Federal Cyber Defense Skilling Academy Pathways

The Federal Cyber Defense Skilling Academy (Skilling Academy) pathways are live, 100% virtual, instructor-led training courses that provide students with the baseline tasks, knowledge, and skills of various cyber work roles. Each pathway focuses on a specific cyber work role and at the end of the course, students will receive a voucher to take the certification specific to the role covered in the training.
The pathways are the longer of the two Skilling Academy trainings, ranging from a four to 12-week period. The pathway courses take place Monday through Friday from 8:00 a.m. to 5:00 p.m. ET, excluding federal holidays.
All coursework is mapped to the NICE Workforce Framework for Cybersecurity (NICE Framework) and provides federal employees with valuable hands-on experience to practice new skills in lab environments.
- Who Can Apply?
All full-time federal employees in the U.S. Government, in any job series and any grade or grade equivalent for non-General Schedule (GS) employees are eligible to apply to the Federal Cyber Defense Skilling Academy Pathways. Government contractors are not permitted to participate.
Participation in the Skilling Academy is prioritized for Departments and Agencies within the Federal Civilian Executive Branch. Applications from other federal government entities are welcome and will be considered based on course availability and program requirements.
- Pathway Course Schedule - FY25
Pathway Title & Session Number
Length
Course Start & End Date
Application Close Date
Systems Security Analysis – Session 1
4 weeks
2/24/2025 – 3/21/2025
2/7/2025
Systems Security Analysis – Session 2
4 weeks
6/23/2025 – 7/18/2025
6/6/2025
Defensive Cybersecurity – Session 1
12 weeks
3/17/2025 – 6/13/2025
2/28/2025
Defensive Cybersecurity – Session 2
12 weeks
6/23/2025 – 9/26/2025
6/6/2025
AI/ML Pathway – Session 1 (Rescheduled)
4 weeks
7/28/2025 – 8/22/2025
7/21/2025
AI/ML Pathway – Session 2
4 weeks
6/2/2025 – 6/27/2025
5/16/2025
AI/ML Pathway – Session 3
4 weeks
8/25/2025 – 9/19/2025
8/8/2025
Incident Response – Session 1
4 weeks
4/14/2025 – 5/9/2025
3/28/2025
Incident Response – Session 2
4 weeks
7/14/2025 – 8/8/2025
6/27/2025
Vulnerability Analysis – Session 1
4 weeks
4/21/2025 – 5/16/2025
4/4/2025
Vulnerability Analysis – Session 2
4 weeks
8/4/2025 – 8/29/2025
7/18/2025
Digital Forensics – Session 1
4 weeks
4/28/2025 – 5/23/2025
4/11/2025
Digital Forensics – Session 2
4 weeks
8/4/2025 – 8/29/2025
7/18/2025
- Pathway Course Schedule - FY26
Pathway Title & Session Number
Length
Course Start & End Date
Application Close Date
Systems Security Analysis – Session 1
4 weeks
10/14/2025 - 11/12/2025 9/19/2025 Systems Security Analysis – Session 2
4 weeks
4/6/2026 - 5/1/2026 3/13/2026 Defensive Cybersecurity – Session 1
12 weeks
1/12/2026 - 4/7/2026 12/12/2025 Defensive Cybersecurity – Session 2
12 weeks
6/1/2026 - 8/25/2026 5/8/2026 AI/ML Pathway – Session 1
4 weeks
1/20/2026 - 2/18/2026 12/12/2026 AI/ML Pathway – Session 2
4 weeks
8/10/2026 - 9/4/2026 7/17/2026 Incident Response – Session 1
4 weeks
10/20/2025 - 11/17/2025 9/26/2025 Incident Response – Session 2
4 weeks
7/13/2026 - 8/7/2026 6/19/2026 Vulnerability Analysis – Session 1
4 weeks
10/27/2025 - 11/24/2025 10/3/2025 Vulnerability Analysis – Session 2
4 weeks
4/27/2026 - 5/22/2026 4/3/2026 Digital Forensics – Session 1
4 weeks
2/23/2026 - 3/20/2026 1/20/2026 Digital Forensics – Session 2
4 weeks
6/1/2026 - 6/29/2026 5/8/2026 - Sample Class Schedule
Skilling Academy pathways vary in length, ranging from four weeks to 12 weeks, depending on the course. Some sessions may include breaks, while others run continuously. The specific details of the selected course will be outlined in the course schedule. During all course offerings, students are required to participate virtually Monday through Friday, during core business hours, excluding federal holidays. Skilling Academy students cannot maintain alternative work schedules during this time. If the session includes breaks, students will return to their regular duty assignment during those breaks, unless the home agency has approved leave.
Below is a sample schedule of a typical day during a Skilling Academy Pathway:
Time
Event
8:00 AM - 8:10 AM ET
Review daily agenda, answer any questions
8:10 AM - 10:00 AM ET
Lectures
10:00 AM - 12:00 PM ET
Lab time
12:00 PM - 1:00 PM ET
Lunch break
1:00 PM - 2:30 PM ET
Lectures
2:30 PM - 4:50 PM ET
Lab time or self-study
4:50 PM - 5:00 PM ET
Wrap up for the day
- Pathway Course Prerequisites
Each Skilling Academy pathway has recommended prerequisites to help participants successfully complete the course, however they are not mandatory. If you are confident in your skills and capabilities and can dedicate the time needed to fully engage in the training material, we encourage you to apply. All pathway courses are instructor-led to help facilitate learning and skill development for participants across broad skill levels.
Please note, all courses include hands-on practice, lab exercises, and real-world simulations, offering advanced professionals the opportunity to further refine their skills and core competencies in practical scenarios regardless of the stated proficiency level.
The following chart categorizes the Skilling Academy pathways by proficiency level, providing a brief overview of the recommended prerequisite skills and knowledge.
Proficiency Level
Description
