AI + Cybersecurity
A practical, defensive 20-hour bootcamp (4 weeks x 5 hours) adapted from EasySkill's 20-Day AI + Cybersecurity Training Plan, keeping its Day 1 to Day 20 order. You learn security basics, networking with Wireshark, Linux, AI and prompt engineering for security, Python log analysis, login investigations, threat intelligence, phishing, SIEM alert triage, vulnerability prioritisation, web security, safe malware triage, digital forensics, incident response, AI SOC automation and AI security risks. Every lesson uses synthetic data from fictional Indian businesses, interactive practice and turnable 3D artworks. You complete 12 graded practical tasks, a mid-bootcamp practical and a Mini AI-Powered SOC Assistant capstone you can demonstrate and explain. Defensive only: no live malware, no scanning of real systems, and every AI finding is checked by a human. It prepares you to apply for SOC analyst trainee and junior security roles; no placement or salary is promised.
- Duration: 4 weeks
- Modules: 13
- Fee: Rs 14,999 (about Rs 2,500 a month on EMI)
- Field: AI & Automation
Roles this track prepares you for
- SOC Analyst L1
- Junior SOC Analyst
- Cyber Security Analyst
- Security Operations Analyst
- Cyber Security Intern
- Junior Security Analyst
- Information Security Analyst
- IT Security Executive
- Vulnerability Assessment Analyst
- Threat Intelligence Analyst
Curriculum
- Security and Network Foundations (Days 1-2) - Day 1 explains what cybersecurity protects (the CIA triad), threats versus vulnerabilities, common attacks and why written authorisation separates ethical work from crime. Day 2 shows how devices exchange data (IP, DNS, HTTP/HTTPS, TCP/UDP, ports, firewalls) and how to read a prepared Wireshark capture.
- Cybersecurity basics: assets, the CIA triad and threats
- Common attacks, ethical hacking and written permission
- How data travels: IP, DNS, HTTP/HTTPS, TCP/UDP and ports
- Firewalls and reading a Wireshark packet capture
- Linux Security Fundamentals (Day 3) - Use the Linux terminal to read files, users, groups, permissions, processes and system information on an authorised lab machine or the course terminal simulator, and explain a basic permissions concern with its fix.
- The Linux terminal, files and system information
- Users, groups and file permissions
- Processes and a basic Linux security inspection
- AI and Prompt Engineering for Security (Days 4-5) - Day 4 explains AI, machine learning and LLMs in security work, why they hallucinate, and how to check an AI explanation against evidence. Day 5 turns weak prompts into structured, privacy-safe investigation prompts and builds a reusable three-prompt toolkit.
- AI, machine learning and LLMs: what they do for a security analyst
- Hallucinations and verification: an AI suspicion is not an incident
- Security prompt structure: the six parts of a defensive investigation prompt
- Privacy-safe prompting and your Cybersecurity Prompt Toolkit
- Python for Security Log Analysis (Day 6) - Read and modify a beginner Python script that opens a synthetic login log, splits each line into fields, uses a simple regular expression and counts failed logins, with AI help that you check line by line.
- Python basics for security: count failed logins in a log
- Read a log file in Python: lines into fields
- Regex and counting: failed logins per user
- Security Logs and Anomaly Detection (Day 7) - Investigate authentication logs: successful and failed logins, source IPs and time patterns. Filter, count and group events, separate a suspicious pattern from a benign anomaly, and back every claim with event IDs.
- Authentication events: read every field of a login log
- Suspicious login patterns: brute force, spraying and more
- False positives, evidence IDs and the login report
- Threat Intelligence (Day 8) - Understand indicators of compromise (IPs, domains, hashes), read prepared VirusTotal and AbuseIPDB results, judge confidence and uncertainty, and recommend a proportionate defensive review.
- IOCs: IP addresses, domains, URLs and file hashes
- Reading VirusTotal and AbuseIPDB results safely
- IOC confidence worksheet: rate, doubt, decide
- Phishing Analysis (Day 9) - Recognise phishing and social engineering, read sender domains, reply-to fields, links and authentication results in email headers, understand business email compromise and use AI to assist an email review you verify yourself.
