Cloud Security Engineer

// curriculum path

1. 1
   Cloud PentestBeginneravailable · start

   Cloud fundamentals — shared-responsibility model, IAM, storage misconfigs.

2. 2

   Cloud PentestIntermediatelocked

   AWS / Azure / GCP-specific attack chains: IMDS, SSRF→creds, assume-role.

3. 3

   DevSecOps / AppSecBeginnerlocked

   Secure CI/CD basics — secret scanning, SAST, dependency audit.

4. 4

   Cloud PentestAdvancedlocked

   Kubernetes pentesting — RBAC abuse, container escapes, etcd attacks.

5. 5

   DevSecOps / AppSecIntermediatelocked

   Pipeline poisoning, supply-chain attacks, OIDC trust abuse.

6. 6

   Cloud PentestExpertlocked

   Multi-cloud campaign + Detection Engineering — write the SIEM rules that catch you.