Cybersecurity

Technical

Skills

SK IL L

INVENT O RY

Directory

attack

paths

and

hardening

(

Kerberoasting

DCSync

Tier

model

)

Role

based

and

attribute

based

access

control

(

RBAC

ABAC

)

Privileged

access

management

—

CyberArk

Delinea

BeyondTrust

Just

time

and

just

enough

access

provisioning

Identity

governance

and

administration

—

SailPoint

Saviynt

Joiner

–

mover

–

leaver

lifecycle

automation

Secrets

management

—

HashiCorp

Vault

AWS

Secrets

Manager

SOPS

Certificate

and

machine

identity

lifecycle

management

Customer

identity

and

access

management

(

CIAM

)

Zero

standing

privilege

session

brokering

and

session

recording

Access

review

entitlement

certification

and

least

privilege

remediation

AWS

security

—

IAM

Organizations

GuardDuty

Security

Hub

Macie

KMS

Azure

security

—

Entra

Defender

for

Cloud

Key

Vault

Sentinel

Google

Cloud

security

—

Cloud

IAM

SCC

Cloud

KMS

VPC

Service

Controls

Cloud

security

posture

management

(

CSPM

)

and

workload

protection

(

CWPP

)

Cloud

infrastructure

entitlement

management

(

CIEM

)

Shared

responsibility

model

and

landing

zone

design

Infrastructure

code

security

—

Terraform

CloudFormation

Pulumi

scanning

Container

security

—

image

scanning

runtime

detection

admission

control

Kubernetes

security

—

RBAC

Pod

Security

Admission

network

policies

CIS

benchmark

Serverless

and

API

gateway

security

controls

Cross

account

roles

permission

boundaries

and

federation

design

Cloud

logging

audit

trails

and

multi

account

log

aggregation

Cloud

incident

response

and

forensic

acquisition

ephemeral

environments

SaaS

security

posture

management

(

SSPM

)

and

third

party

app

governance

Hybrid

and

multi

cloud

policy

consistency

2 / 6

Application

Security

DevSecOps

Endpoint

Infrastructure

Security

Secure

code

review

—

Java

Python

JavaScript

TypeScript

SAST

DAST

IAST

and

SCA

tooling

integration

Threat

modelling

inside

agile

delivery

Web

exploitation

and

remediation

—

SQLi

XSS

SSRF

IDOR

deserialization

API

security

testing

—

REST

GraphQL

gRPC

OWASP

API

Top

Authentication

session

management

and

authorisation

flaw

analysis

Mobile

app

security

—

OWASP

MASVS

MASTG

iOS

and

Android

hardening

pipeline

security

and

build

integrity

(

SLSA

provenance

artefact

signing

)

Software

supply

chain

security

—

SBOM

generation

(

CycloneDX

SPDX

)