Cybersecurity Basics
- Defensive Cybersecurity Pathway
Participants will benefit from basic technical literacy and general understanding of IT and cybersecurity principles; however, no prior hands-on experience is required. These courses welcome beginners by starting with essential concepts and progressively building foundational knowledge and skills, while also offering valuable insights for more advanced professionals looking to strengthen their core understanding. Entry-Level Cybersecurity Professional
- Digital Forensics Pathway
- Systems Security Analysis Pathway
Participants should have a solid foundational understanding of basic IT and cybersecurity principles and be comfortable executing fundamental technical tasks. Prior hands-on experience may be helpful but is not required. These courses are designed to build on foundational frameworks and introduce increasingly complex concepts and practical applications.
Advanced professionals will still find value in these courses, as they provide reinforcement of fundamental concepts to ensure proficiency in complex tasks and responsibilities.
Intermediate Cybersecurity Professional
- Incident Response Pathway
- Vulnerability Analysis Pathway
- Artificial Intelligence and Machine Learning (AI/ML) Pathway
Participants should have some technical exposure to the subject matter and a robust understanding of foundational IT and cybersecurity principles. These courses build on core competencies and accelerate quickly through complex scenarios and advanced topics within the course’s subject area.
A strong foundation in the fundamentals is essential for successfully navigating courses and engaging in the material, they are not recommended for beginners.
Pathway Course Details and Curriculum
This Skilling Academy’s FY25 Course Catalog includes detailed descriptions of all available courses, course dates, and eligibility requirements. Individual course info sheets are available below and provide more detailed information, including prerequisites, learning objectives, and weekly course breakdowns.
The Defensive Cybersecurity Pathway is a 12-week live, instructor-led cybersecurity training course that provides comprehensive education in cybersecurity defense and vulnerability analysis. Through hands-on labs and real-world scenarios, participants master essential skills in identifying and mitigating vulnerabilities across networks, systems, and cloud environments.
Proficiency Level: Cybersecurity Basics
The Systems Security Analysis Pathway is a 4-week live, instructor-led cybersecurity training course that equips professionals with essential skills in analyzing and securing modern IT infrastructures. Through hands-on labs and real-world simulations, participants master vulnerability assessment, system hardening, and security control implementation across traditional and cloud environments.
Proficiency Level: Entry-Level Cybersecurity Professional
The Digital Forensics Pathway is a 4-week live, instructor-led cybersecurity training course that equips professionals with essential skills in digital evidence handling and analysis. Through hands-on labs and real-world scenarios, participants master forensic tools and techniques for investigating devices, networks, and cloud environments.
Proficiency Level: Entry-Level Cybersecurity Professional
The Incident Response Pathway is a 4-week live, instructor-led cybersecurity training course that equips professionals with essential skills in cybersecurity incident handling. Through hands-on labs and real-world scenarios, participants master incident detection, analysis, containment, and recovery techniques across both traditional and cloud environments.
Proficiency Level: Intermediate Cybersecurity Professional
The Vulnerability Analysis Pathway is a 4-week live, instructor-led cybersecurity training course that teaches professionals how to identify, assess, and manage security vulnerabilities across digital systems. Through hands-on labs and real-world scenarios, participants learn essential skills in vulnerability scanning, web application security, and enterprise-level vulnerability management, preparing them to tackle modern organizational security challenges.
Proficiency Level: Intermediate Cybersecurity Professional
The Artificial Intelligence and Machine Learning Pathway is a 4-week live, instructor-led cybersecurity training course that teaches essential skills in developing generative AI applications. Through hands-on labs and practical projects, participants master neural networks, natural language processing, and modern generative models like GANs, VAEs, and transformers.
Proficiency Level: Intermediate Cybersecurity Professional
How to Apply
Apply for the Skilling Academy in two simple steps:

- Complete the Supervisor and Applicant Approval Form - The form must be electronically signed using a digital certificate (i.e., PIV or CAC).
-
Submit the completed Supervisor and Applicant Approval Form – submit your form using your federal government email address to SkillingAcademy@mail.cisa.dhs.gov.
Please review our FAQs page before applying.

Frequently Asked Questions
Have questions? Learn everything you need to know and more about the Federal Cyber Defense Skilling Academy by visiting our FAQs page.
Contact Us
Need more information?
Contact the Skilling Academy Team by emailing SkillingAcademy@mail.cisa.dhs.gov. Emails are typically responded to within three business days.