AI Security & SecOps · Live online · 8 weeks · Mentor-led

AI Security & SecOps.

An 8-week, part-time live program for people who already have some IT, security or application background and want an advanced, lab-heavy path: securing AI and LLM applications, and using AI carefully inside security operations. You will threat-model and red-team chat, RAG and agent features, design guardrails and basic governance, then practise AI-assisted detection, triage and incident-response automation with a human approval step. Same length as our Cybersecurity with AI introduction, but built around labs, a scoped red-team and a SOAR-style playbook — not a first-pass survey.

Threat-model and red-team an LLM or agent application against the OWASP Top 10 for LLM applications, in the lab
Design practical guardrails, review steps and basic AI-governance artefacts a team can actually run
Build SIEM/SOAR-style workflows that use AI for detection, triage and response — with approvals, verification and a kill switch

Talk to a counsellor Download syllabus

Part-time, live online · 8 weeks · 6–8 hours a week · Fees and EMI options shared on a counsellor call.

Live online · Mentor-led

8 weeksDuration
6–8 hours a weekTime commitment
Part-time, live onlineFormat
Recordings if you miss a sessionAttendance

Join live from anywhere. Weekend-morning batches are offered for learners in the US; evening batches (India time) for the Gulf and Africa; Europe-oriented groups typically meet after work and on Saturdays.

Outcomes

What you will be able to do.

These are skills and work products from the program — not placement, salary or promotion promises.

01
Produce a written threat model of a chat, RAG or agent feature mapped to the OWASP Top 10 for LLM applications
02
Run a scoped, documented red-team pass, including prompt injection and data-leakage tests, and record residual risk
03
Recommend and sketch guardrails: input and output review, least privilege for tools, fallbacks and a human approval step
04
Draft basic AI-governance artefacts: an acceptable-use note, a logging and review plan, and when to involve legal or compliance review
05
Design an AI-assisted detection or triage workflow in a SIEM-style setting, with every model claim verified against source evidence
06
Build a SOAR-style response playbook with approvals, least privilege, verification and a kill switch — not unsighted automation
07
Leave with a capstone pack: an LLM security assessment and a SecOps playbook, not a vendor or professional pentest certification

Who it's for

A good fit, and when it is not.

For people with some IT, security or application background; an advanced, lab-heavy path compared with our 8-week Cybersecurity with AI introduction

This program is for

Security analysts, SOC, detection and incident-response professionals who want a lab-heavy path into AI-powered SecOps
Software, platform and security engineers who ship chat, RAG or agent features and need to secure them in depth
IT and security leads who need both LLM-application security labs and a practical SIEM/SOAR automation exercise with AI
Learners who can commit 6–8 hours a week for 8 weeks, joining live from anywhere, and who already have some IT or security context

This program is not for

People looking for an official CompTIA, SANS, GIAC, (ISC)² or government certificate. This program issues a Datamarcos certificate of completion
Complete beginners who need a first course in cybersecurity fundamentals
People who want a first introduction to AI in security. Our 8-week Cybersecurity with AI course is the lighter starting point
People seeking placement or salary guarantees — we do not offer those

Starting point

Some exposure to IT, networks, application logs, security operations or application development is expected
No prior machine-learning or LLM-engineering experience is required
You should be willing to inspect logs, prompts or playbooks and write down what you actually tested
If you are new to both cybersecurity and AI applications, start with the 8-week Cybersecurity with AI introduction

Curriculum

Week by week, 8 weeks.

6–8 hours a week, live and mentor-led. Open a week for topics, labs and what you ship.

- How chat, retrieval and tool-using agents change the attack surface
- Walking the OWASP Top 10 for LLM applications as a working checklist, not as a certificate
- A lightweight threat-model method: assets, threats, existing controls, residual risk
- Picking one chat, RAG or agent feature you will carry through the labs
LabSketch the system, score it against the OWASP list, and draft a first-pass threat model.
You shipA system sketch, an OWASP-LLM worksheet and a first-pass threat model.
ToolsOWASP Top 10 for LLM Applications, threat-model worksheets

Projects

Work you can take with you.

