EMPOWERS ACADEMY
Cybersecurity & Ethical hacking (CEH V13 AI)
Curriculum
A 6-month, fully online postgraduate program that takes you from security fundamentals to enterprise-grade defense and offense. 10 modules, 8 industry projects, one 3-month elective track, and a 180-day better-offer guarantee.
Curriculum Outline
| Segment | Modules |
| Cybersecurity & IT Foundations (M1) | Security mindset, networking fundamentals, Linux fundamentals, problem framing for security, security communication & storytelling |
| Networking & System Security (M2) | TCP/IP architecture, firewall & segmentation design, system hardening, access control, evaluating network security posture |
| Offensive Security & Ethical Hacking (M3) | Reconnaissance, vulnerability scanning & exploitation, privilege escalation vs. lateral movement, credential attacks, penetration test reporting |
| Web & Application Security (M4) | OWASP Top 10, injection attacks, secure SDLC pipelines, authentication & session flaws, remediation planning |
| Cloud Security (M5) | Shared responsibility, cloud IAM, configuration & posture management, data protection, cloud security guardrails |
| Security Operations & Incident Response (M6) | SOC architecture, log aggregation & correlation, SIEM & detection engineering, incident response playbooks, threat hunting & containment |
| Governance, Risk & Compliance (M7) | Risk management frameworks, regulatory compliance, security policy, third-party risk management, measuring program maturity |
| Security Automation & DevSecOps (M8) | CI/CD security integration, monitoring & observability, automated vulnerability scanning, cost optimization, security governance & ethics |
| Capstone (M9) | Choose a real security problem, design a defense-in-depth solution, build & ship a working system, present to industry experts |
| Career Acceleration (M10) | Resume & LinkedIn transformation, portfolio refinement, mock interviews, salary negotiation, placement support |
| Elective Track (3 months) | Penetration Testing & Red Team Track / Cloud Security & DevSecOps Track / GRC & Security Leadership Track |
Module Deliverables & Tools
| Module | Tools Used | Mini Project | Deliverable |
| M1. Cybersecurity & IT Foundations | Kali Linux, Wireshark, Linux Fundamentals, Threat Landscape Maps | Frame a real security incident as a risk assessment | One-page risk assessment brief |
| M2. Networking & System Security | Nmap, Wireshark, Firewalls, IDS/IPS | Build a hardened network segmentation plan for 15+ assets | Evaluated network security playbook |
| M3. Offensive Security & Ethical Hacking | Metasploit, Nmap, Burp Suite, Nessus | Ship a full penetration test end-to-end | Working penetration test report |
| M4. Web & Application Security | OWASP ZAP, Burp Suite, GitHub, Static Analysis Tools | Build a secure code review over a real application codebase | Deployed vulnerability report + remediation plan |
| M5. Cloud Security | AWS Security Hub, Azure Security Center, Terraform, Cloud IAM Tools | Build a cloud security posture assessment for a multi-account environment | Working cloud security baseline |
| M6. Security Operations & Incident Response | Splunk, Wazuh, Snort, Microsoft Sentinel | Design an incident response plan for a simulated breach | Incident response runbook + detection rules |
| M7. Governance, Risk & Compliance | NIST Frameworks, ISO 27001, GRC Platforms, Risk Registers, Audit Tools | Automate an end-to-end compliance audit workflow | Live compliance dashboard + audit write-up |
| M8. Security Automation & DevSecOps | Docker, Kubernetes, GitLab CI/CD, Monitoring Dashboards | Deploy and monitor a DevSecOps pipeline in production | Deployed pipeline + observability dashboard |
| M9. Capstone | Full Stack of Tools, Security Frameworks, Evaluation Suites | Solve a live security problem with a defense-in-depth system | Capstone solution + Executive presentation |
| M10. Career Acceleration | Resume Building, Interview Prep, Career Resources | — | Interview-ready profile + Job application kit |
Real Projects Portfolio
| Project | Focus |
| Enterprise SOC Detection Platform | Build detection rules and dashboards for a live SOC |
| Cloud Security Posture Assessment | Audit and harden a multi-cloud environment |
| Red Team Engagement Simulation | Simulate a full attack chain against a target organization |
| Web Application Penetration Test | Identify and remediate OWASP Top 10 vulnerabilities |
| Incident Response Tabletop Exercise | Coordinate response to a simulated breach |
| Security Automation Pipeline | Automate vulnerability scanning across a CI/CD pipeline |
| Compliance Audit Dashboard | Track regulatory compliance posture in real time |
| Threat Intelligence Feed Integration | Aggregate and correlate threat data across sources |
Curriculum Deep Dive
M1 · Cybersecurity & IT Foundations Month 1
The security mindset and technical vocabulary before anything else.
