Free Roadmap

Become a Cybersecurity Analyst from scratch

One of the fastest-growing, highest-paid tech fields. Go from zero to job-ready in about five months — with hands-on labs, CTFs, and cert prep.

22
weeks · ~10–12 hrs/wk
5
hands-on projects
4
phases · to job-ready
₹0
free labs & tools
The one rule

Learn → practice in a lab → document it

Security is a hands-on craft. Everything below is practiced in your own legal lab (TryHackMe, HackTheBox). Only ever test systems you own or are authorized to test.

Important: Legal & ethical use only. Everything here is for authorized testing, your own lab, or educational platforms. Never attack systems you do not own or have explicit written permission to test — unauthorized access is a crime.
Where This Leads

Career outcomes

Roles you can apply for

Security AnalystSOC AnalystPenetration TesterSecurity Engineer

Who it suits: You're curious about how systems break, and you enjoy methodical problem-solving.

₹5–12 LPA
typical starting range in India

Indicative 2026 starting ranges in India — actual pay varies widely by city, company, and skill. Salary is an outcome of skill and a strong project portfolio, not a guarantee.

The Roadmap

Four phases, step by step

0

Foundations

Weeks 1–5

How computers, networks, and systems actually work.

Week 1

Networking

TCP/IP, DNS, HTTP, ports, packets.

Week 2

Linux basics

Command line, permissions, bash.

Week 3

Windows & systems

Processes, Active Directory basics.

Week 4

Security fundamentals

CIA triad, threats, attack surface.

Week 5

Cryptography basics

Hashing, encryption, certificates.

1

Offensive Basics

Weeks 6–11

Think like an attacker — ethically and legally.

Week 6

Recon & scanning

Nmap, footprinting, enumeration.

Week 7

Web vulnerabilities

The OWASP Top 10 hands-on.

Week 8

Exploitation basics

Metasploit and common payloads.

Week 9

Password attacks

Hashcat, John the Ripper, wordlists.

Week 10

Network attacks

Sniffing, MITM, wireless basics.

Week 11 · Project ▶

Lab writeup

Compromise a vulnerable VM and document it.

2

Defensive & Tooling

Weeks 12–17

Detect, respond, and defend — the blue team.

Week 12

Blue team & SIEM

Log analysis, Splunk/ELK basics.

Week 13

Firewalls & IDS/IPS

Network defense fundamentals.

Week 14

Incident response

Detect, contain, eradicate, recover.

Week 15

Malware analysis

Safe static analysis basics.

Week 16

Security scripting

Python for automation and tooling.

Week 17 · Project ▶

Home SOC lab

Set up log monitoring and catch an attack.

3

Practice & Certs

Weeks 18–22

Build proof and prepare for your first cert.

Week 18

Guided rooms

TryHackMe / HackTheBox learning paths.

Week 19

Capture The Flag

CTF challenges to sharpen skills.

Week 20

Cert prep

Study for CompTIA Security+.

Week 21

Reporting

Professional vulnerability reports.

Week 22 · Capstone ▶

Pentest report

A full assessment writeup on a lab network.

Build a Portfolio

Five projects that get you hired

Projects beat certificates. Do them in order — each builds on the last. Put every one on GitHub with a clear README.

Start here

1 · Home Lab Setup

VirtualBox + Kali + a vulnerable VM. Your legal practice range.

Offensive

2 · Vulnerability Writeup

Exploit a TryHackMe box and document every step.

Practice

3 · CTF Walkthroughs

Solve Capture-The-Flag challenges and publish your solutions.

In demand

4 · Home SOC / Monitoring

Collect logs, build alerts, and detect a simulated attack.

Capstone

5 · Full Pentest Report

A professional penetration-test report on your lab network.

Learn It

Learning resources

Click any resource to open it — free and well-known first, then build something with it.

Universal (any field): roadmap.sh · freeCodeCamp · GitHub Student Pack · Coursera

Do This Today

Your first step (takes 30 minutes)

1. Install VirtualBox + Kali

Free virtualization + the standard security Linux distro.

2. Get a TryHackMe account

tryhackme.com — guided, legal, beginner-friendly hacking labs.

3. Finish one room

Complete the 'Intro to Cyber Security' path today. You've started.

Not sure which path is right for you?

PathAhead helps you choose the career that fits you — with guidance built for Intermediate students. Explore every roadmap in one place.

This roadmap is a free educational resource. Timelines are a guide — everyone learns at a different pace. Referenced resources (TryHackMe, HackTheBox, freeCodeCamp, Professor Messer, OWASP) are for learning only and are not affiliated with PathAhead.