Learning Paths

Skills

System Testing and Evaluation Specialist | SP-TST-001 | Work Role 671

27 courses
34 hours

A system testing and evaluation specialist conceptualizes, designs, and builds secure information technology (IT) systems for system and network development. A specialist then plans, prepares, and executes tests of systems to evaluate results against specifications and requirements as well as analyze and report test results.

This path will get you started on your journey to becoming a system testing and evaluation specialist! Begin with the fundamental concepts of security controls and networking and endpoint security through hands-on labs, dive into the essential skills necessary to perform the day-to-day functions and then expand your skill set with tools, more advanced concepts and knowledge from adjacent roles!

Path estimated completion time is ~40 hours for total content.

This path aligns to the Knowledge, Skills, Abilities and Tasks (KSAs) within the Workforce Framework for Cybersecurity (CSWF) and the DoD Cyber Workforce Framework (DCWF) for the work role of:

System Testing and Evaluation Specialist Work Role 671 or SP-TE-001

For complete coverage of skill paths and tooling for the System Testing and Evaluation Specialist role, please navigate to the Penetration and Vulnerability Tester Channel

Courses in this path

Fundamentals

Begin your learning journey with the fundamental concepts of operating systems, endpoint security and security protocols and controls through some hands-on labs and courses!

*Note the lab length is showing the allotted time that the environment will be open and available before resetting. The estimated completion time of each lab is 45 minutes.

Enterprise Security: Executive Briefing

by Aaron Rosenmund
39m
(67)

Linux Endpoint Security: Processes

by Aaron Rosenmund
25m
(23)

Windows Endpoint Security: Networking

by Michael Teske
21m
(23)

DevOps Foundations: Security and DevSecOps

by David Clinton
44m
(36)

Security Controls: CIS Controls

by Bobby Rogers
1h 32m
(17)

Role Essentials

Now that you know the fundamentals, dive into the essential skills necessary to perform the day-to-day functions of a system testing and evaluation specialist.

Supply Chain Management Overview

by Michael Management
1h 27m

Testing Security Controls and Detecting Vulnerabilities with Nmap 7

by Matt Glass
1h 38m
(31)

Pen Testing: Planning, Scoping, and Recon

by Alexander Tushinsky
1h 13m

Pen Testing: Reporting

by Gavin Johnson-Lynn
1h 6m

Information and Cyber Security GRC: Compliance Assessment and Reporting

by Jacob Ansari
1h 55m

Writing Better Technical Reports

by Glenn Weadock
1h 7m
(52)

Expanded Skillset

It's time to expand your skill set with tools, more advanced concepts and emerging trends and vulnerabilities!

This section gives you a brief introduction into many, additional skills that you will find helpful as a system testing and evaluation specialist. We have full training paths on all of these skills; see the Supplemental Skill Paths section to learn more.

Specialized Attacks: Hardware Product Testing

by Matthew Lloyd Davies
53m

Leverage PowerShell Tools for Pen Testing

by Rishalin Pillay
1h 28m

Specialized Testing: Sessions and Tokens

by Christian Wenz
55m

Specialized Testing: Deserialization

by Peter Mosmans
1h 1m

Supply Chain Risk Management with OWASP Dependency-Check

by Matthew Kendall
47m

Specialized Engineering: Enterprise Hybrid Cloud

by Michael Brown
1h 9m

Adjacent Roles

Now that you've mastered all the skills for system testing and evaluation specialist, learn about additional cyber roles and their responsibilities.

Information and Cyber Security Literacy: Security Engineering and Architecture

by Dr. Lyron H. Andrews
49m
(14)

Application Analysis with SonarQube

by George Smith
34m
(89)

Clean Architecture: Patterns, Practices, and Principles

by Matthew Renze
2h 20m
(1936)

Unit Testing with Python 3

by Emily Bache
2h 50m
(270)

Kubernetes Security: Implementing Supply Chain Security

by Antonio Jesús Piedra
49m
(11)

Enabling Security Governance and Compliance in DevSecOps

by Richard Harpur
1h 37m
(11)

Getting Started with OWASP Zed Attack Proxy (ZAP) for Web Application Penetration Testing

by Mike Woolard
1h 55m
(35)

