Loading......
Loading......
Security operations roles are won on judgement: which alert is worth chasing, which vulnerability gets patched first, and what you say when something has gone wrong. This program works against telemetry and scan output rather than slideware, and the capstone is a full incident from first alert to written report.
Every week has its modules, a learning outcome, and an assessed submission with a deadline.
Week 1
Confidentiality, integrity, availability, and the trade-offs between them; networking and identity as attackers see them; cryptography in practice — TLS, hashing, key handling, and what goes wrong; the NIST Cybersecurity Framework, ISO/IEC 27001 controls, and the ACSC Essential Eight; mapping a control set onto a small environment.
By the end of this week you can
Describe a small organisation's control posture against a recognised framework and identify the gaps that matter most.
Assessed this week
Control-gap assessment of a supplied environment, with prioritised findings. Quiz on protocols, identity, and cryptographic use. Due end of week 1.
Week 2
Where telemetry comes from — endpoint, identity, network, cloud; querying a SIEM properly; writing a detection rule and testing it against real behaviour; mapping detections to MITRE ATT&CK techniques; triaging an alert queue; tuning false positives without going deaf to the real thing; the cost of a noisy rule.
By the end of this week you can
Write a detection that fires on genuine attacker behaviour and does not fire on the business doing its job.
Assessed this week
Detection rule set with ATT&CK mapping and documented tuning, tested against a replayed attack dataset. Due end of week 2.
Week 3
Asset inventory as the precondition for everything else; authenticated and unauthenticated scanning; reading CVSS and knowing why it is not a priority order; risk-based prioritisation using exploitability and business context; secure configuration review; the patch and exception process, and how exceptions get abused; reporting to people who own the systems.
By the end of this week you can
Turn raw scanner output into a remediation plan you can defend to an engineering manager who does not want to do it.
Assessed this week
Prioritised remediation plan from a supplied scan, marked on the reasoning behind the order rather than the order itself. Due end of week 3.
Week 4
The incident lifecycle — preparation, detection, containment, eradication, recovery, lessons learned; containment decisions and their business cost; evidence handling and chain of custody; the Notifiable Data Breaches scheme under the Australian Privacy Act, with GDPR awareness for other markets; escalation and who needs to be told; writing an incident report for a non-technical executive.
By the end of this week you can
Run an incident end to end and produce a report that a manager can make decisions from.
Assessed this week
Capstone: a simulated intrusion handled live, followed by a written incident report and a tutor-panel debrief. Interview practice on the same incident. Due end of week 4.
A Genutive Industry Ready Certificate for this pathway, showing the assessed components and your Merit Score, plus a published project showcase and a rebuilt resume.
Yes — all modules, live sessions, and assessments are online. Where a program has a supervised practical component, that part is arranged with a partner provider and is explained in the curriculum for the week it falls in.
It depends on the program, and the consultation is where that gets checked properly. Some pathways assume an existing qualification or trade background; others are entry points. We would rather turn you away than take a fee for a program you cannot complete.
You can enrol from anywhere. Employment, internship, and any supervised practical component depend on your work rights and location, which your advisor will go through with you before you commit.
Based on consultation
Confirmed in your consultation — see Pricing for why we do not publish a single figure.
Book a consultationSign in to EnrolCandidates who reach Career Ready become visible to employers in the Genutive network, with their Merit Score and capstone attached. Introductions depend on employer demand and on your right to work in that market. No placement is guaranteed.
Consultation-led — not instant enrolment
Programs listed here are delivered through partner providers and advisor-led consulting pathways. Certification outcomes depend on program completion and assessment requirements. Genutive does not guarantee employment or visa approval.
Four weeks, online, with the same rhythm every week so you can plan around it.
Two scheduled live sessions each week with the program tutor — one teaching session and one working session for questions, code or case review, and feedback. Sessions are recorded. Tutor time is deliberately limited: it is there for the parts that need a person, not to re-read the modules to you.
Each week releases a set of modules with readings, walkthroughs, and practice tasks. Expect eight to twelve hours of self-paced work a week on top of the live sessions.
A short knowledge check closes each week's modules. You see your result immediately, and you can retake it until you pass — but only the first attempt counts toward your Merit Matrix quiz score.
Every week has a submitted piece of work with a deadline. Tutors mark it and return written feedback. Late submissions are accepted and marked, but on-time submission is what the Merit Matrix rewards.
The final week is a capstone reviewed by a tutor panel. It becomes the centrepiece of your project showcase, which is visible on your Genutive profile.
You are placed in a small peer group for the four weeks. Some tasks are collaborative and peer-reviewed, and collaboration is a scored component of the Merit Matrix — because it is the part of the work employers complain is missing.
Your Merit Score is calculated from four components. It is not a participation award, and it follows you into the job marketplace where employers can see it.
Tutor-marked weekly tasks and the capstone. The largest component, because it is the closest thing to the actual job.
Attendance at the scheduled live sessions. Recordings help you catch up on content, but they do not earn attendance.
First-attempt results on the weekly knowledge checks.
Peer review you give and receive, and contribution to group tasks.
A Merit Score of 70 or above moves your enrolment to Career Ready. That is the point at which the employer network, internship consideration, and marketplace visibility open up. Below 70 you keep the certificate of completion and can be reassessed, but Career Ready is a threshold, not a formality.
Internship placement is offered to successful candidates only. "Successful" means you complete the program and reach the Career Ready threshold of 70 on the Merit Matrix. Even then, a placement depends on a partner or employer having a suitable position open at the time, in a location where you hold the right to work. Genutive does not guarantee an internship, and does not guarantee a job. What we do guarantee is that you will be visible to the employers in our network with real, assessed evidence attached to your name rather than a claim on a resume.
A Genutive Industry Ready Certificate naming the program, the assessed components, and your Merit Score. It records what you actually did, which is why we can put the score on it.
Your capstone is published to your Genutive profile with the tutor panel's review, so an employer can look at the work rather than take your word for it.
A resume rebuilt around what you can now evidence, plus interview practice for the specific roles the program targets.
Career Ready candidates become visible to employers in the Genutive network and can be matched to roles in the job marketplace.
Program fees are set during your consultation. They depend on the program, your starting point, and whether a partner provider is delivering a regulated component alongside it — so a single advertised price would be misleading more often than it was accurate. The consultation is where you find out the fee, and there is no obligation attached to it.
Book a consultation