2026 Edition · 8 Modules · 9 Vendors · India
Cyber Security Course Syllabus India 2026 — 8-Month Module-by-Module Breakdown
Networkers Home's 8-month flagship cyber security course in India 2026 covers networking + Linux + Python foundation (Month 1), multi-vendor firewall security (Month 2 — Palo Alto + Fortinet + Check Point + Cisco), SIEM + SOC analyst stack (Month 3 — Splunk + Sentinel + QRadar), cloud security (Month 4 — AWS + Azure + IAM), ethical hacking + pen-testing (Month 5), GenAI / LLM security (Month 6 — OWASP LLM Top 10 + prompt injection + MCP hardening), GRC + DPDP Act 2023 compliance (Month 7), and placement sprint + cert prep (Month 8). Each module ends with a hands-on deliverable on real enterprise hardware via vpn.networkershome.com. Bundled 12-month NHPREP.com mock-test access aligns to Security+, CEH v13, AWS Security Specialty, AZ-500, PCNSE.
Updated quarterly. 2026 edition added AI/LLM security (Month 6, new in Q1 2026) and DPDP Act 2023 implementation (Month 7). Vendor versions current: PAN-OS 11 · FortiGate 7.4 · Check Point R82.
Month-by-month
8 monthly modules — what you learn each month
Month 1
Foundation — Networking, Linux, Python
Build the prerequisites needed for the security stack. Non-IT graduates and career-switchers bridge their knowledge gap here.
Topics covered
- •TCP/IP, OSI model, subnetting + VLSM
- •Routing fundamentals: static, OSPF, EIGRP basics
- •Switching: VLAN, STP, EtherChannel
- •Linux command line + bash scripting (Kali Linux)
- •Python basics for security automation (requests, scapy, paramiko)
- •Wireshark packet analysis fundamentals
Deliverable: Build a 3-router OSPF lab on Cisco IOS-XE · write a Python port scanner
Month 2
Network Security — Firewalls + VPNs
Master enterprise firewall configuration across the three dominant vendors in Indian enterprise security.
Topics covered
- •Palo Alto PAN-OS 11 — Security Policies, App-ID, User-ID, Threat Prevention
- •FortiGate 7.4 — Firewall Policies, IPsec/SSL VPN, FortiAnalyzer
- •Check Point R82 — SmartConsole, Policy Layers, Identity Awareness
- •Cisco ASA + Firepower — ACLs, NAT, FTD threat protection
- •Site-to-Site VPN (IPsec) + Remote-Access VPN (SSL)
- •Zero Trust Network Access (ZTNA) basics — Cloudflare Access, Zscaler ZPA, Palo Alto Prisma Access
Deliverable: Configure Palo Alto + FortiGate site-to-site VPN · build ZTNA policy on Cloudflare Access
Month 3
SOC Analyst Stack — SIEM + Detection
Develop detection engineering + incident response skills for L1/L2 SOC roles.
Topics covered
- •Splunk Enterprise Security — SPL search, dashboards, alerts
- •Microsoft Sentinel — KQL, analytics rules, hunting queries
- •IBM QRadar — AQL, offense management
- •Elastic SIEM — ES|QL, detection rules
- •Sigma rule writing — vendor-agnostic detection logic
- •MITRE ATT&CK mapping — TTP → detection coverage matrix
- •Incident triage workflow (NIST 800-61 framework)
Deliverable: Write 5 Sigma rules for common attack TTPs · respond to a simulated ransomware incident in Splunk
Month 4
Cloud Security — AWS + Azure + IAM
Bring 70% of enterprise security spend into scope — cloud-native security and identity management.
