🐧 Infrastructure Security · Corporate training

Linux & Server Security

Harden Linux servers to CIS benchmarks: users and SSH, patching, firewalls, auditing, file integrity and detecting compromise on production hosts.

$49 per employee · complete course
🗓️
2 weekends
Sat & Sun
⏱️
16 hours
4 live sessions
🎯
Intermediate → Advanced
Level
🧪
4 labs
Hands-on

Default hours 10:00 AM–2:00 PM (Asia/Karachi). Company pays — employees never pay individually.

About this training

Most banking and fintech workloads run on Linux. This programme teaches administrators and engineers to build hardened server baselines, control privileged access, monitor for intrusion and respond when a host is compromised — with every control implemented hands-on in lab virtual machines.

Who it's for: System administrators, DevOps/SRE engineers and infrastructure security teams.

What your team will be able to do

  • ✔Apply a CIS-benchmark baseline to Linux servers
  • ✔Secure SSH, sudo and user management
  • ✔Configure host firewalls, auditd and file integrity monitoring
  • ✔Automate hardening and patching
  • ✔Investigate a compromised Linux host

Advanced course outline

🔒 Session notes & lab guides unlock for enrolled employees
Weekend 1
Weekend 1 · Saturday

Hardening baselines & access control

Building a secure starting point.

  • ▸CIS benchmarks and Lynis audits
  • ▸User, group and sudo policy
  • ▸SSH hardening: keys, MFA, no root login
  • ▸File permissions, SUID/SGID review
  • ▸Minimising installed services
🧪 Lab: Harden a fresh Ubuntu server 🔒 Session notes 🔒 Lab guide
Weekend 1 · Sunday

Network protection & patching

Reducing exposure and keeping up with vulnerabilities.

  • ▸Host firewalls with nftables/ufw
  • ▸fail2ban and rate limiting
  • ▸Patch management and unattended upgrades
  • ▸Kernel live patching considerations
  • ▸TLS configuration for services
🧪 Lab: Lock down network exposure 🔒 Session notes 🔒 Lab guide
Weekend 2
Weekend 2 · Saturday

Logging, auditing & integrity

Seeing what happens on your servers.

  • ▸journald and centralised logging
  • ▸auditd rules for privileged actions
  • ▸File integrity monitoring with AIDE
  • ▸Detecting persistence: cron, systemd, SSH keys
  • ▸Shipping logs to a SIEM
🧪 Lab: Detect a backdoor with auditd and AIDE 🔒 Session notes 🔒 Lab guide
Weekend 2 · Sunday

Automation & incident response on Linux

Scaling hardening and handling compromise.

  • ▸Ansible roles for hardening
  • ▸Compliance as code
  • ▸Linux triage and evidence collection
  • ▸Containment without destroying evidence
  • ▸Rebuild vs repair decisions
🧪 Lab: Investigate a compromised server 🔒 Session notes 🔒 Lab guide
📝
Final assessment & certificate
Multiple-choice assessment plus attendance requirement → verifiable QR certificate.

Enrol your team in Linux & Server Security

One invoice for the whole team, volume discounts applied automatically.