Security

Security Engineer

Designs and implements controls that reduce risk across infrastructure, applications, identities, and cloud environments.

Find relevant jobs Print learning guide Open Hitchhiker's guide

Skill coverage

88%

7 of 8 skills

Course coverage

59%

35 of 59 courses

Skill coverage shows how much of the role's capability map already has a published course. Course coverage shows how much of the mapped course pipeline for this role has shipped.

Role skills: 8
Published coverage: 7
Relevant courses: 35

Capability map

Skills

Importance describes how central each capability is to the role. Course coverage shows where you can build the skill in the current OpenSkills catalog.

Security foundations

4 capabilities

Security principles
Importance: Essential (5 of 5)
Applies threat, risk, least-privilege, and defense-in-depth models.
Course coverage
- Cybersecurity FundamentalsFree
- CIS Controls
- Cryptography Fundamentals
- Security Principles, Post-Quantum Cryptography (planned)
Threat modeling
Importance: Essential (5 of 5)
Identifies trust boundaries, abuse cases, and proportionate mitigations.
Course coverage
- Threat Modeling (planned)
Security architecture
Importance: Essential (5 of 5)
Designs controls as coherent parts of system architecture.
Course coverage
- Security Architecture
- Privacy Engineering
- Infrastructure Security Hardening, Zero Trust Architecture (planned)
Identity and access
Importance: Essential (5 of 5)
Engineers authentication, authorization, secrets, and privileged access.
Course coverage
- HashiCorp Vault
- Identity Governance and Administration
- Multi-Factor Authentication
- Identity and Access Management Fundamentals, Cryptographic Key Management, Federated Identity, LDAP, Privileged Access Management, Public Key Infrastructure, SAML, Single Sign-On (planned)

Engineering domains

4 capabilities

Network security
Importance: Very important (4 of 5)
Protects network boundaries, flows, and services.
Course coverage
- Network Security
- Active Directory Security
- Certificate Management
- Data Loss Prevention
- Email Security
- TLS Fundamentals
- Virtual Private Networks
- Firewalls (planned)
Application security
Importance: Essential (5 of 5)
Integrates secure design, coding, testing, and dependency controls.
Course coverage
- Application Security FundamentalsFree
- AI Red Teaming
- API Security
- Artifact Signing
- Attack Surface Management
- Authentication and Authorization
- Build Pipeline Security
- Container Image Security
- Dependency Security
- DevSecOps Fundamentals
- NGINX Security Hardening
- Secure Software Development Lifecycle
- Runtime Application Security, Secure Coding (planned)
Cloud security
Importance: Very important (4 of 5)
Applies cloud identity, workload, data, and configuration controls.
Course coverage
Security operations
Importance: Very important (4 of 5)
Uses detection and incident response to contain active threats.
Course coverage
- Network Detection and Response
- Ransomware Defense
- Security Orchestration, Automation, and Response
- Endpoint Detection and Response, Intrusion Detection and Prevention, Malware Analysis Fundamentals, Open Source Security, Security Information and Event Management, Security Operations Fundamentals, Social Engineering Defense, Threat Hunting (planned)

Learning path

Relevant courses

Print all intros Print all cheatsheets

Core foundations

The concepts this role is built on.

Application Security FundamentalsFree
Cybersecurity FundamentalsFree
Network Security
Security Architecture
Identity and Access Management Fundamentals, Security Principles, Threat Modeling (planned)

Supporting knowledge

Adjacent knowledge that improves day-to-day judgment.

Active Directory Security
AI Red Teaming
API Security
Artifact Signing
Attack Surface Management
Authentication and Authorization
Build Pipeline Security
Certificate Management
CIS Controls
Cloud Native Security
Cloud Penetration Testing
Cloud Security
Container Image Security
Cryptography Fundamentals
Data Loss Prevention
Dependency Security
DevSecOps Fundamentals
Email Security
HashiCorp Vault
Identity Governance and Administration
Multi-Factor Authentication
Network Detection and Response
Privacy Engineering
Ransomware Defense
Security Orchestration, Automation, and Response
TLS Fundamentals
Virtual Private Networks
Cryptographic Key Management, Endpoint Detection and Response, Federated Identity, Firewalls, Intrusion Detection and Prevention, LDAP, Malware Analysis Fundamentals, Open Source Security, Privileged Access Management, Public Key Infrastructure, SAML, Security Information and Event Management, Security Operations Fundamentals, Single Sign-On, Social Engineering Defense, Threat Hunting (planned)

Specializations

Deeper paths for particular environments or directions.

AWS Identity and Access Management
Kubernetes Security
NGINX Security Hardening
Secure Software Development Lifecycle
Infrastructure Security Hardening, Post-Quantum Cryptography, Runtime Application Security, Secure Coding, Zero Trust Architecture (planned)

Put the map to work

Find Security Engineer roles.

Search multiple job sources at once with queries tailored to this career, then use the skill map above to evaluate what each role actually asks for.

Open job search

Skills

Security foundations

Security principles

Threat modeling

Security architecture

Identity and access

Engineering domains

Network security

Application security

Cloud security

Security operations

Relevant courses

Core foundations

Supporting knowledge

Specializations

Find Security Engineer roles.