| # | Topic |
| 1 | Cybersecurity mindset & threat landscape |
| 2 | Networking fundamentals — a practical primer |
| 3 | Operating systems & Linux fundamentals |
| 4 | Risk framing for security problems |
| 5 | Security communication & incident storytelling |
Tools: Kali LinuxWiresharkLinux FundamentalsThreat Landscape Maps
Mini ProjectFrame a real security incident as a risk assessment · Deliverable: One-page risk assessment brief
M2 · Networking & System Security Month 2
Get fluent in networks and the craft of securing systems.
| # | Topic |
| 1 | TCP/IP & network architecture — ports, protocols, packets |
| 2 | Firewall & network segmentation design |
| 3 | System hardening & patch management |
| 4 | Access control & authentication schemes |
| 5 | Evaluating network security posture |
Tools: NmapWiresharkFirewallsIDS/IPS
Mini ProjectBuild a hardened network segmentation plan for 15+ assets · Deliverable: Evaluated network security playbook
M3 · Offensive Security & Ethical Hacking Month 3
Think like an attacker — reconnaissance, exploitation, and reporting.
| # | Topic |
| 1 | Reconnaissance & footprinting techniques |
| 2 | Vulnerability scanning & exploitation |
| 3 | Privilege escalation vs. lateral movement — when to use which |
| 4 | Password attacks & credential harvesting |
| 5 | Building & shipping a penetration test report |
Tools: MetasploitNmapBurp SuiteNessus
Mini ProjectShip a full penetration test end-to-end · Deliverable: Working penetration test report
M4 · Web & Application Security Month 4
Secure the applications businesses run on, from code to deployment.
| # | Topic |
| 1 | OWASP Top 10 & common vulnerabilities |
| 2 | Injection attacks & input validation |
| 3 | Building end-to-end secure SDLC pipelines |
| 4 | Authentication & session management flaws |
| 5 | Remediation planning & vulnerability control |
Tools: OWASP ZAPBurp SuiteGitHubStatic Analysis Tools
Mini ProjectBuild a secure code review over a real application codebase · Deliverable: Deployed vulnerability report + remediation plan
M5 · Cloud Security Month 5
Move from on-prem thinking to securing dynamic, cloud-native environments.
| # | Topic |
| 1 | What makes cloud different — shared responsibility |
| 2 | Identity & access management in the cloud |
| 3 | Cloud configuration & posture management |
| 4 | Data protection & encryption in the cloud |
| 5 | Cloud security guardrails |
Tools: AWS Security HubAzure Security CenterTerraformCloud IAM Tools
Mini ProjectBuild a cloud security posture assessment for a multi-account environment · Deliverable: Working cloud security baseline
M6 · Security Operations & Incident Response Month 5
Coordinate detection, response, and recovery across a live SOC.
| # | Topic |
| 1 | SOC architecture & analyst roles |
| 2 | Log aggregation & correlation |
| 3 | SIEM & detection engineering |
| 4 | Incident response playbooks |
| 5 | Threat hunting & containment |
Tools: SplunkWazuhSnortMicrosoft Sentinel
Mini ProjectDesign an incident response plan for a simulated breach · Deliverable: Incident response runbook + detection rules
M7 · Governance, Risk & Compliance Month 6
Wire security into the frameworks businesses already run on.
| # | Topic |
| 1 | Risk management frameworks |
| 2 | Regulatory compliance — GDPR, HIPAA, PCI-DSS |
| 3 | Security policy & documentation |
| 4 | Third-party & vendor risk management |
| 5 | Measuring security program maturity |
Tools: NIST FrameworksISO 27001GRC PlatformsRisk RegistersAudit Tools
Mini ProjectAutomate an end-to-end compliance audit workflow · Deliverable: Live compliance dashboard + audit write-up
M8 · Security Automation & DevSecOps Month 6
Take security into production pipelines — and keep them observable.
