v2.0.0 - The Complete Cybersecurity Career Handbook (Second Edition)

Choose Your Cybersecurity Path Wisely - Second Edition

The complete, free, open-source cybersecurity career handbook covering 36 specialized roles across offensive security, defensive security, and governance, risk, and compliance (GRC).

Whether you're a student picking your first direction, a career changer coming from IT or development, or a junior analyst deciding where to specialize, this handbook walks you through every role the same way so you can compare them side by side.

---

What's Inside

🔴 Offensive Security (12 Roles)

Network Pentesting, Bug Bounty Hunting, Web App Pentesting, AI/ML Pentesting, Cloud Pentesting, Mobile Pentesting, IoT/OT Pentesting, Wireless Pentesting, ICS Pentesting, Exploit Development, Malware & C2 Development, Red Teaming

🔵 Defensive Security (24 Roles)

AppSec, Incident Handling, Network Security, Vulnerability Assessment, SOC Operations, Endpoint Security, Digital Forensics, Incident Response, DevSecOps, Secure Coding, Cloud Security (3 tracks), Cloud DFIR, ICS Security Ops, ICS DFIR, Cryptography, Detection Engineering, Malware Analysis, Reverse Engineering, Threat Intelligence, Threat Hunting, OSINT, Hardware Security

⚖️ Governance, Risk & Compliance (7 Topics)

Governance Frameworks, Risk Management, Compliance, Risk Assessments, GRC Tooling, Regulatory Frameworks, GRC Career Strategy

---

Highlights of the Second Edition

• 36 roles (up from 35) with the addition of AI and ML Penetration Testing
• 150+ curated tools verified for current relevance and mapped to proficiency levels
• 50+ certifications organized into Beginner, Intermediate, and Advanced tiers per domain
• 10 architecture diagrams covering attack lifecycles, defense-in-depth, DevSecOps pipelines, and GRC frameworks
• Interactive Career Tracker: fork the repo and check off milestones as you study
• Modular chapter structure: each chapter lives in its own file for cleaner navigation
• "Find Your Path in 60 Seconds": a quick-match table to narrow your starting point
• Community templates for role proposals, resource updates, and structured PRs

Every Role Covers

Section	What You Get
Definition	What the job involves day to day, in plain language
Why It Matters	Real-world impact and business value
Skills Table	Key skills with proficiency levels and rationale
Tools Table	Industry tools mapped to purpose and skill level
Real-World Scenario	A realistic incident or engagement walkthrough
Certification Roadmap	Beginner → Intermediate → Advanced certification grid
Career Progression	Entry-level to senior role trajectory

Project Structure

chapters/
  01-foreword.md
  02-how-to-use.md
  03-chapter-1.md    ← Understanding the Cybersecurity Landscape
  04-chapter-2.md    ← Offensive Security (12 Roles)
  05-chapter-3.md    ← Defensive Security (24 Roles)
  06-chapter-4.md    ← GRC (7 Topics)
  07-chapter-5.md    ← Charting Your Journey
  08-appendices.md   ← Certifications, Tools, Resources, Glossary

Quick Links

• 📖 Read the full handbook on GitHub
• 📕 Read on Vault Reader (interactive + PDF)
• 📋 Career Readiness Tracker
• 🤝 Contributing Guide

---

If this handbook helped you choose a direction, a ⭐ helps the next person find it.