Querytech Academy Querytech Academy Academy
Part of the Cybersecurity Defense Architect Pathway

Certified Network Security Professional CNSP

Network Security Design & Hardening

Enroll via the Cybersecurity Defense Architect Pathway

Level 1: Beginner

Beginner level of Certified Network Security Professional

"Build a rigorous foundation in how networks actually work: the OSI/TCP-IP models, addressing, and core protocols."

Included Modules
OSI & TCP/IP Models
IP Addressing & Subnetting
Routing & Switching Fundamentals
DNS, DHCP & Core Network Services
Network Troubleshooting Tools

"Introduce the core building blocks of network defense: firewalls, VPNs, and foundational security hygiene."

Included Modules
Firewall Concepts & Rule Design
VPN Fundamentals & Tunneling
Network Segmentation Principles
Wireless Network Security
Security Policy & Hardening Basics

"Understand the cryptographic foundations underlying secure network communication and certificate-based trust."

Included Modules
Symmetric vs Asymmetric Encryption
Hashing & Digital Signatures
TLS/SSL & Certificate Management
PKI Fundamentals

"Harden operating systems and endpoints against compromise using baseline controls and endpoint protection."

Included Modules
Windows Security Architecture
Linux Security Fundamentals
Endpoint Detection & Response (EDR)
Patch & Vulnerability Management

"Design identity and access management systems that enforce least privilege across the enterprise."

Included Modules
Authentication Protocols
Multi-Factor Authentication
Privileged Access Management
Directory Services Security

"Operate a disciplined vulnerability and patch management program that systematically reduces exposure."

Included Modules
Vulnerability Management Lifecycle
Asset Inventory & Discovery
Risk-Based Prioritization
Patch Management Operations

Professional Competencies

Coming soon.

Industry Tools

Coming soon.

Level 2: Intermediate

Intermediate level of Certified Network Security Professional

"Deploy and tune intrusion detection and prevention systems to identify and block malicious network activity."

Included Modules
IDS vs IPS Architecture
Signature-Based Detection
Anomaly-Based Detection
Alert Triage & False Positive Tuning
Lab: Deploying an IDS

"Design enterprise-grade firewall rule architectures and site-to-site/remote VPN topologies for real network environments."

Included Modules
Next-Generation Firewall Features
Multi-Zone Firewall Design
Site-to-Site VPN Configuration
Remote Access VPN & Split Tunneling

"Build network-wide visibility using log aggregation and SIEM fundamentals to detect threats in real time."

Included Modules
SIEM Architecture & Log Ingestion
Building Detection Rules & Alerts
Dashboard & Reporting Design
Lab: SIEM Deployment & Alert Tuning

"Hunt proactively for threats and engineer high-fidelity detections mapped to attacker techniques."

Included Modules
MITRE ATT&CK Framework
Hypothesis-Driven Threat Hunting
Detection Engineering Practice
Behavioral Analytics

"Secure cloud network architectures across providers with proper segmentation and traffic control."

Included Modules
Cloud Network Architecture
Cloud Firewall & Security Groups
Securing Cloud Connectivity
Cloud-Native Security Services

"Defend the application layer with secure architecture, WAFs, and an understanding of common attack classes."

Included Modules
Web Application Attack Classes
Web Application Firewalls (WAF)
Secure Architecture Patterns
API Security Defense

Professional Competencies

Coming soon.

Industry Tools

Coming soon.

Level 3: Advanced

Advanced level of Certified Network Security Professional

"Design Zero Trust network architectures where identity and continuous verification replace implicit network trust."

Included Modules
Zero Trust Principles & Models
Identity-First Network Access
Micro-Segmentation Strategies
Continuous Verification & Least Privilege

"Apply enterprise-grade hardening standards across network devices, services, and architecture for resilience at scale."

Included Modules
Device & OS Hardening Standards
Redundancy & High Availability Design
DDoS Mitigation Strategies
Compliance-Aware Network Design

"Respond to live network security incidents: containment, evidence preservation, and post-incident forensic analysis."

Included Modules
Incident Response Lifecycle
Containment & Eradication Techniques
Network Forensic Analysis
Executive Incident Reporting

"Operationalize security governance, risk management, and compliance against recognized frameworks."

Included Modules
Security Frameworks (NIST, ISO 27001)
Risk Assessment & Treatment
Compliance & Audit Preparation
Security Policy Development

"Design and operate a Security Operations Center with tiered workflows, playbooks, and automation."

Included Modules
SOC Architecture & Tiers
Playbook Development
Security Orchestration & Automation (SOAR)
SOC Metrics & Reporting

"Drive defense with threat intelligence and malware understanding, anticipating attacks before they land."

Included Modules
Threat Intelligence Fundamentals
Indicators & Threat Feeds
Malware Behavior for Defenders
Threat-Informed Defense

Professional Competencies

Coming soon.

Industry Tools

Coming soon.

Ready to Start?

This program is part of the Cybersecurity Defense Architect Pathway. You'll pick your starting cohort for Certified Network Security Professional — the first program in the pathway — on the next step.

Reserve Your Spot