Cyber Security Career Track
Six months, one cohort of twenty, and everything the other two courses cover plus the blue-team and career work that turns it into a job.
24wk
Course Length
26
Lessons & Labs
9
Modules
One Path From "I Know Nothing" To Job Ready
Most people trying to learn security start with a hacking tool, get lost, and give up. This programme fixes the order. You start with how a network actually moves a packet, then Linux, then Windows, then the security principles that everything else rests on — and only then do you touch offensive tooling.
It runs as a live cohort of twenty, entirely online, so you get answered questions rather than a video library. The last four weeks are spent on portfolio projects: a network security assessment, a web application pentest with a written report, a working SOC with detections, and a forensic investigation.
Skills You Leave With
- Read and troubleshoot a network the way an analyst does — packets, ports, protocols and subnets.
- Work confidently in both Linux and Windows, including PowerShell and the event log.
- Apply the security fundamentals: CIA, AAA, least privilege, zero trust and risk.
- Run an authorised penetration test end to end and write the report that comes with it.
- Build a working SOC — collect logs, write detections, triage alerts and respond to an incident.
- Finish with four portfolio projects and a career plan targeting real Sri Lankan job roles.
- Attack and defend the same network, and understand both sides properly.
- Run a SOC shift: triage alerts, chase the real ones, write them up.
- Leave with a portfolio of graded work you can show an employer.
- Prepare for interviews with the questions Sri Lankan employers actually ask.
9 Modules, 26 Lessons
- What cybersecurity is and who does what 32 min
- OSI and TCP/IP, layer by layer 48 min
- IP addressing and subnetting you can do by hand 55 min
- Lab: capture and read your own traffic 90 min
- Linux filesystem, permissions, users and processes 50 min
- Bash scripting for real automation 46 min
- Windows internals, registry and PowerShell 52 min
- Lab: build and harden a two-machine lab 120 min
- CIA triad, AAA and the principles that follow 38 min
- Asset, threat, vulnerability, exploit, risk, impact 40 min
- Encryption, hashing, PKI and what TLS really does 54 min
- Assignment: risk-assess a small business —
- How web apps work: HTTP, cookies, sessions, APIs 46 min
- The pentest methodology, recon to reporting 44 min
- OWASP Top 10 with a proxy in your hand 60 min
- Lab: authorised test of a vulnerable application 150 min
- Inside a SOC: tiers, triage and escalation 40 min
- Log sources, SIEM and writing detection rules 52 min
- The incident response lifecycle in practice 44 min
- Lab: detect and contain a live intrusion 150 min
- Project 1: network security assessment —
- Project 2: web pentest and written report —
- Project 3: build a SOC with working detections —
- CV, portfolio, interview prep and certificate —
- Reading logs until the story appears 44 min
- Writing detection rules that do not cry wolf 40 min
- Triage: the first fifteen minutes of an incident 36 min
- Lab: detect and contain the attack you ran last month Graded
- Disk and memory acquisition without destroying evidence 38 min
- Building a timeline from artefacts 42 min
- Lab: reconstruct an intrusion from a disk image Graded
- Turning graded labs into a portfolio worth reading 32 min
- The technical interview, question by question 46 min
- Final project: full assessment, report and defence Graded
"I had tried learning from free videos for a year and kept jumping between tools. Having it in the right order, with someone to ask, is what finally made it click."
— Graduate, Cohort 1LKR 29,900 / course
90 days of lab access after the final session.
- Duration 24 weeks
- Lessons 26
- Graded labs 8
- Level Zero to Job Ready
- Live sessions 2 / week
- Language English & Sinhala
- Certificate Included
Seats fill fast — next cohort opens the first Monday of the month
Tell us which course and when you would like to start — we reply with the next available cohort. Get in touch or call +94 76 759 0967.
- A computer that can run two virtual machines (8 GB RAM or more) and a stable connection.
- No IT background required — the programme assumes nothing.
- Around 8 hours a week for six months, including live sessions.
Nipun Dinudaya
Lead InstructorTeaches every Velpoint course personally, from the first Linux command to the final client-ready report. Cohorts are capped at 20 so every lab submission is reviewed by hand and nobody gets left behind.
Everything You Get Access To
All of this is yours from day one, with 90 days of lab access after the final session.
The Full 24-Week Plan
Week by week, what you learn, what you build and what is due — printed and pinned above your desk.
Home Lab Build Guide
The exact lab topology used throughout: Kali, a Windows target, a Linux server and a vulnerable app.
Report & Project Templates
Pentest report, incident report and forensic findings templates you keep and reuse at work.
Private Cohort Community
A closed group for your batch — questions answered between sessions, plus CTF nights.
Full Lab Environment
Every lab in the programme, resettable, with instructor review on graded submissions.
Job-Ready Pack
CV review, LinkedIn and portfolio guidance, and mock interviews for local analyst roles.
Portfolio Build Guide
How to present your graded labs so a hiring manager sees the thinking, not just the output.
Interview Question Bank
The technical questions Sri Lankan security teams actually ask, with model answers.
Other Courses
Absolute Beginner
Cyber Security Essentials
The honest starting point. Understand how computers, networks and real attacks work, harden your own devices, and build your first lab — no IT background needed.
All Levels
Ethical Hacking & Red Team
Go from your first Nmap scan to a full authorised engagement — recon, exploitation, privilege escalation, Active Directory and a client-ready report.
Not Sure This Is Your Level?
Tell us where you're starting from and we'll point you
to the right course — no obligation.