Learn with the best

Aaron Rosenmund

Aaron M. Rosenmund is a cyber security operations subject matter expert, with a background in federal and business defensive and offensive cyber operations and system automation. Leveraging his administration and automation experience, Aaron actively contributes to multiple open and closed source security operation platform projects and continues to create tools and content to benefit the community. As an educator & cyber security researcher at Pluralsight, he is focused on advancing cyber secur... more

Michael Teske

Michael Teske is a principal security author with Pluralsight helping people build their skills toolkit. Michael has 25+ years of experience in the IT Ops/Cloud/Cybersecurity industry including 17 of those years as an IT instructor at a technical college, focusing on Microsoft server infrastructure, security and automation. Michael attained his MBA with an emphasis in Computer Information System Security several years ago. Michael still keeps up with the industry as an independent consultant in ... more

David Clinton

David Clinton is an AWS Solutions Architect and a Linux server administrator. He's written books on cloud and Linux administration, IT security, and data analytics.

Bobby Rogers

Bobby E. Rogers is an information security engineer working as a contractor for Department of Defense agencies, helping to secure, certify, and accredit their information systems. His duties include information system security engineering, risk management, and certification and accreditation efforts. He retired after 21 years in the U.S. Air Force, serving as a network security engineer and instructor, and has secured networks all over the world. Bobby has a master’s degree in information assura... more

Peter Mosmans

Peter started out in the nineties as software engineer working on internet banking applications for various European financial institutions. After developing, he moved to the role of defending and designing systems and networks for high-availability websites. Since 2004 he started specializing in breaking: pentesting complex and feature-rich web applications. Currently he leads a global team of highly skilled penetration testers as lead pentester. He is a contributor to several open-source penet... more

Michael Management

Michael Management is a leading provider of online SAP training and offers thousands of hands-on simulations and expert-led video lessons. Its SAP courses are used by tens of thousands of individuals and Fortune 500 companies around the world. Practical lessons are based on common business scenarios that SAP professionals can relate to every day. Guided learning paths and challenging exams lead learners to earning professional certifications.

Matt Glass

Matt Glass is a Service Delivery Manager in Naples, Italy, working as a government contractor. Matt has 15 years of IT experience in a variety of roles. Consistently finding joy in developing the skills of others and helping their careers, he joined Pluralsight in 2017 to pass on the lessons he learned. Matt is married and the father of four children.

Alexander Tushinsky

Alex has spent the past 30+ years working as a software developer, application architect, cybersecurity professional, and technical trainer. He is a lifelong learner and holds over 20 active certifications in IT. Alex is a Microsoft Certified Trainer and enjoys sharing his knowledge with others. He has taught at Rutgers University, Bergen Community College, County College of Morris, College of Southern Nevada, and UNLV. He holds a BS in Software Development and a Masters in Cybersecurity from We... more

Gavin Johnson-Lynn

Gavin has 20 years’ experience writing software in regulated environments and for global organisations. The last five years of his development career were spent with a focus on security, becoming the security lead for a significant payments project at a FTSE 100 company. He has experience with languages from COBOL to .Net and now often finds those skills useful when developing with Python. Gavin's experience of software security revealed a passion for security, leading him to become a speaker a... more

Jacob Ansari

Jacob Ansari worked on Pluralsight courses that cover the topic of PCI DSS Standards.

Glenn Weadock

Glenn E. Weadock (MDAA, MCAAA, MCT, MCSE, MCSA, MCITP, A+, Security+) is the president of Independent Software Inc., which he founded in 1982 after graduating from Stanford University's engineering school. ISI provides expert witness, consulting, and training services in the IT field with a focus on operating systems and networking technologies. Glenn is the author of 18 commercial books on topics such as Windows clients and servers, Microsoft certification, website design, troubleshooting, and ... more

Matthew Lloyd Davies

Matt is a cyber security author and researcher here at Pluralsight. A certified penetration tester and incident handler, he created Pluralsight's CompTIA Pentest+ Specialized Attacks courses as well our courses on wireless, ICS/OT and hardware hacking. Matt has also helped to build our security labs portfolio; labs that help you get hands-on to understand the threats and vulnerabilities your organization faces today. With a background in Chemical Engineering, Matt's focus is on the security ... more

Rishalin Pillay

Rishalin is a prolific author and cybersecurity expert. He has authored several video courses on Pluralsight, as well as three books: "Learn Penetration Testing", "Offensive Shellcode from Scratch." and "Ethical Hacking Workshop". He is also a technical contributor to many other books on topics such as dark web analysis, Kali Linux, offensive security, and SECOPS. He has received the Microsoft Content Publisher Gold and Platinum awards for his contributions to the cybersecurity industry. Rishal... more

