Credentials and Skill Milestones
The submitted profile already shows meaningful foundation learning. This IDR does not restart from zero. Credentials are used as structured learning milestones while practical evidence remains the main proof of capability.
Existing profile-listed learning
- Networking Devices and Initial Configuration
- Introduction to Cybersecurity
- Google Cybersecurity Professional Certificate
- Networking Basics
- Cybersecurity and Cloud Fundamentals 1.0
Recommended next milestones
| Priority | Milestone | Why it matters | Evidence gate |
|---|---|---|---|
| Core | Wazuh practical proficiency | Directly supports current SIEM portfolio | Three triage cases + one tuned detection |
| Core | CompTIA Security+ knowledge objectives | Broad junior security baseline | Labs mapped to identity, threats, operations and risk |
| Core | Cisco cybersecurity progression | Builds on existing Cisco foundation | Networking/security lab evidence |
| Core | GitHub workflow proficiency | Makes evidence professional and reviewable | Issues, branches, PRs, README and clean history |
| Supporting | Microsoft security operations learning | Introduces Sentinel/Defender concepts used in many SOC roles | One Sentinel-style detection/incident comparison |
| Supporting | Google Cloud security fundamentals | Aligns with stated Google interest and cloud-security profile | Cloud-control baseline |
| Applied | Python or PowerShell automation | Enables repetitive SOC task automation | Working utility + tests |
| Applied | MITRE ATT&CK mapping | Strengthens detection/investigation reasoning | Three technique-to-telemetry mappings |
| Professional | Incident communication | Addresses communication-development request | Mentor-reviewed incident summary |
| Career | Junior SOC interview readiness | Converts evidence into employability | Two mock interviews + four evidence-backed answers |
Suggested credential sequencing
First 90 days
Prioritise Wazuh, Windows events, networking, GitHub and Security+ knowledge objectives. Do not overload the sprint with multiple exam preparations.
Months 4–6
Choose one formal certification target only if it directly supports job applications or exposes a clear knowledge gap. Add cloud-security learning and basic automation.
Months 7–12
Select a specialisation milestone based on portfolio evidence and available roles: detection, cloud security or incident response.
Acceptance rule
A credential milestone counts toward the IDR only when it is backed by practical evidence: a reviewed lab, investigation, detection, automation, architecture/control map or mentor-accepted artefact.