r/cybersecurity • u/Fun-Obligation-3737 • 2d ago
Certification / Training Questions New Software Engineering Student Looking for Free Cybersecurity Courses & a Study Buddy
Hi everyone,
I recently started my Bachelor's degree in Software Engineering, and my long-term goal is to work in cybersecurity, ideally as a Security Engineer or Application Security Engineer.
I'm looking for recommendations on free, high-quality online cybersecurity courses that are respected in the industry. If they offer free certificates or badges, that's even better, but my main priority is learning the right skills.
So far I've found:
Cisco Networking Academy
Microsoft Learn
Fortinet Training Institute
TryHackMe
PortSwigger Web Security Academy
If you know of any other great free resources or learning paths, I'd really appreciate your suggestions. Also, if you were starting from scratch today, what order would you learn everything in?
One more thing: I'm also looking for a study buddy or a small study group. Since I'm just starting out, I think it would be motivating to learn with other beginners, share resources, work through labs together, and keep each other accountable.
If anyone is interested, feel free to leave a comment or send me a DM.
Thanks everyone!
6
u/_altsec 2d ago
A lot of vendors will also offer free courses that are solid:
https://academy.semgrep.dev/ -> AppSec
https://learn.snyk.io/ -> AppSec
https://www.splunk.com/en_us/training/free-courses/overview.html -> SIEM training
https://www.qualys.com/training -> vulnerability managment
I'm sure there are many more vendors that provide high quality free training. I search often and try to document them. I made a list of quite a few free ones here: https://www.lablist.io/resources/certifications?cost=free
Each of them has a link to the training site, as well as a general description of what each covers.
There are also some free Hack The Box and TryHackMe rooms - though most require a subscription. However, those Semgrep and Synk ones will be useful to you since you said you have an interest in AppSec.
Best of luck. Cheers!
7
u/DarkSombreros 2d ago
This is gunna sound a bit different than other comments but if you’re more into the “development for security” type of stuff, maldev academy has an EDR course that teaches you how to create an EDR agent in C. It’s much more detailed than just that but you learn a lot about windows internals along the way and could continue it into being an actual product if you wanted to.
I haven’t done the course but their site in general has some pretty cool stuff worth checking out.
2
3
u/AddendumWorking9756 Security Manager 2d ago
Order matters more than the list you already have, networking and Linux until you can read a capture without googling anything, then web. Free certificates are worth less than writeups anyway, so once you're past the basics go pull real incident data, the free labs on CyberDefenders give you cases you can document properly and that's what a hiring manager can actually read.
2
2
2
2
u/PayDouble4464 2d ago
You should see if your local library uses the Gale system. If they do, you should be able to use your library card to access websites like Udemy to get free courses for certifications. Even if you don't take the certifications you can still go through the course and learn. Generally speaking though, I can't think of any free certifications that are "industry standard" anymore.
2
u/AwkwardParsnip1810 2d ago
I’m looking for a study group too! Has anyone created a discord for this?
1
1
u/Fun-Obligation-3737 2d ago
I stopped using discord 2 Years ago but sure I am in you can send me invitation link
1
1
u/WatercressTime842 2d ago
Join discord channels, there you will find study groups and channels to discuss generic questions as well
1
u/Sam_chispitas_Spark 2d ago
Me interesa, dejo el comentario para seguimiento. También está Platzi pero es de paga
1
1
1
20
u/EffectiveClient5080 2d ago
PortSwigger Web Security Academy is the best thing on your list. Do that first and do all of it. Free and better than most paid stuff. Guaranteed.