Cyber Security Technician

Classify SME information assets by CIA (Confidentiality, Integrity, Availability) requirements and conduct a controls inventory

Research real-world SME breaches and map attack patterns

Capture and analyse basic network traffic using Wireshark

Explore web vulnerabilities (SQLi, XSS) with OWASP WebGoat

Encrypt files using GPG and inspect TLS certificates

Classify data assets by sensitivity level

Produce a security landscape assessment for your SME

Map threat actors to SME industry using MITRE ATT&CK Navigator

Conduct attack surface analysis of an SME digital footprint

Analyse phishing emails and design staff awareness exercises

Set up and use a malware analysis sandbox (REMnux)

Simulate malware scenarios and identify mitigations

Produce threat intelligence reports for business stakeholders

Identify and classify indicators of compromise (IoCs)

Create phishing response flowcharts for SME helpdesks

Explore web application vulnerabilities in depth (OWASP WebGoat/DVWA)

Demonstrate credential attacks in lab (Burp Suite)

Assess AI/LLM security risks relevant to SME operations

Run vulnerability scans using OpenVAS/Nessus Essentials

Score and prioritise findings using CVSS/NVD

Produce vulnerability assessment reports with remediation roadmaps

Scope vulnerability assessments for SME environments

Configure LDAP/AD with role-based access control

Implement MFA and enforce password policies

Conduct user access rights reviews for SME staff

Build and maintain SME asset inventories with lifecycle tracking

Create data classification schemes and apply DLP rules

Analyse user behaviour logs for insider threat indicators

Design insider threat awareness guidance for SME management

Encrypt files and communications using AES/GPG

Generate and manage RSA key pairs for secure transfer

Create CSRs and manage SSL/TLS certificates (OpenSSL)

Configure HTTPS with proper TLS settings on web servers

Verify file integrity using SHA-256 hashing

Implement data masking on sample databases

Harden Windows/Linux servers using CIS benchmarks

Configure firewall rules (pfSense/iptables)

Deploy and tune IDS alerts (Snort/Suricata)

Set up email authentication (DMARC/SPF/DKIM)

Deploy SIEM and ingest multi-source logs (Wazuh/Elastic Stack)

Create monitoring dashboards and automated alert rules

Build a SOC-in-a-Box monitoring solution for an SME

Design secure network architectures for SME environments

Configure VPN connections and network segmentation (VLANs)

Implement Zero Trust access policies in a lab

Build disaster recovery plans with RTO/RPO calculations

Configure automated server backup solutions

Conduct tabletop DR exercises for SME scenarios

Document change management processes (CAB, impact analysis, backout plans)

Execute incident response tabletop exercises (ransomware scenario)

Create forensic disk images and maintain chain of custody

Reconstruct incident timelines from SIEM and log data (Wazuh/Elastic Stack)

Parse and correlate logs across multiple data sources

Write incident reports for technical and non-technical audiences

Conduct threat hunting using dashboards and packet captures

Build risk registers with quantitative analysis (SLE/ARO/ALE)

Map SME policies against UK legislation and identify compliance gaps

Conduct vendor assessments and draft SLA requirements

Perform mock compliance audits (Cyber Essentials/ISO 27001)

Design security culture improvement plans

Create phishing simulation campaigns with success metrics

Develop security awareness training calendars for SME staff

Draft key security policies (AUP, incident response, data handling)

Apply exam strategies for Security+ PBQs and scenario questions

Demonstrate integrated security assessment across all domains

Compile and present a professional apprenticeship portfolio

Articulate all KSBs confidently in professional discussion format

Conduct timed practice exams with gap analysis and targeted revision

Perform mock EPA practical demonstrations (patching, access control, IR)