All programs
Bootcamp

Cybersecurity Associate Bootcamp

Three days, three hands-on labs: map attacker behavior with MITRE ATT&CK, close control gaps with Purple Teaming, and prove your defenses work with Breach and Attack Simulation.

A three-day, instructor-led bootcamp for beginner-to-intermediate learners. Each day builds on the last: on Day 1 you learn to understand attacker behavior with MITRE ATT&CK, on Day 2 you defend by finding and fixing identity and security-control gaps with Purple Teaming, and on Day 3 you validate whether defenses actually work using Breach and Attack Simulation.

Every day has one clear learning outcome and one required hands-on lab from AttackIQ Academy, followed by a focused team scenario. The bootcamp ends with a capstone assessment of a simulated organization and a short security briefing, and you leave knowing how to describe the work on your resume, on LinkedIn and in interviews.

How it works

Built to be finished, not just started.

  • One outcome a day

    Each day is built around a single learning outcome, so you always know what you are working toward.

  • One core lab a day

    Every day has one required hands-on lab from AttackIQ Academy. Extra labs are guided or optional, never piled on.

  • Focused scenarios

    Short, integrated exercises that apply the day's skill to a realistic organization instead of a stack of separate assignments.

  • Debriefs, then a capstone

    Days 1 and 2 close with a two-to-three-minute team debrief. Day 3 is the capstone, ending in a concise security briefing.

  • Career skills built in

    Each day ties the hands-on work to real roles and to how you will describe it on a resume, on LinkedIn and in an interview.

The progression

Understand. Defend. Validate.

Day 1UnderstandCybersecurity Foundations & MITRE ATT&CKCore skillMap attacker behavior
Day 2DefendIAM, Security Controls & Purple TeamingCore skillIdentify and remediate control gaps
Day 3ValidateSecurity Validation, Threat Emulation & BASCore skillDetermine whether defenses work

Day 1 · Understand

Cybersecurity Foundations & MITRE ATT&CK

Learning outcome

By the end of Day 1, you will be able to explain the fundamentals of MITRE ATT&CK, identify basic attacker behaviors, map those behaviors to relevant ATT&CK tactics and techniques, and recommend basic defensive controls.

Cybersecurity foundations

  • What cybersecurity is and why it matters
  • Common cyber threats and vulnerabilities
  • Confidentiality, Integrity and Availability (CIA)
  • A brief overview of the Security Operations Center (SOC) and Governance, Risk and Compliance (GRC)
  • Basic network-defense concepts

MITRE ATT&CK fundamentals

  • What the MITRE ATT&CK framework is
  • ATT&CK tactics versus techniques
  • How attacker behaviors are represented
  • How defenders use ATT&CK
  • Introduction to threat-informed defense
Required lab · AttackIQ Academy

Foundations of Operationalizing MITRE ATT&CK

Guided activity

Introduction to MITRE ATT&CK Navigator

  1. 1Instructor-led mapping of one or two attacker behaviors
  2. 2Connect the ATT&CK techniques you identify to basic defensive controls
Scenario exercise

Cybersecurity threat identification

  1. 1Identify two or three cybersecurity risks.
  2. 2Map one or two attacker behaviors to relevant MITRE ATT&CK tactics or techniques.
  3. 3Recommend one basic defensive control for each behavior you identified.
Present2–3 min

Team debrief

  • One risk you identified
  • One ATT&CK technique you selected
  • One defensive control you recommend
Career

Career development

  • SOC, GRC and risk, and security-operations career paths
  • How MITRE ATT&CK skills relate to cybersecurity roles
Optional enrichment
  • AttackIQ: Top ATT&CK Techniques
  • Further exploration of MITRE ATT&CK Navigator

Day 2 · Defend

IAM, Security Controls & Purple Teaming

Learning outcome

By the end of Day 2, you will be able to identify basic identity and access management (IAM) and security-control weaknesses, apply least-privilege concepts, explain the purpose of Purple Teaming, and recommend simple remediation and validation actions.

