SKILL BENCHMARK
SecOps Mastery (Expert Level)
- 27m
- 33 questions
The SecOps Mastery benchmark measures whether a learner has mastery of the SecOps practice with extensive experience with SecOps tools, processes, and security thought leadership. A learner who scores high on this benchmark demonstrates professional mastery in all of the major areas of the SecOps discipline, across a variety of different platforms and deployments. This learner works and acts almost 100% independently of others and is seen as a leader in the industry.
Topics covered
- acquire and analyze security requirements by applying requirements engineering techniques
- analyze and mitigate malware threats
- analyze and utilize appropriate security metrics
- analyze the danger of insider threats and take mitigating steps
- apply cloud security methods and techniques
- apply delivery in a secure manner on an ongoing or continuous basis
- apply failure analysis techniques to cybersecurity
- apply filtering and data validation
- apply infrastructure hardening
- deploy software in a safe and secure manner
- describe and implement security engineering techniques
- describe and integrate threat mitigation concepts into security operations
- describe and utilize metrics appropriate for software security
- describe approaches to ransomware mitigation
- describe cloud and IoT concepts and how they impact security
- describe cloud architecture, types of clouds, and the use of cloud technology
- describe common threats to IoT and cloud
- describe essential failure analysis
- describe IoT concepts and usage
- describe SecOps engineering concepts
- describe secure coding concepts
- describe security modeling techniques, including the CIA Triangle and the McCumber Cube
- describe the threat of using insecure protocols and how to mitigate that threat
- describe the threats posed by phishing and integrate mitigation steps into security operations
- describe threats to web sites
- harden operating systems to mitigate threats
- implement IoT security for a wide range of IoT devices
- implement security verification and validation in software projects
- integrate mitigation for social engineering into security operations
- integrate systems engineering into cybersecurity operations
- respond effectively to DoS attacks
- use cyberthreat intelligence and integrate it into mitigation strategies
- use the Security Modeling Language