Topics covered
- •AWS Security: GuardDuty, CloudTrail, IAM, Security Hub, WAF, KMS
- •AWS Security Specialty exam alignment (SCS-C02)
- •Azure Security: Sentinel SIEM, Defender for Cloud, Azure AD, AZ-500 alignment
- •IAM deep dive: RBAC, ABAC, federation, MFA, conditional access
- •Cloud security architecture patterns: landing zones, hub-and-spoke, transit gateway
- •Container security basics: Kubernetes pod security, EKS / AKS hardening
Deliverable: Build an AWS landing zone with Security Hub + GuardDuty · configure Azure Sentinel analytics rules
Month 5 (Internship begins)
Ethical Hacking + Real-Product Pen-Testing
Move from defence to offence. Start the 4-month paid internship in founder-product companies.
Topics covered
- •Kali Linux + Burp Suite + Metasploit + Nmap mastery
- •OWASP Top 10 web vulnerabilities — SQLi, XSS, CSRF, IDOR, SSRF
- •Network exploitation: SMB, RDP, Active Directory attacks
- •Wireless security: WPA2/3 attacks, evil twin
- •CEH v13 exam alignment (optional voucher)
- •Internship: real customer engagement at QSecure / BrowserFog / QSecNiti / 24Observe
Deliverable: First internship deliverable — pen-test scope + report on a founder-product target. Stipend kicks in.
Month 6
GenAI Security + LLM Defence
2026 differentiator — securing AI/LLM applications. The biggest salary premium in Indian cybersec hiring this year.
Topics covered
- •OWASP LLM Top 10 (2024-2026)
- •Prompt injection attack + defence
- •Jailbreak testing methodologies
- •MCP (Model Context Protocol) server hardening
- •Token-level access control for AI agents
- •AI red-teaming — autonomous agent abuse cases
- •AEONITI platform walkthrough — measuring brand security posture across AI assistants
Deliverable: Red-team report on an LLM-powered chatbot · build prompt-injection detection rules in Sigma format
Month 7
Compliance + GRC + DPDP Act 2023
Build governance, risk, and compliance literacy. India-specific regulations matter for BFSI and government-sector roles.
Topics covered
- •DPDP Act 2023 (Digital Personal Data Protection Act) — implementation requirements
- •RBI cybersecurity framework for banks + NBFCs
- •ISO 27001 / 27017 / 27018 — controls + audit prep
- •SOC 2 Type II — Trust Service Criteria
- •PCI-DSS basics (payments)
- •Policy-as-code: OPA, Cedar, Rego
- •Vendor risk + third-party assessment workflows
Deliverable: Draft a DPDP Act readiness gap analysis for a fintech use case
Month 8
Placement Sprint + Certification Voucher Prep
Convert 7 months of training + 4 months of internship into a paid cybersecurity role.
Topics covered
- •Resume + LinkedIn optimisation for cybersec recruiters
- •Interview prep: technical scenarios across SOC, pen-test, cloud, network sec
- •Mock interviews with placement team
- •Cert voucher prep: Security+, CEH v13, AWS Security Specialty (whichever fits target role)
- •Salary negotiation tactics
- •Real interview drives with 800+ pan-India hiring partner panel
Deliverable: Final placement — written offer letter at ₹4-7 LPA (entry) or higher based on track record. Verified Experience Letter issued.
