Skip to content

Future-Ready Learners · Cybersecurity · Cohort 01

You ship to the cloud every day. Now learn to defend it.

A 6-month, 90-hour cybersecurity program built for DevOps, SRE and cloud engineers. Ten hands-on labs, six OEM certification tracks, and 30 hours inside a working industry lab on patented, licensed enterprise security tools. Taught by dedicated trainers with 8 to 10+ years of industry experience.

  • Starts · Sun, 1 Nov 2026
  • Duration · 6 months · Nov–Apr
  • Schedule · Weekends, IST
  • Cohort · 30 seats only

Who this cohort is for

Engineers who already run production

You know pipelines, containers and at least one cloud. This program adds the security layer your team keeps asking someone else to own.

You are

  • DevOps, SRE, platform or cloud engineer
  • 2–10 years in IT operations or delivery
  • Moving toward DevSecOps, cloud security or SOC roles

You bring

  • Comfort with Linux and the command line
  • TCP/IP and networking basics
  • Working use of AWS, Azure or GCP

You leave with

  • Up to 6 OEM certifications
  • A 10-piece security portfolio from real tools
  • A capstone you can walk an interviewer through

Format

90 contact hours over 26 weeks

About 3.5 hours a week. Built to sit beside a full-time job, with self-paced OEM coursework between sessions.

  • Live hands-on labs10 weekend sessions, 4 hours each40
  • Certification and lab clinicsExam prep, lab catch-up, capstone reviews20
  • Industry lab immersionThree 10-hour blocks on licensed enterprise tools30

Six-month roadmap

From telemetry to a working SOC, one month at a time

Every session ends with a deliverable you keep. Each one also shows where it plugs into a DevOps pipeline.

  1. Month 1: Foundations and the perimeter

    Nov 2026
    NSE 1NSE 2
    S01 · 4 HRS

    Threat lifecycle, lab setup and telemetry basics

    Tools:
    Wazuh · Elastic · Wireshark
    You deliver:
    Topology diagram, log inventory, baseline events

    DevOps angle: Ship container and CI runner logs to the SIEM

    S02 · 4 HRS

    Network security (NGFW): policy, segmentation, visibility

    Tools:
    FortiGate · Palo Alto · Sophos
    You deliver:
    Firewall policy set, annotated logs, change notes

    DevOps angle: Policy-as-code review in a pull request

  2. Month 2: Applications and endpoints

    Dec 2026
    SC-900Industry lab · Block 1
    S03 · 4 HRS

    Web application firewall: deployment and tuning

    Tools:
    FortiWeb · Cloudflare · Barracuda WAF
    You deliver:
    WAF tuning report, blocked-events analysis

    DevOps angle: WAF rules shipped with the app's IaC

    S04 · 4 HRS

    Endpoint security (EDR): alert triage and containment

    Tools:
    SentinelOne · CrowdStrike
    You deliver:
    Triage worksheet, containment evidence, IOC list

    DevOps angle: EDR coverage for build agents and bastions

  3. Month 3: Testing what you ship

    Jan 2027
    Qualys VMDR
    S05 · 4 HRS

    Application security: DAST scan, validate, report

    Tools:
    Burp Suite · Qualys · Metasploit · OWASP ZAP
    You deliver:
    Mini VAPT report, validated findings, remediation proof

    DevOps angle: ZAP baseline scan as a pipeline gate

    S06 · 4 HRS

    Zero Trust and IAM: access governance essentials

    Tools:
    Zscaler · Okta · SailPoint
    You deliver:
    Access matrix, access-review decisions

    DevOps angle: Least-privilege roles for pipelines and service accounts

  4. Month 4: Cloud and data

    Feb 2027
    PANW Network Security ProIndustry lab · Block 2
    S07 · 4 HRS

    Cloud security and CASB: misconfiguration and controls

    Tools:
    Netskope CASB
    You deliver:
    Five-item misconfiguration checklist, cloud baseline controls sheet

    DevOps angle: Misconfig checks before terraform apply

    S08 · 4 HRS

    Data security (DLP) and email security

    Tools:
    Netskope · Forcepoint · Barracuda Email · FortiMail
    You deliver:
    DLP rule evidence, email-security decision tree

    DevOps angle: Secret and PII leakage checks on repos and buckets

  5. Month 5: Investigate and respond

    Mar 2027
    PANW Security Operations Pro
    S09 · 4 HRS

    Digital forensics: acquire, preserve, analyse, timeline

    Tools:
    FTK Imager · MSAB · OpenText · Autopsy
    You deliver:
    Hashes, chain-of-custody form, incident timeline

    DevOps angle: Snapshot-based evidence capture for cloud VMs

    S10 · 4 HRS

    SOC and SOAR: detection engineering, playbooks, capstone

    Tools:
    Seceon · Wazuh · ELK (Sigma)
    You deliver:
    Detection rule, SIEM dashboard, SOAR playbook

    DevOps angle: Detections stored and versioned in Git

  6. Month 6: Capstone and SOC floor

    Apr 2027
    Capstone defencePortfolio reviewIndustry lab · Block 3

    Finish the capstone: detect, contain and report a staged cloud breach end to end, then defend it on the SOC floor in front of practitioners. Portfolio review and demo day close the cohort.