Secrets

detection

repositories

—

gitleaks

TruffleHog

WAF

rule

tuning

and

virtual

patching

Bug

bounty

and

vulnerability

disclosure

programme

operations

Vulnerability

management

lifecycle

and

CVSS

EPSS

prioritisation

Secure

design

patterns

and

abuse

case

development

Penetration

test

report

triage

and

developer

enablement

EDR

XDR

deployment

and

detection

engineering

Host

hardening

CIS

Benchmarks

—

Windows

Linux

macOS

Windows

internals

—

registry

WMI

PowerShell

logging

Sysmon

WDAC

Linux

hardening

—

SELinux

AppArmor

sudo

policy

auditd

kernel

modules

macOS

security

—

MDM

TCC

notarisation

Endpoint

Security

framework

Patch

and

vulnerability

remediation

scale

—

SCCM

Intune

Ansible

Application

allowlisting

and

endpoint

isolation

controls

Disk

encryption

and

key

escrow

—

BitLocker

FileVault

LUKS

Server

and

database

hardening

—

MSSQL

PostgreSQL

Oracle

MySQL

Virtualisation

and

hypervisor

security

—

VMware

Hyper

KVM

ICS

security

—

Purdue

model

Modbus

IEC

62443

IoT

and

embedded

device

hardening

Backup

integrity

immutable

storage

and

ransomware

recovery

testing

Mobile

device

management

and

BYOD

policy

enforcement

Removable

media

and

peripheral

control

3 / 6

Threat

Detection

Security

Monitoring

Offensive

Security

Threat

Intelligence

Incident

Response

Digital

Forensics

Cryptography

Data

Protection

SIEM

engineering

and

content

development

—

Splunk

SPL

Sentinel

KQL

Elastic

Detection

code

and

rule

lifecycle

management

—

Sigma

YARA

Log

source

onboarding

parsing

normalisation

and

data

model

design

Use

case

development

mapped

MITRE

ATT

coverage

Alert

tuning

false

positive

reduction

and

detection

gap

analysis

Threat

hunting

hypothesis

development

and

structured

hunts

Security

data

pipelines

—

Cribl

Fluent

Bit

Kafka

OpenTelemetry

SOAR

playbook

design

and

automation

Identity

and

cloud

telemetry

analysis

Network

detection

and

response

(

NDR

)

operations

User

and

entity

behaviour

analytics

(

UEBA

)

Deception

technology

and

honeytoken

deployment

Metrics

and

reporting

—

MTTD

MTTA

MTTR

detection

coverage

Purple

team

exercises

and

detection

validation

(

Atomic

Red

Team

Caldera

)

Penetration

testing

methodology

—

scoping

execution

reporting

Network

web

API

mobile

wireless

and

cloud

penetration

testing

Tooling

—

Nmap

Metasploit

Burp

Suite

Pro

Cobalt

Strike

BloodHound

Impacket

Adversary

emulation

and

red

team

operations

Social

engineering

and

physical

security

assessment

Exploit

development

fundamentals

—

buffer

overflows

ROP

heap

grooming

Reverse

engineering

—

Ghidra

IDA

Pro

dbg

Binary

Ninja

Fuzzing

and

vulnerability

research

—

AFL

++,

libFuzzer

Open

source

intelligence

(

OSINT

)

collection

and

analysis

Dark

web

and

credential

leak

monitoring

Threat

intelligence

platforms

—

MISP

OpenCTI

Recorded

Future

IOC

and

TTP

curation

enrichment

and

dissemination

(

STIX

TAXII

)

Attribution

and

campaign

tracking

Coordinated

vulnerability

disclosure

Lab

based

skill

maintenance

and

CTF

practice

lifecycle

—

preparation

detection

containment

eradication

recovery

lessons

learned

Tabletop

exercises

and

playbook

development

Host

forensics

—

memory

disk

and

artefact

analysis

(

Volatility

KAPE

Autopsy

)

Windows

forensic

artefacts

—

MFT

registry

prefetch

shimcache

event

logs

Linux

and

macOS

forensic

artefact

analysis

Network

forensics

and

full

packet

capture

analysis

Cloud

and

SaaS

incident

response

Malware

triage

and

dynamic

analysis

sandboxes

Static

malware

analysis

and

unpacking

Ransomware

response

negotiation

policy

and

recovery

Chain

custody

evidence

handling

and

forensic

documentation

Insider

threat

investigation

Legal

regulatory

and

breach

notification

coordination

Crisis

communication

and

executive

briefing

Post

incident

root

cause

analysis

and

control

remediation

Symmetric

and

asymmetric

encryption

—

AES

RSA

ECC

ChaCha

Hashing

and

integrity

—

SHA

-2/3,

HMAC

Argon

bcrypt

scrypt

Key

management

—

HSM

KMS

envelope

encryption

rotation

policy

Public

key

infrastructure

—

operations

certificate

lifecycle

OCSP

CRL

TLS

configuration

and

cipher

suite

hardening

Digital

signatures

and

code

signing

Post

quantum

cryptography

readiness

and

crypto

agility

Data

classification

discovery

and

tagging

Data

loss

prevention

(

DLP

)

