Cybersecurity Professional

ZEF's Cybersecurity Professional training is a practical programme of 4 months covering networking, Linux, identity and access, SOC monitoring, incident response and web security. You practise in lab environments and finish with a security investigation report for your portfolio.

Benchmarked against the CompTIA Security+ (SY0-701) exam domains, the ISC2 Certified in Cybersecurity (CC) outline and NAVTTC’s practical, lab-based approach.

• 8 modules
• 8 hands-on tasks

1. 1Security Foundations4 topics

   Topics

   • CIA triad and security principles
   • Threat actors and attack types
   • Security controls and frameworks
   • Careers in cybersecurity

   You Will Be Able To

   • Explain core security concepts and common attacks
   • Classify controls as preventive, detective or corrective

   Hands-on

   • Map threats and controls for a small office
2. 2Networking for Security4 topics

   Topics

   • TCP/IP, ports and protocols
   • Subnetting and network devices
   • Firewalls, VPNs and segmentation
   • Packet capture with Wireshark

   You Will Be Able To

   • Read network traffic and spot suspicious activity
   • Design a basic segmented network

   Hands-on

   • Capture and analyse traffic to find a simulated attack
3. 3Linux and Windows Security4 topics

   Topics

   • Linux command line and permissions
   • Windows security settings and Active Directory basics
   • Hardening and patching
   • Logs on both systems

   You Will Be Able To

   • Harden a Linux and a Windows host
   • Find security events in system logs

   Hands-on

   • Harden a server to a checklist and verify it
4. 4Identity and Access Management4 topics

   Topics

   • Authentication, MFA and passwords
   • Least privilege and roles
   • Directory services
   • Privileged access

   You Will Be Able To

   • Set up secure accounts, groups and MFA

   Hands-on

   • Configure role-based access for a sample company
5. 5Security Operations and SIEM4 topics

   Topics

   • SOC roles and workflow
   • Log collection and SIEM
   • Alerts, triage and false positives
   • Threat intelligence

   You Will Be Able To

   • Triage SIEM alerts and escalate correctly

   Hands-on

   • Investigate alerts in a SIEM lab (e.g. Wazuh or Splunk)
6. 6Incident Response4 topics

   Topics

   • Incident response lifecycle
   • Containment, eradication and recovery
   • Evidence handling
   • Lessons learned

   You Will Be Able To

   • Follow an incident response plan from detection to report

   Hands-on

   • Run a tabletop exercise for a ransomware incident
7. 7Vulnerabilities and Web Security4 topics

   Topics

   • Vulnerability scanning and CVSS
   • OWASP Top 10
   • API security basics
   • Patch and risk management

   You Will Be Able To

   • Scan systems and prioritise vulnerabilities by risk
   • Explain common web attacks and fixes

   Hands-on

   • Scan a lab network and write a prioritised fix list
8. 8Reporting and Capstone4 topics

   Topics

   • Writing security reports
   • Communicating risk to managers
   • Policies and awareness training
   • Job readiness

   You Will Be Able To

   • Present findings clearly to technical and non-technical readers

   Hands-on

   • Capstone: assess a lab environment and present a security report

You complete practical labs in a safe, isolated environment and a capstone incident response report. Assessors check that you can detect, analyse and document threats correctly and ethically. Your result is Competent or Not yet competent, with a chance to reassess.

1. Assessment 1After modules 1–3
2. Assessment 2After modules 4–6
3. Final assessmentAfter all 8 modules, for your certificate

• 727,381Pakistanis registered for jobs abroad in 2024Source: BE&OE
• $38.3 billionsent home by overseas Pakistanis in 2024-25Source: State Bank of Pakistan
• $1.76 billionearned by Pakistani freelancers in 2025-26Source: State Bank of Pakistan

These are published national figures and market benchmarks to help you plan, not a promise of a job or income. What you earn depends on your skills, experience, employer and city. Subject to employer, licensing, visa and qualification-recognition requirements.