the reason behind each answer.1 h
- 13A security review of an OAuth applicationLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
Stage 3Fuzz a parser and fix what breaks4 parts · 8 h
- 14SAST, DAST and fuzzingWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 15Risk registers, policies and complianceWorkshop · Follow along and build, with the steps and the traps written out.2 h
- 16Check yourself: testing and governanceQuiz · Twelve questions, marked at once, with the reason behind each answer.1 h
- 17Fuzz a parser and fix what breaksLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
Stage 4Design and run a tabletop incident exercise1 part · 3 h
- 18Design and run a tabletop incident exerciseLab · Hands-on work. Many labs are checked automatically against what must exist.3 h
FinishCapstone project1 part · 10 h
- 19A security programme for an organisationCapstone · A full project for your portfolio.10 h
What you take away
An internship certificate with your skills on it.
Made for you automatically when you finish the last part, it names the internship programme, the level and the 42 hours, lists what you showed, and carries a number and a QR code. Anyone can check it on the NIBVEDA verification page, and it shows as withdrawn there if it is ever revoked.
- Proof you completed all 42 hours of this internship programme
- An Internship badge for your profile, CV or portfolio
- Not a job, a stipend or an academic degree, and it says so
Keep building.
3 programmes in this track, from beginner to expert. Buy the learning path and save 15%.
Move from knowing the vulnerabilities to working with them: map the attack surface of a practice target, exploit and fix deeper web flaws, use cryptography correctly, harden systems, and write detections that catch real attacks, finishing with a security assessment reviewed by the NIBVEDA team.
- Reconnaissance
- Web penetration testing
- Cryptography in practice
Learn the core ideas of security, find and fix the most common web vulnerabilities in a safe practice application, and write a real security report.
- Threat modelling
- OWASP Top 10
- Authentication
See all 3 programmes in Cybersecurity Take the placement test
Quick answers.
The policies have the full detail.
Is this a real internship?
It is a virtual internship programme: a structured, self-paced course built around a real project, with checked assessments and a certificate. It is not employment, it does not carry a stipend and it is not an academic or AICTE-approved qualification. What it gives you is verified, project-based evidence of skills.
How does self-paced work?
You start when you like and move at your own speed. Each part unlocks when you finish the one before it. There are no live classes and no deadlines. Your access is shown on each programme page.
How is my work checked?
Quizzes are marked as soon as you submit them. Labs use a tick-list of tasks. Intermediate and Expert programmes finish with a capstone that the NIBVEDA team reviews and either accepts or sends back with comments.
Can I get a refund?
Please read the refund policy before you buy. It explains when a refund is possible.
Ready to start?
Rs. 1,178.82 including GST. Lifetime access. Read the first lesson free before you decide.