| # | Topic |
| 1 | Deploying security into CI/CD pipelines |
| 2 | Monitoring & observability |
| 3 | Automated vulnerability scanning & regression testing |
| 4 | Cost optimization at scale |
| 5 | Security governance & ethics |
Tools: DockerKubernetesGitLab CI/CDMonitoring Dashboards
Mini ProjectDeploy and monitor a DevSecOps pipeline in production · Deliverable: Deployed pipeline + observability dashboard
M9 · Capstone Applied end-to-end
Apply everything end-to-end on a live security problem.
| # | Topic |
| 1 | Choose a real security problem |
| 2 | Design a defense-in-depth architecture |
| 3 | Build & ship a working security solution |
| 4 | Present insights & recommendations |
| 5 | Get reviewed by industry experts |
Tools: Full Stack of ToolsSecurity FrameworksEvaluation Suites
DeliverableCapstone project solution + Executive presentation · Outcome: Showcase end-to-end security problem solving ability
M10 · Career Acceleration Placement
Turn your portfolio into offers — resume to negotiation.
| # | Topic |
| 1 | Resume & LinkedIn transformation |
| 2 | Portfolio refinement |
| 3 | Mock interviews & feedback |
| 4 | Salary negotiation training |
| 5 | Job referrals & placement support |
Tools: Resume BuildingInterview PrepCareer Resources
DeliverableInterview-ready profile + Job application kit · Outcome: Confidently land your next opportunity
Elective Track (choose one, 3 months)
Penetration Testing & Red Team Track
| # | Focus Area |
| 1 | Advanced Exploitation Techniques |
| 2 | Red Team Tradecraft & Adversary Simulation |
| 3 | Active Directory Attacks |
| 4 | Red Team Engagement & Reporting |
| 5 | Red Team Capstone Engagement |
Career roles: Penetration Tester, Red Team Analyst, Offensive Security Engineer, Vulnerability Researcher, Security Consultant
Cloud Security & DevSecOps Track
| # | Focus Area |
| 1 | Container & Kubernetes Security |
| 2 | Infrastructure as Code Security |
| 3 | Cloud-Native Threat Detection |
| 4 | DevSecOps Pipeline Redesign |
| 5 | Production Cloud Security Pipeline |
Career roles: Cloud Security Engineer, DevSecOps Analyst, Cloud Security Architect, Security Platform Engineer, Cloud Security Strategy Associate
GRC & Security Leadership Track
| # | Focus Area |
| 1 | Enterprise Risk Assessment |
| 2 | Security Awareness & Culture Building |
| 3 | Compliance Automation |
| 4 | Security Program Roadmap |
| 5 | GRC Audit Dashboard |
Career roles: GRC Analyst, Compliance Manager, Security Program Manager, IT Auditor, CISO Track Associate
Refreshed each cohort based on what's most impactful at the time of delivery.
WiresharkNmapMetasploit
Burp SuiteKali LinuxOWASP ZAP
NessusSplunkWazuh
SnortCrowdStrikeMicrosoft Sentinel
AWS Security HubAzure Security CenterDocker
KubernetesTerraformAnsible
GitHubGitLab CI/CDPython
Bash ScriptingActive DirectoryJohn the Ripper
HashcatMaltegoSIEM Platforms
IDS/IPSVulnerability ScannersFirewalls
Program Details
| Category | Details |
| Format | 6 months, 100% online, live cohorts, sessions recorded for later |
| Guarantee | 180-day better-offer guarantee — a better offer within 180 days of completion, or a full refund, backed by a signed legal agreement before you pay |
| Eligibility | Bachelor's degree in any discipline; open to professionals, entrepreneurs, and graduates (2+ years experience recommended for management roles) |
| Admissions | Shortlist call → Aptitude test → Interview → Offer rollout |
| Career support | 1:1 mentorship, unlimited mock interviews, resume & LinkedIn positioning, 350+ hiring partner network |