🎓 Network Security Engineering Practical Training Program

🔐 Building Cyber Defenders for a Digital-First World

---

📌 Program Overview

With growing digital transformation, cybersecurity is no longer optional — it’s a necessity. This Network Security Engineering Practical Training Program by Stunited CIC equips UK-based students and graduates with hands-on skills to protect digital assets. Focused on real-world security tools and scenarios, this program helps interns understand system vulnerabilities, network architecture, ethical hacking, and incident response — preparing them for careers in cybersecurity, IT support, and security operations.

---

🎯 Core Learning Objectives

• Understand network security concepts, architecture, and protocols

• Use Wireshark, Kali Linux, and Metasploit for hands-on network analysis and ethical hacking

• Learn to configure firewalls, routers, and simulate attacks using Cisco Packet Tracer or GNS3

• Develop security event monitoring skills using Splunk or ELK Stack

• Explore vulnerability management, penetration testing, and system hardening

• Apply version control and document findings using Git and GitHub

---

🧩 Detailed Course Structure

---

1. Network Security Fundamentals

Tools: None (theory + diagram practice)

• OSI Model, TCP/IP

• Firewalls, NAT, VPNs

• Protocols: HTTPS, SSH, TLS

• Common network threats (MITM, DDoS, sniffing)

---

2. Traffic Analysis with Wireshark

Tools: Wireshark

• Packet capturing and filtering

• Identify anomalies and threats in traffic

• Protocol dissection

• Detect DNS spoofing or ARP poisoning
  📘 Assignment: Analyze a sample PCAP file and detect potential attack attempts

---

3. Ethical Hacking & Exploits

Tools: Metasploit Framework

• Understanding vulnerabilities and CVEs

• Simulate attacks in a safe lab

• Exploiting open ports/services

• Payloads and backdoors
  📘 Assignment: Launch a basic exploit in a test VM and document results

---

4. Security-Focused OS & Tools

Tools: Kali Linux

• Hands-on with Nmap, Burp Suite, Hydra

• Password cracking and brute-force attacks

• Reconnaissance and scanning

• Web app testing basics
  📘 Assignment: Use Nmap to scan a mock network and report vulnerabilities

---

5. SIEM & Log Monitoring

Tools: Splunk or ELK Stack (Kibana)

• Indexing and searching logs

• Correlation rules for threat detection

• Build basic dashboards

• Understand event logs, alerts, and KPIs
  📘 Assignment: Monitor logs and identify a brute-force login attempt pattern

---

6. Network Simulation & Design

Tools: Cisco Packet Tracer or GNS3

• Simulate enterprise network topology

• Configure routers, switches, ACLs

• Simulate attacks and defense protocols
  📘 Assignment: Design a segmented network with basic firewall rules

---

7. System Hardening & Patch Management

Tools: Windows/Linux VM

• Disable unused ports/services

• Configure strong policies

• Regular updates and patching

• Role-based access control (RBAC)
  📘 Assignment: Harden a Linux server image and document changes

---

8. Incident Response & Security Policies

Tools: Google Docs + Scenario-based tasks

• Build an Incident Response Plan (IRP)

• Understand disaster recovery concepts

• Roleplay breach simulation
  📘 Assignment: Create IRP for a ransomware attack in a small business

---

9. Documentation & Version Control

Tools: Git / GitHub

• Document scan reports, patching steps

• Maintain commit history of changes

• Submit tasks and code via GitHub
  📘 Assignment: Push your project folder to GitHub with proper README.md and commit history

---

10. Final Capstone Project

Tools: Mix of Kali, Wireshark, GitHub

• Choose project: Website security audit / Wi-Fi threat model / Employee phishing simulation

• End-to-end execution: Scan → Exploit → Harden → Report

• Present to peers via Zoom
  📘 Assignment: Submit report + GitHub repo + video walkthrough

---

🧪 Training Methodology

🔧 Practical Work

• Simulated labs and hands-on walkthroughs

• Tool-based assignments

• Virtual machine or cloud sandbox environments

🏢 Industry Integration

• UK data privacy/GDPR practices

• Align with NCSC (UK) security guidance

• Business case studies: retail breaches, ransomware, university systems

---

✅ Expected Outcomes

📊 Technical Mastery

• Confident in analyzing packets and logs

• Build and test secure network environments

• Perform entry-level penetration testing

🚀 Professional Readiness

• Report writing and documentation

• Understand SOC operations

• Work-ready for junior roles in IT security

🎯 Career Boost

• GitHub-based portfolio

• Internship certificate

• Strong base for Security+, CEH, or CompTIA training

---

📝 Assessment Framework

📍 Weekly Evaluation

• Wireshark analysis task

• Splunk dashboard

• GitHub report submissions

• IRP creation

🏅 Final Certification

• Capstone project

• GitHub repository

• Live or recorded presentation

---

💼 Job Roles This Program Prepares You For

• Network Security Intern

• SOC Analyst – Level 1

• Junior Penetration Tester

• IT Support with Security Focus

• Security Operations Assistant