Cloud Security Engineer Bootcamp
Secure AWS, Azure and Kubernetes the way a cloud security team does: find it, fix it, prove it.
Cloud Security Engineer Bootcamp is a 12-week live online bootcamp, taught on Zoom by one instructor at about 15 hours a week, with 6 deployed projects and a one-to-one every week. The founding price is A$200, down from A$400. Live sessions run on weekday evenings from 5:30 PM Sri Lanka and India time, with full-day sessions at weekends.
- Week 1Logging BaselineA Terraform setup that turns on audit logging for one AWS account and stores it centrally
- Weeks 1–2Cloud foundations for securityA cloud account baseline with logging and a threat model, deployed
- Week 3Access ReportA script that lists every IAM role and the permissions it has not used in ninety days
- Weeks 3–4Identity and accessAn IAM review that removes risky access without breaking the app
- Weeks 5–6Posture and misconfigurationA posture audit fixed through Terraform, with before and after scores
- Week 7Pod Security PolicyA Kubernetes policy that blocks privileged containers, tested against a sample pod
- Weeks 7–8Containers and KubernetesA hardened cluster that blocks the attacks from the lab
- Week 9Alert RuleA cloud alert rule that fires on a suspicious login, tested with a simulated event
- Weeks 9–10Detection and response in the cloudThe capstone: a cloud intrusion detected, contained and reported
- Weeks 11–12Employer brief and hiring sprintThe employer brief shipped, and demo day
- weeks, live on Zoom
- 12
- hours a week
- 15
- projects to build
- 10
- minutes 1-1, every week
- 30
Who it is for, and what you receive.
IT people, developers and career-changers who are comfortable with Linux and a cloud console and want to secure AWS, Azure and Kubernetes for a living. No security background needed.
Comfortable with Linux and a cloud console; no security background needed.
- Live on Zoom
- 4h
- Set reading and exercises
- 6h
- The project
- 5h
- 1
Six deployed projects
Each graded by Nova against a published rubric and signed off by the instructor at the gate.
- 2
The twelve-week plan
Every week has its theme, its topics and what you build, published before you apply and taught live by your instructor.
- 3
Live on Zoom every week
A 90-minute live code review, a 60-minute squad lab, 60 minutes of office hours, and a 30-minute 1-1 with your instructor.
- 4
Your hiring plan
Opened in week 1 and reviewed in every 1-1: target roles, the gap map, the proof list, weekly actions, an interview log, the outcome.
- 5
The record
Every grade and every project with its repository at square1ai.com/u/{handle}, and the recording of your viva, verifiable by any employer.
- 6
The certificate
A credential ID that resolves at square1ai.com/verify to the real completion.
- 7
The hiring sprint
Weeks 11 and 12: CV and portfolio from graded work, applications, mock interviews scored against the role, demo day.
- 8
Nova for twelve weeks
A tutor with every submission of yours in its memory, at 2am as well as in class.
Twelve weeks in six parts.
Each part teaches for a week, then you build and deploy a project, then a gate checks it before the next part opens. The project and its gate are the part's entry on your record.
Live time each week on Zoom: a 90-minute class where the instructor reviews real submissions, a 60-minute squad lab, 60 minutes of office hours, and your own 30-minute 1-1. Nothing is lectured live; the recorded lessons do that.
- Key skillsHow cloud accounts are attackedIdentity, networks and encryption in the cloudLogging everythingWeek 1
Cloud foundations for security
- How cloud accounts are attacked
- Identity, networks and encryption in the cloud
- Logging everything
You build: A baselined account
Week 2Project 1: the baseline
- Threat modelling a cloud app
- Log coverage
You build: A cloud account baseline with logging and a threat model
Project 1 · the gate at week 2The baseline
A cloud account baseline with logging and a threat model, deployed
You hand in- Account baseline in code
- Logging configuration
- Threat model
The gateEvery account action is logged and the threat model names the top risks.
What you can do by week 12.
Six cloud security projects and a defended finding, for one of the most-hired security roles as companies move to AWS, Azure and Kubernetes.
- 1
Baseline a cloud account with logging and a threat model.
- 2
Review identity and access on AWS and Azure and remove risky permissions safely.
- 3
Audit cloud posture against a benchmark and fix it in code.
- 4
Secure container images, the supply chain and Kubernetes clusters.
- 5
Detect, contain and report a cloud intrusion.
- 6
Defend a finding from detection to fix, on camera.
No placement rate is shown, because there are no graduates to count yet. The roles above are what the projects are built for.
Your record at week 12.
Every exercise and project is graded by Nova against a rubric you can read, and every grade is kept on one page an employer can open and run. This is what the programme writes to it.
- Graded, line by line
- Nova reads every submission against the brief and the rubric and returns a score, what you did well and what to fix.
- Six gates
- A block does not open until the previous project passes its gate. You always know where you are and what is next.
- A weekly 1-1
- Thirty minutes with your instructor, who has already read your code before the call.
- One page an employer can run
- Every grade, project and the viva recording at /verify. An employer opens it, runs the code and watches you defend it.
- Week 2Graded, gate signed
The baseline
Every account action is logged and the threat model names the top risks
- Week 4Graded, gate signed
The IAM review
No wildcard or unused high-risk permission remains
- Week 6Graded, gate signed
The posture audit
The benchmark score meets the bar and fixes are in code
- Week 8Graded, gate signed
The hardened cluster
The lab attacks are blocked or detected
The entries, not the grades: those are yours to earn. The page lives at /verify and an employer needs no account to open it.
8 entries, twelve weeks. Reserving a spot holds the founding price.
Reserve a seatHow we help you find a job.
The last block is not curriculum. It is the hiring sprint, and the proof you built in the ten weeks before it.
The whole plan on a few pages: the parts, the projects, the gates and the price. We email it to you.
Get the booklet- 1
Your hiring plan, from week 1
Six parts you and your instructor keep: target roles, the gap map from real postings, the proof to send, weekly actions, an interview log, the outcome. Read before every 1-1.
- 2
The hiring sprint
Weeks 11 and 12: CV, portfolio, applications, mock interviews, and demo day in front of hiring partners.
- 3
A record an employer can run
Your deployed projects and the recorded viva on /verify. An employer opens it, runs the code and watches you defend it.
- 4
The career agent
Paste a real job posting at /career and it maps the role to your graded work and what to do next.
- 5
The roles directory
Every role we prepare people for, what it pays and what it asks, at /roles.
Questions people ask.
About Cloud Security Engineer Bootcamp, answered from the plan on this page.
- Cybersecurity Bootcamp · 12-week live bootcamp
- Web Application Security · 9.5 h on demand
- SOC Analyst Essentials · 9.5 h on demand
One cohort, one instructor. Hold your spot.
A cohort of 25, one instructor, 12 weeks, six things you ship. Spot holders hear the start date first, and nothing is charged before you confirm.
- Six cloud security projects and reports
- A recorded viva
- Your record on /verify
About a minute. No account, no card, and nothing is charged until you confirm.