Security in your world.

4 LESSONS / intermediate

SOC operations and incident response

Four intermediate lessons take you inside Meridian’s Security Operations Center with Threat Hunter Nyx: prioritizing vulnerabilities by exploitability (EPSS, CISA KEV) and asset reachability, triaging identity anomalies against base rates, running the NIST SP 800-61 containment and verified recovery loop, and bounding AI assistants inside an Agentic SOC.

40 min reading

3 LESSONS / intermediate

AI application and agent security

Three intermediate lessons establish defense-in-depth for LLM applications and autonomous tool-calling agents: isolating untrusted user and RAG data from instructions (OWASP LLM01:2026), enforcing deterministic Policy Enforcement Points against Excessive Agency (LLM03:2026), and wiring out-of-band human oversight gates mapped to the NIST AI RMF.

32 min reading

4 LESSONS / intermediate

Application & software supply-chain security

Four intermediate lessons trace software security from whiteboard to runtime: STRIDE threat modeling across Data Flow Diagram trust boundaries, locking direct and transitive dependency trees, separating untrusted PR execution from signed production promotion in CI/CD, and binding SBOM inventories to running build digests.

34 min reading

Foundations elective

After F4 / 1 lesson

Mailbox literacy: what SPF, DKIM, and DMARC prove

Focused single-lesson path unpacking how SPF validates the sending IP, DKIM verifies cryptographic header/body signatures, and DMARC enforces visible From-header alignment - plus why none of the three proves a message is benign.

8 min reading

3 LESSONS / intermediate

Governance, risk, and compliance (GRC) in practice

Three intermediate lessons turn GRC from static paperwork into an engineering discipline: writing falsifiable four-part risk sentences with accountable business owners, pairing controls with automated Type II operating evidence, and running NIST CSF 2.0 Govern as a monthly cadence.

30 min reading

Foundations elective

After F6b / 1 lesson

Privacy engineering vs security controls

Focused single-lesson path distinguishing system security (protecting data from unauthorized actors via encryption and IAM) from privacy engineering (governing authorized collection, purpose limitation, minimization, and data-subject rights).

10 min reading

3 LESSONS / intermediate

OAuth 2.0, OIDC, and SAML federation security

Three core lessons and one protocol deep dive cover delegated API authorization and enterprise Single Sign-On: separating the four OAuth 2.0 roles and Resource Server token checks, mapping signed OIDC/SAML claims to least-privilege roles via immutable (iss, sub) keys, and defending against the five federation failure modes.

32 min reading

11 LESSONS / intermediate

Security architecture, cryptography, and governance

Eleven lessons take an individual contributor from governance hierarchy, legal compliance, quantitative risk math, and data lifecycle engineering through formal state-machine models, hardware TCB isolation, cryptography, PKI, and physical facility defense.

114 min reading

5 LESSONS / intermediate

Network architecture, protocol defense, and access models

Five lessons map the OSI and TCP/IP stacks to layer-specific protocol attacks, zero-trust segmentation, firewall and NAC architectures, IPsec and wireless cryptography, Kerberos and biometric identity lifecycles, and DAC, MAC, RBAC, and ABAC access models.

53 min reading

6 LESSONS / intermediate

Security assessment, forensics, and software assurance

Six lessons cover SOC 1, SOC 2, and SOC 3 audit boundaries, penetration testing rules of engagement, SAST, DAST, IAST, and fuzzing pipelines, digital forensics order of volatility, disaster recovery sites and RAID math, and secure SDLC and database defense.

69 min reading