Cloud Security Infrastructure Engineer

Module 01 – Linux Fundamentals

Linux plays an important role in server administration and cloud infrastructure. This module introduces learners to Linux systems, command-line operations and the security practices required to manage and protect servers.

Topics Covered:

Linux architecture, kernel, shell, filesystem, basic Linux commands, file permissions, user and group management, process management, system services, system logs, SSH configuration, firewall basics, package management and server hardening.

Practical Security Labs:

Learners will work on creating restricted user accounts, configuring SSH key authentication, disabling root login, setting firewall rules, checking failed login attempts, identifying unwanted listening processes and applying basic Linux security configurations.

Tools & Platforms: Linux, OpenSSH, UFW, iptables and systemd.

Module 02 – Networking Fundamentals

Understanding how networks communicate is important when working with cybersecurity and cloud infrastructure. This module covers the fundamentals of network communication, traffic flow and common security risks.

Topics Covered:

LAN, WAN, private and public IP addresses, OSI model, TCP/IP, TCP, UDP, ICMP, IPv4, CIDR, subnetting, network ports, DNS, DHCP, routing, NAT, firewalls, VPN, load balancing and TLS/SSL.

Practical Security Labs:

Students will practice identifying open ports using Nmap, examining network traffic with Wireshark, configuring firewall rules, troubleshooting DNS issues, understanding TCP communication and identifying publicly exposed network services.

Tools & Platforms: Nmap, Wireshark, tcpdump and firewall utilities.

Module 03 – Cloud Identity & Access Management (IAM)

Managing who can access cloud resources is a major part of cloud security. This module explains how cloud identity systems work and how access can be controlled through authentication, authorization and permissions.

Topics Covered:

Identity fundamentals, authentication and authorization, IAM users, groups, roles and policies, Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), least privilege, Multi-Factor Authentication (MFA), identity federation, SAML, OAuth 2.0, OpenID Connect, privileged access, workload identities, managed identities, access reviews and Zero Trust Security Architecture.

Practical Security Labs:

Students will create AWS IAM policies and roles, configure Azure RBAC, work with managed identities, implement cross-account access and identify excessive permissions that need correction.

Tools & Platforms: AWS IAM, Microsoft Entra ID and Azure RBAC.

Module 04 – Cloud Network Security

Cloud networks need proper security configurations to protect applications, databases and other resources. This module focuses on building secure cloud network environments and managing communication between different resources.

Topics Covered:

VPC and VNet security, public and private subnet design, Network Security Groups, Security Groups, NACLs, Azure Firewall, AWS Network Firewall, Web Application Firewall (WAF), DDoS protection, private endpoints, PrivateLink, VPN connectivity, network segmentation, Zero Trust Network Access and DNS security.

Practical Security Labs:

Students will build a secure three-tier cloud architecture, configure public and private network access, implement WAF protection, restrict database connectivity and identify publicly exposed cloud resources.

Tools & Platforms: AWS, Microsoft Azure, Security Groups, NSGs and WAF.

Module 05 – Cloud Data Security & Encryption

Protecting sensitive information is a key responsibility in cloud environments. This module introduces the security practices used to protect stored data, manage encryption keys and safeguard application secrets.

Topics Covered:

Data classification, data protection, encryption at rest and in transit, symmetric and asymmetric encryption, TLS, SSL, Key Management Service (KMS), secrets management, key rotation, certificate management, Data Loss Prevention (DLP), database security, cloud storage protection, backup and recovery security.

Practical Security Labs:

Learners will configure cloud storage encryption, implement customer-managed keys, set up key rotation, securely store application secrets and check for publicly accessible storage buckets.

Tools & Platforms: AWS KMS, Azure Key Vault, HashiCorp Vault and AWS Secrets Manager.

Module 06 – Cloud Security Posture Management (CSPM)

Cloud environments can develop security gaps when resources are not configured correctly. This module introduces Cloud Security Posture Management and explains how to identify configuration issues, assess risks and improve cloud security.

Topics Covered:

CSPM fundamentals, cloud misconfiguration risks, continuous security monitoring, security posture assessment, compliance assessment, configuration drift, risk scoring, prioritization, cloud security benchmarks, automated remediation and multi-cloud security posture management.

Practical Security Labs:

Students will scan AWS accounts for configuration issues, identify publicly accessible S3 buckets, detect unrestricted security group rules, check non-compliant Azure resources, generate cloud security posture reports and remediate critical findings.

Tools & Platforms: Microsoft Defender for Cloud, AWS Security Hub and Checkov.

Module 07 – Cloud Security Monitoring, AI-driven SIEM & Incident Response (SOAR)

Monitoring cloud environments and responding to security incidents are important parts of protecting business infrastructure. This module introduces security monitoring, AI-assisted threat detection, log analysis and incident response workflows.

SIEM & Security Monitoring

Learn how cloud logs and security events are collected and monitored using AWS CloudTrail, CloudWatch, Azure Monitor, Activity Logs and GCP Cloud Audit Logs. Explore security event monitoring, threat detection, log analysis, security alerts and threat intelligence.

AI-driven Security Operations

Understand how AI and machine learning support security operations through threat detection, anomaly detection, security log analysis, intelligent alert correlation, threat intelligence enrichment, incident investigation and automated security response.

Incident Response & Security Automation

Explore the incident response lifecycle, cloud forensics fundamentals, vulnerability management, security automation, detection and response playbooks, automated incident remediation, SOAR fundamentals and security incident reporting.

Practical Security Labs:

Students will investigate suspicious AWS login activity, examine unauthorized IAM changes, identify suspicious API calls, configure security alerts, create incident response playbooks and automate basic security responses.

Tools & Platforms: Microsoft Sentinel, AWS GuardDuty, AWS CloudTrail, Azure Monitor and Microsoft Defender XDR.

Build Your Cloud Security Career

Start developing your cloud security knowledge through structured learning, practical labs and hands-on exposure to industry-relevant security tools.

Explore cloud security concepts, practice real-world configurations and understand how security teams monitor, investigate and respond to threats.

CYVERO – The Cyber Security School

KPHB Colony, Road No:2, Hyderabad.

Phone: +91 7207047979

Email: info@cyvero.in

Website: www.cyvero.in