policy

design

and

tuning

Tokenisation

masking

and

pseudonymisation

Database

encryption

rest

and

transit

Secure

deletion

and

cryptographic

erasure

Privacy

enhancing

technologies

—

differential

privacy

homomorphic

encryption

basics

Random

number

generation

and

entropy

source

validation

4 / 6

Security

Automation

Scripting

Governance

Risk

Compliance

T O O L ING

REFERENCE

DO MAIN

Representative

platforms

DO MAIN

REPRES ENTAT IVE

T O O LS

SIEM

Analytics

Splunk

Enterprise

Security

Microsoft

Sentinel

Elastic

Security

IBM

QRadar

Endpoint

Detection

Response

CrowdStrike

Falcon

SentinelOne

Microsoft

Defender

for

Endpoint

Carbon

Black

Vulnerability

Management

Tenable

Nessus

Qualys

VMDR

Rapid

InsightVM

Wiz

Nucleus

Security

Offensive

Tooling

Burp

Suite

Pro

Metasploit

Pro

Cobalt

Strike

Nmap

BloodHound

Impacket

Cloud

Security

Posture

Wiz

Prisma

Cloud

Orca

Security

AWS

Security

Hub

Microsoft

Defender

for

Cloud

Identity

Access

Okta

Microsoft

Entra

CyberArk

SailPoint

HashiCorp

Vault

Network

Security

Palo

Alto

Networks

Fortinet

FortiGate

Cisco

Firepower

Zeek

Suricata

Forensics

Volatility

Magnet

AXIOM

KAPE

Velociraptor

EnCase

Cellebrite

SOAR

Automation

Cortex

XSOAR

Splunk

SOAR

Tines

Torq

Shuffle

Container

Crypto

Trivy

Falco

Aqua

Security

cert

manager

Thales

Luna

HSM

AWS

KMS

CERT IFICAT IO N

AL IG NMENT

Optional

pathway

CAREER

S TAG E

CO MMO NLY

PAIRED

CERT IFICAT IO NS

Entry

foundation

CompTIA

Security

ISC

Certified

Cybersecurity

(

)

Python

for

security

tooling

parsing

and

automation

PowerShell

for

Windows

administration

and

detection

Bash

and

shell

scripting

for

Linux

operations

and

Rust

for

performant

security

utilities

Regular

expressions

for

log

parsing

and

IOC

matching

REST

API

integration

and

webhook

automation

Infrastructure

code

—

Terraform

Ansible

Chef

Puppet

Configuration

management

and

drift

detection

Git

workflows

code

review

and

version

control

hygiene

pipeline

integration

for

security

gates

SQL

and

data

querying

for

security

analytics

Containerisation

security

tooling

—

Docker

Kubernetes

jobs

Workflow

orchestration

—

Airflow

Tines

Testing

and

validation

automation

—

unit

tests

dry

runs

Runbook

and

technical

documentation

authoring

Regulatory

frameworks

—

GDPR

CCPA

CPRA

HIPAA

PCI

DSS

4.0,

SOX

ITGC

SOC

Trust

Services

Criteria

evidence

collection

ISO

27001

ISMS

implementation

and

internal

audit

NIST

RMF

and

FedRAMP

alignment

Risk

maintenance

and

treatment

planning

Third

party

and

vendor

risk

assessment

Security

policy

standard

and

procedure

authoring

Control

testing

evidence

management

and

audit

readiness

Data

retention

and

records

management

Privacy

impact

assessments

and

DPIAs

Security

metrics

KRIs

and

board

level

reporting

Asset

inventory

and

CMDB

hygiene

Exception

management

and

risk

acceptance

workflows

Awareness

training

delivery

and

culture

measurement

Contract

security

review

and

data

processing

agreements

5 / 6

CAREER

S TAG E

CO MMO NLY

PAIRED

CERT IFICAT IO NS

Security

operations

CompTIA

CySA

GIAC

GSEC

GIAC

GCIA

GIAC

GCIH

Offensive

security

OSCP

OSEP

OSWE

CompTIA

PenTest

GIAC

GPEN

Cloud

security

AWS

Certified

Security

–

Specialty

Azure

Security

Engineer

(

-500),

CCSP

Senior

leadership

CISSP

CISM

CRISC

GIAC

GSLC

Specialist

CKS

(

Kubernetes

GIAC

GICSP

(

ICS

GIAC

GCFA

(

forensics

GRID

(

reverse

engineering

)

6 / 6

Cybersecurity Technical Skills

Prompt to Clone This Cybersecurity Technical Skills

Apply this example's core structure, strategic pacing, and structural hierarchy directly to your own topic.

What are you generating today?

Computer Networking Technical Skills

Cloud Security Technical Skills

Incident Response Technical Skills

Security Analysis Technical Skills

Mechanical Engineering Technical Skills

Civil Engineering Technical Skills

Electrical Engineering Technical Skills

Electronics Engineering Technical Skills

Chemical Engineering Technical Skills

Industrial Engineering Technical Skills

Manufacturing Technical Skills

Automotive Engineering Technical Skills

Robotics Technical Skills

Automation Technical Skills

Similar Examples