Security¶
Portal | Tag Cloud | 58 assets across 21 topics
TLS, secrets management, scanning, RBAC, audit logging, compliance, Vault
Core Skills (Tier 1)¶
Start here — these are the topics a mid-level engineer uses weekly.
- TLS & Certificates Ops — Topic Pack
- Disaster Recovery — Topic Pack
- SELinux & AppArmor — Topic Pack ×2
- Container Image Scanning (alias → container_images) — Topic Pack
All Content¶
📘 Topic Packs¶
| Asset | Topics | Level | Time | Status |
|---|---|---|---|---|
| Audit Logging | Audit Logging | L1 | 2h | solid |
| Backup Restore | Backup & Restore | L1 | 2h | solid |
| Compliance & Audit Automation | Audit Logging, Compliance & Audit | L2 | 5h | solid |
| Container Images | Container Image Scanning (alias → container_images) | L1 | 3h | solid |
| Disaster Recovery & Backup Engineering | Backup & Restore, Disaster Recovery | L2 | 5h | solid |
| HTTP Protocol | TLS & PKI | L0 | 3h | solid |
| HashiCorp Vault | HashiCorp Vault, Secrets Management | L2 | 4h | solid |
| Incident Triage | Incident Triage | L1 | 2h | solid |
| Infrastructure Forensics | Audit Logging, Infrastructure Forensics | L2 | 5h | solid |
| LDAP & Identity Management | LDAP & Identity Management, Least Privilege | L2 | 5h | solid |
| Networking Deep Dive | TLS & PKI | L1 | 6h | solid |
| Nginx & Web Servers | TLS & PKI | L1 | 5h | solid |
| Offensive Security Basics | Offensive Security Basics | L1 | 2h | solid |
| Opsec Mistakes | OpSec Mistakes | L1 | 2h | solid |
| RHCE (EX294) Exam Preparation | SELinux & AppArmor | L2 | 40h | solid |
| Runtime Security with Falco | Runtime Security with Falco | L2 | 4h | solid |
| SELinux & AppArmor | SELinux & AppArmor | L2 | 5h | solid |
| SELinux & Linux Hardening | Audit Logging, Compliance & Audit | L2 | 5h | solid |
| Secrets Management | Secrets Management | L2 | 4h | solid |
| Security Basics (Ops-Focused) | Security Scanning | L1 | 4h | solid |
| Security Scanning | Security Scanning | L1 | 2h | solid |
| Supply Chain Security | Supply Chain Security | L2 | 3h | solid |
| TLS & Certificates Ops | TLS & Certificates Ops, TLS & PKI | L1 | 6h | solid |
🔬 Labs¶
| Asset | Topics | Level | Time | Status |
|---|---|---|---|---|
| Lab: Trivy Scan Remediation (CLI) | Security Scanning | L1 | 30m | solid |
⚡ Drills¶
| Asset | Topics | Level | Time | Status |
|---|---|---|---|---|
| Secrets Management Drills | Secrets Management | L2 | 30m | solid |
| Security Drills | Security Scanning | L2 | 30m | solid |
| TLS & PKI Drills | TLS & PKI | L2 | 30m | solid |
🎯 Scenarios¶
| Asset | Topics | Level | Time | Status |
|---|---|---|---|---|
| Interview: CI Vuln Scan Failed | Security Scanning | L2 | 15m | solid |
| Interview: Certificate Expired | TLS & PKI | L2 | 15m | solid |
| Interview: Secret Leaked to Git | Secrets Management | L2 | 15m | solid |
| Interview: Vault Token Expired | Secrets Management | L2 | 15m | solid |
| Scenario: DNS Looks Fine but App Fails | TLS & PKI | L2 | 20m | solid |
📋 Runbooks¶
| Asset | Topics | Level | Time | Status |
|---|---|---|---|---|
| Runbook: CVE Response (Critical Vulnerability) | Incident Triage, Security Scanning | L2 | 20m | solid |
| Runbook: Certificate Renewal Failed | TLS & PKI | L2 | 15m | solid |
| Runbook: Credential Rotation (Exposed Secret) | Secrets Management | L2 | 15m | solid |
| Runbook: Secret Rotation | Secrets Management | L2 | 15m | solid |
| Runbook: TLS Certificate Expiry | TLS & PKI | L2 | 15m | solid |
| Runbook: Unauthorized Access Investigation | Audit Logging, Incident Triage | L2 | 20m | solid |
📝 Assessments¶
| Asset | Topics | Level | Time | Status |
|---|---|---|---|---|
| Skillcheck: Secrets Management | Secrets Management | L2 | 30m | solid |
| Skillcheck: Security (Expanded) | Security Scanning | L2 | 30m | solid |
| Skillcheck: TLS & PKI | TLS & PKI | L2 | 30m | solid |
🔍 Case Studys¶
| Asset | Topics | Level | Time | Status |
|---|---|---|---|---|
| Case Study: BMC Clock Skew Cert Failure | TLS & PKI | L2 | 30m | solid |
| Case Study: DNS Looks Broken — TLS Expired, Fix Is Cert-Manager | TLS & PKI | L2 | 30m | solid |
| Case Study: Deployment Stuck — ImagePull Auth Failure, Vault Secret Rotation | TLS & PKI | L2 | 30m | solid |
| Case Study: SSL Cert Chain Incomplete | TLS & PKI | L1 | 30m | solid |
| Case Study: User Auth Failing — OIDC Cert Expired, Cloud KMS Rotation | TLS & PKI | L2 | 30m | solid |
| Ops Archaeology: The Certificate That Works Sometimes | TLS & PKI | L2 | 30m | solid |
Related Areas¶
- Docker (1 shared topic)