30 hours · Industry lab immersion

Train on the tools production SOCs pay for

Most courses stop at open-source simulators. Three times during the program, you work inside a real industry security lab on patented, licensed enterprise platforms, guided by the practitioners who run them.

Block 1 · December

Perimeter and endpoint

Next-gen firewall policy, WAF tuning and EDR triage on licensed FortiGate, Palo Alto, FortiWeb, SentinelOne and CrowdStrike consoles.

Block 2 · February

Identity, cloud and data

Zero Trust access, CASB posture checks and DLP rules on Zscaler, Okta, Netskope and Forcepoint, against cloud workloads you deploy.

Block 3 · April

Forensics and the SOC floor

Evidence acquisition with FTK Imager and MSAB, then a live detection and response shift on Seceon SIEM/SOAR. Capstone defence happens here.

  • FortiGate
  • Palo Alto NGFW
  • FortiWeb
  • Cloudflare WAF
  • SentinelOne
  • CrowdStrike
  • Burp Suite
  • Qualys
  • Zscaler
  • Okta
  • SailPoint
  • Netskope
  • Forcepoint
  • FortiMail
  • FTK Imager
  • MSAB
  • Autopsy
  • Seceon
  • Wazuh
  • ELK + Sigma

Your trainers

Taught by practitioners with 8 to 10+ years in the field

Every trainer has spent eight to ten years or more doing this work in industry, across network security, SOC operations, cloud security and digital forensics. They teach the way they work, and they stay with the cohort from the first lab to the capstone.

  • 8–10+

    years of industry experience, per trainer

  • Hands-on

    trainers who run firewalls, SOCs and investigations on the job, not just teach them

  • Dedicated

    the same mentors for all six months, reviewing every deliverable and your capstone

OEM certification tracks

Six certifications from four vendors

Each track is timed to the lab that teaches it, so you sit the exam right after using the product.

  • Fortinet

    NSE 1 — Threat Landscape

    Threat actors, attack methods, cybersecurity first principles.

    Month 1
  • Fortinet

    NSE 2 — Technical Introduction

    Core security technologies and career pathways.

    Month 1
  • Microsoft

    SC-900 Security, Compliance & Identity

    Entra ID, Zero Trust, Defender, Purview.

    Month 2
  • Qualys

    VMDR

    Asset inventory, scanning, prioritisation, patch workflows.

    Month 3
  • Palo Alto Networks

    Network Security Professional

    NGFW, cloud-delivered security, SASE, enterprise DLP.

    Month 4 · ~32h 30m self-paced
  • Palo Alto Networks

    Security Operations Professional

    SOC processes, investigations, automation, Cortex.

    Month 5 · ~5h 15m self-paced

Fee

One fee. GST included. No add-ons.

The fee covers the full six-month program.

ComponentList
Program fee₹84,745.76
GST @ 18%₹15,254.24
You pay₹1,00,000

Includes 90 contact hours, all lab access, industry lab blocks and the Drisyon completion certificate.

GST tax invoice issued in your name or your employer's, for reimbursement.

Reserve your seat

Talk to us and reserve your seat.

  1. 1Send an enquiryTell us a little about your role. The course team replies within one working day.
  2. 220-minute technical screenA quick call about your cloud and Linux experience, so the cohort is the right fit.
  3. 3Reserve and onboardWe confirm your seat and fee, then send the calendar, lab access and OEM portal sign-up by 31 October.

Prefer to talk first?

Speak to the course team

Email reachus@drisyon.com and we'll call you back.

Enquire about Cloud Security Cohort 01

Starts 1 November 2026 · 30 seats · ₹1,00,000 incl. GST

We'll only use your details to reply. Or email us at reachus@drisyon.com.

Questions

Before you apply

When do sessions run?

Live labs run on weekends in IST, about two per month. Clinics fill the weeks in between. The full calendar goes out at orientation on 1 November. There is no session on Diwali weekend.

What if I miss a session?

Each lab is recorded, and the next clinic slot is used to finish the missed deliverable with a mentor. Industry lab blocks are in person and are scheduled with four weeks' notice.

Do I need my own cloud account or licences?

No. Lab environments and all enterprise tool access are provided. A laptop with 16 GB RAM and a stable connection is enough.

Why only 30 seats?

Industry lab consoles and mentor time are limited. Thirty keeps every learner hands-on during each block.

Which certificate do I get?

A Drisyon completion certificate on finishing all ten deliverables and the capstone, plus the OEM certifications you pass through each vendor's own platform.

Can my company sponsor me or send a team?

Yes. A GST tax invoice can be issued to your employer, and one order can cover up to 10 seats. For larger teams, talk to us.

Terms · Refund policy · Privacy · Contact

Enquire · ₹1,00,000