Security Testing & Evaluation Specialist
This practitioner path teaches how to evaluate security controls with a structured and repeatable method. Learners define objectives, scope, acceptance criteria, evidence requirements, scoring logic, remediation tracking, and retesting. It is suited to professionals who must prove whether a system, process, or control is effective rather than merely list vulnerabilities.
Testing Methodology & Scoping
Security Testing & Evaluation: Measurement, Not Just Breaking
Test Case Design & Evidence Standards
Automated Scanning in a Formal Evaluation: Configuration, Triage & Verification
Web App Evaluation: Testing Authentication & Access Control Controls
Technical Security Testing: Web & API
Injection & Business Logic Testing in Formal Evaluations
API Security Evaluation: Testing REST APIs Against Security Requirements
Cloud Security Posture Evaluation: AWS Configuration Testing
Elective: Configuration & Compliance Review Against Benchmarks
CVSS Scoring & Finding Classification in STE Reports
Finding Classification, Reporting & Retest
Evidence Documentation & Proof-of-Concept Standards
The Evaluation Report: Writing for Two Audiences at Once
Remediation Verification & Retest: Closing the Loop
Capstone: Full STE Engagement — From Scope to Closed Findings
CTFFactory Security Testing & Evaluation Specialist
Practitioner credential — awarded upon completion