Vendor coverage
9 vendors / technology stacks covered in depth
| Vendor / Stack | What's covered | Cert alignment | When in syllabus |
|---|---|---|---|
| Palo Alto Networks | PAN-OS 11 fully covered — Security Policies, App-ID, User-ID, Threat Prevention, WildFire, GlobalProtect VPN | PCNSE + PCCET aligned | Month 2 deep, recurring through internship |
| Fortinet | FortiGate 7.4 — Firewall Policies, IPsec/SSL VPN, FortiAnalyzer, FortiManager, SD-WAN security | NSE 4 + NSE 7 aligned | Month 2 deep, integrated in Months 3-4 |
| Check Point | R82 — SmartConsole, Policy Layers, Identity Awareness, ThreatCloud | CCSA + CCSE aligned | Month 2 |
| Cisco (Security) | ASA + Firepower (FTD) — ACLs, NAT, Threat Defence. ISE for identity. SecureX integration | CCNP Security / CyberOps Associate aligned | Months 1-2 + integrated throughout |
| AWS Security | GuardDuty, CloudTrail, IAM, Security Hub, WAF, KMS, Macie, Config | AWS Security Specialty (SCS-C02) aligned | Month 4 deep |
| Microsoft Azure | Sentinel SIEM, Defender for Cloud, Azure AD (Entra ID), conditional access | AZ-500 aligned | Month 4 deep |
| Splunk | Enterprise Security — SPL, dashboards, alerts, threat hunting | Splunk Core Certified Power User aligned | Month 3 deep |
| Microsoft Sentinel + IBM QRadar + Elastic | Multi-SIEM exposure — KQL, AQL, ES|QL | — | Month 3 |
| Kali Linux + offensive tooling | Burp Suite, Metasploit, Nmap, Wireshark, Hydra, John the Ripper | CEH v13 + OSCP foundation | Month 5 deep |
Outcomes by role
What you'll master for each target role
SOC L1 / L2 Analyst
Splunk + Microsoft Sentinel + QRadar SIEM operations, Sigma rule writing, MITRE ATT&CK detection mapping, incident triage workflow
Months 3 + 6 + 8
Cloud Security Engineer
AWS GuardDuty + Security Hub + IAM architecture, Azure Sentinel + Defender for Cloud, multi-cloud IAM federation
Month 4 + ongoing
Network Security Engineer
Palo Alto + Fortinet + Check Point multi-vendor depth, ZTNA architecture, IPsec/SSL VPN design
Month 2 + Month 7 GRC layer
Penetration Tester
OWASP Top 10 + Kali Linux toolchain + Burp Suite + Metasploit + AD attacks + wireless exploitation
Month 5 + 4-month internship
AI / LLM Security Engineer (2026 premium)
OWASP LLM Top 10, prompt injection defence, MCP server hardening, AI red-teaming
Month 6 — NH-exclusive content
Compliance / GRC Analyst
DPDP Act 2023 + ISO 27001 + SOC 2 + RBI framework + policy-as-code
Month 7
Want the full syllabus PDF + batch schedule?
The counsellor can also walk you through which monthly modules match your target role, what the cert voucher prep looks like, and how the 4-month paid internship integrates with the curriculum.
Quick answers
Cyber security syllabus — common questions
10 atomic answers about what's covered, what's not, and how it compares.
What is the cyber security course syllabus at Networkers Home? +
Networkers Home's 8-month flagship cybersecurity syllabus covers 8 monthly modules: Month 1 Foundation (networking + Linux + Python), Month 2 Network Security (Palo Alto + Fortinet + Check Point + Cisco), Month 3 SOC Analyst Stack (Splunk + Sentinel + QRadar + Sigma + MITRE ATT&CK), Month 4 Cloud Security (AWS + Azure + IAM), Month 5 Ethical Hacking + Pen-Test (Kali + Burp + Metasploit), Month 6 GenAI / LLM Security (OWASP LLM Top 10 + prompt injection + MCP hardening), Month 7 Compliance (DPDP Act 2023 + ISO 27001 + SOC 2), Month 8 Placement Sprint + cert prep.
Which firewall vendors does the cyber security course cover in India? +
Networkers Home's 8-month flagship covers four enterprise firewall vendors deeply: Palo Alto Networks (PAN-OS 11, PCNSE-aligned), Fortinet (FortiGate 7.4, NSE 4/7-aligned), Check Point (R82, CCSA + CCSE-aligned), and Cisco Security (ASA + Firepower FTD, CCNP Security-aligned). This multi-vendor coverage is critical because Indian enterprise security stacks are heterogeneous — most BFSI, telecom, and e-commerce environments run 2+ firewall vendors.
Does the cyber security course teach AI / LLM security? +
Yes — Month 6 of Networkers Home's 8-month flagship is dedicated to GenAI / LLM security: OWASP LLM Top 10 (2024-2026), prompt injection attack + defence, jailbreak testing, MCP (Model Context Protocol) server hardening, token-level access control for AI agents, AI red-teaming methodologies, and a walkthrough of the AEONITI platform (NH's founder product measuring brand security across AI assistants). This is the biggest salary premium in 2026 Indian cybersec hiring (+25-40% over peers).