Christian Wenz

Christian Wenz is an architect, consultant and author focusing on web technologies. He wrote or co-wrote over 100 books, is a fixture at international developer conferences since 2001, is a Microsoft Most Valuable Professional (MVP) for Developer Technologies since 2004, and the main author of the official Zend PHP certification. His day job includes conducting security audits, migrating old code bases, implementing complex web applications and helping companies choose the right web strategy an... more

Matthew Kendall

Matt is a senior software engineer, technical lead, and consultant with experience in a wide range of technologies, and a particular focus on frontend development and security. He is passionate about delivering, and helping others deliver, high-quality web applications which keep users and their data secure and provide an awesome user experience. Matt has experience working with some of the biggest names in the consumer goods and energy sectors, as well as in highly regulated industries includin... more

Michael Brown

I have worked in IT for 25 years, for 22 of those years I have delivered IT Training. I have delivered Microsoft, CISCO and Amazon Web Services courses across Europe. For the last 4 years I have focused on Cloud technologies delivering cloud training to some of Europe’s biggest organisations. I have been a Microsoft Certified Trainer since 1997 and currently hold certifications from Microsoft, CompTIA and AWS. When not working on training material or delivering courses I spend time in the nort... more

Dr. Lyron H. Andrews

Dr. Andrews’ technology career spans three decades. His roles included network manager New York City Department of Education, BMG Direct senior director of IT, and BNY Mellon dean of technology. His doctoral research at Teachers College Columbia found that critical thinking skills thrive in environments that are supportive of five essential elements in the mind of a critical thinker. He teaches cyber security. He has integrated technology management with teaching at Columbia University and other... more

George Smith

George Smith has spent more than 25 years in the IT industry. During this time he has held a variety of positions, starting with web UI development and business analysis, progressing with system administration and infrastructure, then switching to core systems programming, technical consulting, and finally becoming an E-Commerce Architect and Subject Matter Expert. He is well versed in modern trends like Containerization, Infrastructure as Code, Serverless computing models, and more. George demo... more

Matthew Renze

Matthew Renze is a data science consultant, author, and public speaker. Over the past two decades, he’s taught over 400,000 software developers and IT professionals. He’s delivered over 100 keynotes, presentations, and workshops at conferences on every continent in the world (including Antarctica). His clients range from Fortune 500 companies to small tech startups around the globe. Matthew is a Microsoft MVP in AI and an ASPInsider. He’s also the president of Serenze Global, a 501(c)(3) non-p... more

Emily Bache

Emily Bache is an independent consultant and technical coach specializing in automated testing and agile methods. Emily works daily with development teams helping them to improve their automated tests and raise code quality. Emily is the author of "Technical Coaching with the Samman method" and "The Coding Dojo Handbook: a practical guide to creating a space where good programmers can become great programmers". Emily spent many years working at AstraZeneca, a multinational pharmaceuticals co... more

Antonio Jesús Piedra

Antonio is a DevOps Engineer who loves to experiment with cutting-edge technologies. He is a Certified Kubernetes Administrator, Application Developer and Security Specialist. Antonio likes to understand the end-to-end process and he is frequently involved in design reviews, Python development, creating Docker images, writing pipelines or building Kubernetes clusters at home using Raspberry Pi’s. In addition to his passion for technology, Antonio enjoys hiking and DIY projects.

Richard Harpur

Richard is a highly experienced technology leader with a remarkable career ranging from software development, project management through to C-level roles as CEO, CIO, and CISO. Richard is highly rated and ranked in Ireland's top 100 CIOs. As an author for Pluralsight - a leader in online training for technology professionals - Richard's courses are highly-rated in the Pluralsight library and focus on teaching critical skills in cybersecurity including ISO27001 and Ransomware. As a Certified Info... more

Mike Woolard

Mike is an information security manager who has worked in the IT and Information Security fields for 22+ years. A broad background from helpdesk to sysadmin, system engineer, networking, DB and development work. Most of Mike's work now centers around pentests and risk assessments, but an integral part will always be awareness training. An active member in various local security groups, Mike volunteers, speaks, or attends various information security cons.

Contact Sales