- Phishing and social engineering: the tricks behind the message
- Email headers, links and look-alike domains
- Business email compromise and AI-assisted email review
- SIEM Fundamentals and Mid-Bootcamp Assessment (Day 10) - Learn how a SIEM turns logs into alerts, how a SOC triages them by severity and false-positive risk, practise one alert triage (T08), then take the 30-minute mid-bootcamp practical covering Days 1 to 10 with feedback.
- SIEM and SOC alerts: how ALR-1047 reached an analyst
- Triage a sample alert: ALR-1047 step by step
- Mid-bootcamp practical: a full practice run of the midterm
- Vulnerability Assessment (Day 11) - Understand vulnerabilities, CVEs and CVSS, read an instructor-prepared Nmap and scan report, and rank remediation by severity, exposure and business impact. No live scanning of external systems.
- Vulnerabilities, CVE IDs and CVSS scores
- Reading an Nmap scan report: hosts, ports, services and versions
- Remediation priority: what to fix first, and what to do when you cannot patch yet
- Web Application Security (Day 12) - Learn the OWASP Top 10:2025 in plain words, understand from a defender's side how injection and cross-site scripting happen and how they are fixed, and turn a prepared OWASP ZAP or Burp Suite findings report into a web security review. Findings are described in words; no attack strings and no testing of live sites.
- The OWASP Top 10 for beginners
- SQL injection and XSS: evidence and fixes
- Reading ZAP and Burp findings into a web review
- Malware Triage, Forensics and Incident Response (Days 13-15) - Day 13 triages a harmless sample with hashes, metadata, YARA concepts and a prepared sandbox report. Day 14 preserves digital evidence, reads timestamps and builds an incident timeline. Day 15 walks a fictional ransomware incident through preparation, detection, containment, eradication, recovery and lessons learned.
- Malware basics: categories, hashes and file metadata
- YARA rules, sandbox reports and safe file triage
- Digital evidence, chain of custody and timestamps
- Building an evidence-based forensic timeline
- The incident response lifecycle: six phases and who approves what
- Ransomware response plan: first hour, approvals, reporting and recovery
- AI SOC Operations, Automation and AI Risks (Days 16-18) - Day 16 designs an alert workflow with enrichment, correlation, MITRE ATT&CK labels and analyst approval. Day 17 writes rule-based alert categorisation in beginner Python with JSON output and n8n concepts. Day 18 covers prompt injection, untrusted data, data leakage and unsafe tool permissions, ending with an AI security risk checklist.
- Alert enrichment, correlation and MITRE ATT&CK
- Design a mini SOC workflow: where AI helps, where humans decide
- Python alert rules: JSON events, thresholds, R1 and R2
- Alert automation: JSON reports and an n8n flow with human approval
- Prompt injection: when untrusted data gives your AI orders
- AI data leakage, tool permissions and hallucinations
- Capstone: Mini AI-Powered SOC Assistant (Days 19-20) - Day 19 integrates the starter parser, your detection rules, AI-assisted interpretation and the report template, then tests the assistant on the capstone logs. Day 20 verifies the final report, demonstrates the assistant, prepares for the viva and maps the next steps toward SOC trainee roles.
- Capstone build: requirements, data and integration
- Capstone test: run, verify and fix
- Capstone SOC report and demonstration
- Viva preparation, career roadmap and course review
Frequently asked questions
How long is the AI + Cybersecurity course?
It runs for 4 weeks, with 13 modules. It is self-paced online learning from EasySkill Career Academy, Surat.
How much does the AI + Cybersecurity course cost?
The fee is Rs 14,999, or about Rs 2,500 a month on EMI.
What will I build in AI + Cybersecurity?
Every module ends in a graded practical task that AI checks in about 30 seconds, so you finish with a portfolio you can show to employers or clients.
Which roles does AI + Cybersecurity prepare me for?
It prepares you to apply for roles such as SOC Analyst L1, Junior SOC Analyst, Cyber Security Analyst, Security Operations Analyst, Cyber Security Intern. It does not guarantee a job or income.
Can I learn online, or do I have to visit a centre?
You can learn fully online. EasySkill also has centres in Adajan, Vesu and Bhestan, Surat, if you prefer to visit.
All career tracks