First-principles security engineering.

intermediate · 4 lessons · 40 min

SOC operations and incident response

Four intermediate lessons take you inside Meridian’s Security Operations Center with Threat Hunter Nyx: prioritizing vulnerabilities by exploitability (EPSS, CISA KEV) and asset reachability, triaging identity anomalies against base rates, running the NIST SP 800-61 containment and verified recovery loop, and bounding AI assistants inside an Agentic SOC.

intermediate · 3 lessons · 32 min

AI application and agent security

Three intermediate lessons establish defense-in-depth for LLM applications and autonomous tool-calling agents: isolating untrusted user and RAG data from instructions (OWASP LLM01:2026), enforcing deterministic Policy Enforcement Points against Excessive Agency (LLM03:2026), and wiring out-of-band human oversight gates mapped to the NIST AI RMF.

intermediate · 4 lessons · 34 min

Application & software supply-chain security

Four intermediate lessons trace software security from whiteboard to runtime: STRIDE threat modeling across Data Flow Diagram trust boundaries, locking direct and transitive dependency trees, separating untrusted PR execution from signed production promotion in CI/CD, and binding SBOM inventories to running build digests.

intermediate · 3 lessons · 30 min

Governance, risk, and compliance (GRC) in practice

Three intermediate lessons turn GRC from static paperwork into an engineering discipline: writing falsifiable four-part risk sentences with accountable business owners, pairing controls with automated Type II operating evidence, and running NIST CSF 2.0 Govern as a monthly cadence.

intermediate · 3 lessons · 32 min

OAuth 2.0, OIDC, and SAML federation security

Three core lessons and one protocol deep dive cover delegated API authorization and enterprise Single Sign-On: separating the four OAuth 2.0 roles and Resource Server token checks, mapping signed OIDC/SAML claims to least-privilege roles via immutable (iss, sub) keys, and defending against the five federation failure modes.

intermediate · 11 lessons · 114 min

Security architecture, cryptography, and governance

Eleven lessons take an individual contributor from governance hierarchy, legal compliance, quantitative risk math, and data lifecycle engineering through formal state-machine models, hardware TCB isolation, cryptography, PKI, and physical facility defense.

intermediate · 5 lessons · 53 min

Network architecture, protocol defense, and access models

Five lessons map the OSI and TCP/IP stacks to layer-specific protocol attacks, zero-trust segmentation, firewall and NAC architectures, IPsec and wireless cryptography, Kerberos and biometric identity lifecycles, and DAC, MAC, RBAC, and ABAC access models.

intermediate · 6 lessons · 69 min

Security assessment, forensics, and software assurance

Six lessons cover SOC 1, SOC 2, and SOC 3 audit boundaries, penetration testing rules of engagement, SAST, DAST, IAST, and fuzzing pipelines, digital forensics order of volatility, disaster recovery sites and RAID math, and secure SDLC and database defense.

Browse all 60 lessons

Filter by security domain, read time, or protocol topic, complete with IC-in-Practice deliverables and 4-choice scenario checks.

Certification prep & exam simulator

Map every lesson directly to CISSP, Security+, CCSP, CISM, and CySA+ domains and drill with 160 CAT-style practice questions.

Apply it to your industry

Work through realistic architectural and compliance trade-offs across nine regulated and operational sectors.

Run a hands-on decision lab

Test your judgment on synthetic incident logs, SBOM provenance ladders, and agent authorization gates.