What programming languages are taught in the cyber security course? +
Month 1 covers Python basics for security automation — requests library for HTTP/API security testing, scapy for packet manipulation, paramiko for SSH automation. Bash scripting via Kali Linux is taught alongside. Months 3 covers SIEM query languages: Splunk SPL, Microsoft KQL, IBM AQL, Elastic ES|QL. Sigma rule syntax (YAML-based detection logic) is covered in Months 3 and 6. No deep-dive in Java / Go / Rust — those belong to AppSec specialisation, not the cybersec generalist syllabus.
Does the cyber security syllabus include cloud security? +
Yes — Month 4 of the 8-month flagship is fully dedicated to cloud security. AWS coverage: GuardDuty, CloudTrail, IAM, Security Hub, WAF, KMS, Macie, AWS Config — aligned to AWS Security Specialty (SCS-C02). Azure coverage: Sentinel SIEM, Defender for Cloud, Azure AD (Entra ID), conditional access — aligned to AZ-500. Plus IAM deep-dive (RBAC, ABAC, federation, MFA) and cloud architecture patterns (landing zones, transit gateway, container security).
What tools and technologies will I learn in the cyber security course? +
Networkers Home's 8-month flagship covers 25+ enterprise tools across the security stack: Palo Alto PAN-OS 11, FortiGate 7.4, Check Point R82, Cisco ASA/Firepower/ISE, AWS Security stack, Microsoft Sentinel + Defender, Splunk ES, IBM QRadar, Elastic SIEM, Kali Linux, Burp Suite Pro, Metasploit, Nmap, Wireshark, Hydra, John the Ripper, OWASP ZAP, Active Directory attack toolkit (BloodHound, mimikatz, Rubeus), plus MCP SDK for AI security work.
Does the syllabus include real industry projects? +
Yes — every monthly module includes a deliverable. Month 1: 3-router OSPF lab + Python port scanner. Month 2: Palo Alto–FortiGate site-to-site VPN configuration. Month 3: 5 Sigma detection rules + simulated ransomware response in Splunk. Month 4: AWS landing zone + Azure Sentinel analytics. Month 5: pen-test report on a founder-product target (real customer engagement). Month 6: LLM red-team report + prompt-injection detection rules. Month 7: DPDP Act gap analysis. Month 8: final placement + cert voucher.
How is the syllabus different from a college B.Tech cybersecurity degree? +
A B.Tech in cybersecurity spreads 200+ credit hours across 4 years with heavy theoretical foundations (DSA, OS internals, theory of computation, discrete maths). Networkers Home's 8-month syllabus is 100% practitioner-focused — every module ends with a hands-on deliverable on real enterprise hardware. Trade-off: NH graduates can do the job immediately; B.Tech graduates have deeper academic foundations but need 6-12 months of on-job upskilling to match practical competence.
Does the syllabus prepare for international certifications? +
Yes — the 8-month flagship aligns to: CompTIA Security+ (Month 1-3), CEH v13 (Month 5), AWS Security Specialty SCS-C02 (Month 4), Azure AZ-500 (Month 4), Palo Alto PCNSE (Month 2), Fortinet NSE 4 (Month 2), Cisco CyberOps Associate (Months 1-3). Bundled NHPREP.com platform access (12 months) provides mock tests for each. Cert exam vouchers are paid directly to the issuing body — not bundled in the ₹1,20,000 fee.
Is the cyber security course syllabus updated for 2026? +
Yes — Networkers Home's syllabus is updated quarterly. The 2026 edition added GenAI / LLM security (Month 6, new in Q1 2026), DPDP Act 2023 implementation (Month 7), post-quantum cryptography awareness (integrated), MCP server hardening (Month 6), and AI red-teaming. Vendor versions are current: PAN-OS 11, FortiGate 7.4, Check Point R82, AWS SCS-C02, Azure AZ-500 (latest objectives).