IAM and access control foundations

  • Identification, authentication and authorization
  • Role-Based Access Control (RBAC)
  • The principle of least privilege
  • Need-to-know
  • Separation of duties
  • Why excessive access creates organizational risk

Administrative security controls

  • Policies and procedures
  • Security awareness
  • Basic governance and compliance
  • How administrative controls support technical controls

Threat-informed defense and Purple Teaming

  • Red team versus blue team
  • The purpose of Purple Team collaboration
  • Why security teams test their detection capabilities
  • Identifying security-control gaps
  • Remediation and retesting
Required lab · AttackIQ Academy

Foundations of Purple Teaming

Guided activity

Emulation Planning for Purple Teams

  1. 1Select one ATT&CK technique.
  2. 2Define what the red team would simulate.
  3. 3Define what the blue team should detect.
  4. 4Decide the right remediation if the control fails.
Scenario exercise

IAM and Purple Team security assessment

  1. 1Identify two or three IAM or security-control weaknesses.
  2. 2Recommend an appropriate access-control improvement.
  3. 3Choose one attacker behavior or ATT&CK technique that could exploit a weakness.
  4. 4Explain what the blue team should detect and how the organization should remediate the issue.
Present2–3 min

Team security debrief

  • One IAM weakness
  • One recommended control
  • One ATT&CK technique or attacker behavior
  • How a Purple Team could validate the control
Career

Career development

  • Practice explaining the day's hands-on work in an interview.
“I assessed common IAM weaknesses, applied least-privilege principles, and learned how Purple Teams validate defensive controls.”
Optional enrichment
  • Complete the full Emulation Planning for Purple Teams lab

Day 3 · Validate

Security Validation, Threat Emulation & BAS

Learning outcome

By the end of Day 3, you will be able to identify key security-control gaps, explain how Breach and Attack Simulation (BAS) and threat emulation help validate defenses, recommend prioritized improvements, and communicate findings in a concise security briefing.

Security controls review

  • Administrative controls: policies, procedures and governance
  • Technical controls: firewalls, authentication and security monitoring
  • Physical controls: facilities, devices and environmental protections
  • The core question: how do we know these controls actually work?

BAS and threat emulation

  • Breach and Attack Simulation (BAS)
  • Continuous security validation
  • Adversary emulation
  • Detection coverage and visibility gaps
  • Testing defensive controls
  • Using MITRE ATT&CK as a validation reference
Required lab · AttackIQ Academy

Foundations of Breach & Attack Simulation

Guided activityInstructor demonstration

Leveraging BAS to Operationalize MITRE ATT&CK

  1. ATT&CK technique
  2. Security control
  3. Validation test
  4. Detection result
Scenario exercise

Capstone: Horizon Community Services security validation assessment

  1. 1Identify the organization's top three cybersecurity risks.
  2. 2Map one realistic attacker path to relevant MITRE ATT&CK techniques.
  3. 3Recommend three priority security controls or improvements.
  4. 4Design one simple Purple Team or BAS test to check whether a selected control works.
  5. 5Prioritize the organization's next security actions and explain why.
Present3–5 min per team

Final briefing: cybersecurity risk and validation

  • Top risk
  • Relevant ATT&CK behavior
  • Recommended security control
  • How the team would validate the control
  • Top recommendation for the organization
Career

Career translation

  • Turn the bootcamp's work into resume, LinkedIn and interview language.
“Applied MITRE ATT&CK to identify attacker behaviors and recommend defensive controls.”
“Assessed IAM and security-control weaknesses and applied least-privilege principles.”
“Developed a basic Purple Team and BAS validation approach for a simulated organization.”
“Presented cybersecurity risk and security-control recommendations to stakeholders.”
Optional enrichment
  • Agentless Threat Emulation

At a glance

The workload, day by day.

DayRequired labGuided activityScenarioPresentation
Day 1 · UnderstandFoundations of Operationalizing MITRE ATT&CKATT&CK Navigator3 focused tasks2–3 min debrief
Day 2 · DefendFoundations of Purple TeamingEmulation Planning4 focused tasks2–3 min debrief
Day 3 · ValidateFoundations of Breach & Attack SimulationBAS + MITRE ATT&CK5 integrated tasks3–5 min final briefing

What you leave with

Proof of work, and the words to describe it.

On completionVTF Cybersecurity Associate Bootcamp Certificate of CompletionVerifiable by anyone with its certificate code.
  • Completed the core AttackIQ Academy labs
  • Applied MITRE ATT&CK to cybersecurity scenarios
  • Identified and assessed cybersecurity and IAM risks
  • Recommended defensive and access-control improvements
  • Developed a basic Purple Team and BAS validation approach
  • Presented in a final Cybersecurity Risk & Validation Briefing
  • Practiced turning hands-on work into resume, LinkedIn and interview language

Free for members

Ready for Day 1?

Join free, then enroll to save your place.

Join free to enrollSign in