LLM application threat model and red-team note
A written threat model mapped to the OWASP Top 10 for LLM applications, plus a scoped, documented red-team pass with residual risk.
Guardrails and governance pack
Input and output review, least-privilege tool use, a logging and review plan, and a short acceptable-use note. Not a legal or official compliance certificate.
Capstone: AI-assisted SecOps playbook
A verified triage or detection workflow and a SOAR-style response playbook with approvals, verification and a kill switch, presented with the LLM security assessment.

Tools

What you will practise with.

These are tools used in the sessions. Product and company names are trademarks of their respective owners and are shown for identification only; no affiliation is implied.

Frameworks and practice

OWASP LLM Top 10
Threat-model worksheets
Red-team test plans
Playbook templates

SecOps practice

Python
GitHub

AI assistants used with review

ChatGPT
Claude

Format and schedule

Part-time, live, with regional batches.

Part-time and live online, in a small mentor-led cohort. Weekend-morning batches are offered for learners in the US. Evening batches (India time) are offered for learners in the Gulf and Africa. Europe-oriented groups typically meet after work and on Saturdays. Recordings are shared if you miss a live session. Exact days, times and the next cohort date are confirmed on a counsellor call.

Fees and EMI options shared on a counsellor call. A Datamarcos certificate of completion is awarded when you finish the program work. Cohort start dates are shared on a counsellor call — we do not publish a date until then.

Lead mentor

Mentor

Deepesh Mishra

Founder, Datamarcos · Solution Architect · Corporate Trainer · BITS Pilani alumnus

Deepesh is the founder and lead mentor at Datamarcos. He has worked as a solution architect and corporate trainer in data and AI, and has trained teams at 200+ organizations. Live sessions on this program are mentor-led, with practical, project-based delivery.

LinkedIn profile

FAQ

Questions, answered.

Can't find yours? A counsellor will answer it on a short call.

Ask a counsellor

How is this different from Cybersecurity with AI?

Both programs are 8 weeks and part-time. Cybersecurity with AI is the introduction: a first pass at AI in security operations and at securing LLM applications. AI Security & SecOps is the advanced, lab-heavy course. You spend more time in labs — prompt injection tests, a scoped red-team, guardrails you re-test, basic AI-governance artefacts, and a SIEM/SOAR-style detection, triage and incident-response playbook with approvals and a kill switch. If you want a first course, start with Cybersecurity with AI.

Is this an official CompTIA, SANS, GIAC or government certificate?

No. Completing the program leads to a Datamarcos certificate of completion. We use public frameworks such as the OWASP Top 10 for LLM applications, and we refer to maps such as the NIST AI Risk Management Framework, as working checklists. We do not award, and do not prepare you for, a third-party certification exam.

How long is the program and how much time does it take?

Eight weeks, part-time and live online, at about 6–8 hours a week including the live session and lab work.

Who is it for?

Security, SOC, detection and incident-response professionals, and engineers who ship LLM or agent features and need to secure them in depth. Some IT, logging or security exposure is expected. It is not a first course in cybersecurity fundamentals, and it is not the lighter introduction — that is Cybersecurity with AI.

Are the sessions live?

Yes. Sessions are live and mentor-led, with recordings if you miss a class. Weekend-morning batches are offered for learners in the US, with other regional times available. Exact times are confirmed on a counsellor call.

Will you teach a specific SIEM or SOAR product?

You will practise SIEM- and SOAR-style workflows — detection, triage, enrichment and playbooks with human gates — in a tool you can access or in a practice environment. Datamarcos is not a vendor for those products, and the program is not a vendor certification.

What about fees?

Fees and EMI options shared on a counsellor call.

Is there a refund policy?

Yes. Datamarcos has a 7-day refund policy. If the program is not right for you, ask within 7 days of enrollment.

The full program guide

Read the 8 weeks curriculum.

Modules, projects, tools and format in one PDF. No prices are listed; fees are shared on a counsellor call.

Download PDF

Full program guide