Skip to content
Program

Cybersecurity with AI

Security teams are drowning in alerts. We train analysts who use AI to cut through the noise, hunt threats at machine speed, and automate the response.

Apply for this programTuition (TBD)
Duration
24 weeks
Format
Live online + on-demand labs
Commitment
15–20 hrs/week (part-time track available)
Level
Beginner to job-ready
Tuition
TBD
Next cohort
January 12, 2027
What you will do

The shape of the program.

  • Build a home-lab SOC from scratch, then defend it against live red-team exercises.

  • Use LLMs for log triage, malware summarisation, phishing analysis, and detection engineering.

  • Graduate with a portfolio of detections, incident reports, and automation playbooks.

By graduation you can

  • Run a full detection-engineering lifecycle: hypothesis, rule, test, tune, deploy
  • Triage and contain incidents using SOAR playbooks you wrote yourself
  • Apply the MITRE ATT&CK framework to real telemetry
  • Harden Linux, Windows, and cloud workloads against current TTPs
  • Evaluate and secure AI systems: prompt injection, data leakage, model abuse

Tools & platforms

  • Splunk
  • Microsoft Sentinel
  • Elastic
  • Suricata
  • Zeek
  • Velociraptor
  • CrowdStrike
  • Burp Suite
  • Sigma
  • Python
  • OpenAI / Claude APIs
  • Wazuh

Certifications you will be ready for

  • CompTIA Security+
  • CompTIA CySA+
  • Microsoft SC-200
  • AWS Security Specialty

Roles graduates target

  • SOC Analyst (Tier 1–2)TBD
  • Detection EngineerTBD
  • Incident ResponderTBD
  • AI Security EngineerTBD

Roles our graduates target. Compensation data is not published here and no particular outcome is guaranteed.

Curriculum

24 weeks, four phases, one portfolio.

Each phase ends with a graded lab reviewed by an instructor. Nothing is auto-marked.

  1. Weeks 1–5

    Foundations & Network Defense

    • TCP/IP, routing, and packet analysis with Wireshark
    • Linux and Windows internals for defenders
    • Building your cloud-hosted lab environment
    • Identity, access control, and zero-trust fundamentals

  2. Weeks 6–10

    Offensive Tradecraft

    • Recon, exploitation, and post-exploitation basics
    • Web application attacks (OWASP Top 10) hands-on
    • Active Directory attack paths and privilege escalation
    • Writing attack simulations to validate your defenses

  3. Weeks 11–17

    Detection Engineering & AI

    • SIEM architecture, log pipelines, and data normalisation
    • Sigma rules, KQL, and detection-as-code with CI
    • LLM-assisted alert triage and enrichment pipelines
    • Anomaly detection and behavioural baselining

  4. Weeks 18–24

    Incident Response & AI Security

    • Full IR lifecycle, forensics, and executive reporting
    • SOAR automation: containment, enrichment, ticketing
    • Securing LLM applications and agentic workflows
    • Capstone: 72-hour live-fire defense exercise
Other programs

Not quite the right fit?

Advisors regularly steer applicants toward a different track. Nobody benefits from you being in the wrong one.

DevOps Engineering with AI

Ship reliable systems with infrastructure as code, CI/CD, Kubernetes, and AI-assisted operations.

View program

AI Automation Engineer

Design, build, and ship AI agents and automations that replace real business workflows.

View program
Compare all programs

Ready to start Cybersecurity with AI?

The next cohort begins January 12, 2027. Applications take about ten minutes and there is no fee.

Apply for AdmissionTalk to an advisor

Tuition: TBD — pricing information available upon request at admissions@aiskool.us