Role-Based Learning Path Implementation Guide
Cybersecurity Workforce Capability Roadmap: From Foundational Skills to Domain Mastery
Role-Based Learning Path Implementation Guide
Why Domain vs. Job Role? The Security Domain acts as a functional umbrella (e.g., Offensive vs. GRC) enabling strategic organizational alignment. The Job Role is the actual operational track where employees progress through calibrated stages:
1. Basic:Onboarding / Prereqs
2. Core:Role Fluency
3. Intermediate:Specialization
4. Advanced:Senior & Strategic
Quick Domain:
Showing 20 role pathways (79 total course milestones)
Active Curriculum Standard
Fundamentals & IT•3 Course Milestones
Helpdesk Technician / IT Support Specialist
Basic2
CompTIA Tech+
CompTIA AI Essentials
Core1
Intermediate0
No specific intermediate gate
Advanced0
Core & intermediate mastery
Fundamentals & IT•4 Course Milestones
Systems Administrator / Network Administrator
Basic1
Intermediate1
Enterprise Infrastructure & Server Hardening
Advanced0
Core & intermediate mastery
Fundamentals & IT•4 Course Milestones
Entry-Level Security Analyst / Junior Specialist
Basic1
Core2
OffSec CyberCore – Security Essentials SEC-100 (OSCC)
Intermediate1
Applied Hands-on Cyber Defense Lab
Advanced0
Core & intermediate mastery
Fundamentals & IT•4 Course Milestones
IT Career Switcher / General Workforce Member
Basic2
CompTIA Tech+
CompTIA AI Essentials
Core2
Foundations of IT Systems & Operating Systems
Intermediate0
No specific intermediate gate
Advanced0
Core & intermediate mastery
Security Operations & Defense•5 Course Milestones
SOC Analyst (Tier 1 / Tier 2)
Basic1
Core2
SIEM Operations & Log Analysis Workshop
Intermediate1
CompTIA CySA+
Advanced1
EC-Council Certified Network Defender (CND) / Blue Team Level 1 (BTL1)
Security Operations & Defense•4 Course Milestones
Incident Responder / Incident Handling Specialist
Basic1
CompTIA CySA+
Intermediate1
Advanced1
OffSec Foundational Incident Response (IR-200)
Security Operations & Defense•3 Course Milestones
Digital Forensics Examiner / Malware Analyst
Core1
EC-Council Computer Hacking Forensic Investigator (CHFI)
Intermediate0
No specific intermediate gate
Advanced1
Advanced Static & Dynamic Malware Analysis
Security Operations & Defense•4 Course Milestones
Threat Hunter / Cyber Threat Intelligence Analyst
Basic1
CompTIA CySA+
Core1
Blue Team Level 1 (BTL1)
Intermediate1
OffSec Foundational Threat Hunting (TH-200)
Advanced1
Blue Team Level 2 (BTL2)
Security Engineering & DevSecOps•4 Course Milestones
Platform Security / Infrastructure Engineer
Basic1
Core1
Infrastructure as Code & Hardened Environments
Intermediate1
Enterprise Identity & Zero Trust Architecture
Advanced1
Advanced Multi-Cloud Infrastructure Security
Security Engineering & DevSecOps•4 Course Milestones
Cloud Security Engineer / Cloud Architect
Basic1
Cloud Architecture & Security Fundamentals
Core1
Applied Cloud Workload Protection
Intermediate1
ISC2 Certified Cloud Security Professional (CCSP)
Advanced1
Enterprise Cloud Security Architecture & Governance
Security Engineering & DevSecOps•4 Course Milestones
DevSecOps Engineer / AppSec Engineer
Core1
CI/CD Pipeline Security & Container Hardening
Intermediate1
DISA STIG Application Security: Assessment, Implementation & Remediation
Advanced1
Enterprise DevSecOps Automation & Policy-as-Code
Security Engineering & DevSecOps•4 Course Milestones
AI Security Engineer / AI Gateway Engineer
Core1
CompTIA SecAI+
Intermediate1
LLM Safety & AI Guardrails Implementation
Advanced1
Enterprise AI Security Engineering & Gateway Architecture
Security Assurance & Offensive•4 Course Milestones
Vulnerability Assessment Engineer / Control Validator
Basic1
Intermediate1
CompTIA PenTest+
Advanced1
DISA STIG Application Security: Assessment, Implementation & Remediation
Security Assurance & Offensive•4 Course Milestones
Penetration Tester / Ethical Hacker
Basic1
Core2
CompTIA PenTest+
Intermediate0
No specific intermediate gate
Security Assurance & Offensive•4 Course Milestones
Red Team Operator / Adversary Emulation
Intermediate1
Certified Penetration Testing Associate (CPTA)
Security Assurance & Offensive•4 Course Milestones
AI Red Team Engineer
Basic1
CompTIA SecAI+
Intermediate1
OffSec AI-300 / OSAI
Advanced1
Certified AI Red Team Engineer (CARTE)
GRC & Security Leadership•4 Course Milestones
Security Auditor / Compliance Analyst
Basic1
Intermediate1
Advanced1
Enterprise IT Audit Leadership & Executive Reporting
GRC & Security Leadership•4 Course Milestones
Risk Management Specialist / GRC Manager
Basic1
Foundations of IT Risk Management & Controls
Intermediate1
ISACA Certified Information Security Manager (CISM)
Advanced1
Strategic Risk Governance & Enterprise Resilience
GRC & Security Leadership•4 Course Milestones
Information Security Officer / Security Manager
Core1
Security Program Development & Business Operations
Intermediate1
ISACA Certified Information Security Manager (CISM)
Advanced1
ISACA Advanced in AI Security Management (AAISM)
GRC & Security Leadership•4 Course Milestones
Director of Cybersecurity / Chief Information Security Officer
Basic1
Executive Cybersecurity Strategy & Board Governance
Core1
ISACA Certified Information Security Manager (CISM)
Intermediate1
Advanced1
CISO Executive Leadership & Organizational Resilience
Cybersecurity Learning & Development Program. Role-Based Competency Standards.
5 Domains 20 Specialized Roles 4 Continuous Tiers