Six months to learn security and compliance by doing it.
The Security & Compliance Residency is a mentored program from the team behind CATAAM. You work through a real SOC 2 readiness project, test cloud controls, map an attack surface, and finish with a capstone that hiring managers can read.
- 6 months
- duration
- ₹25,000
- plus applicable taxes
- 20–25
- people per cohort
- 2× weekly
- live sessions
Curriculum
One deliverable every month.
Foundations
Linux, networking, AWS/IAM basics, threat modelling, and an overview of SOC 2, ISO 27001, GDPR and PCI DSS.
Deliverable: A hardened cloud lab connected to a sandbox CATAAM org
GRC practitioner
A SOC 2 readiness project end to end: scoping, risk register, policies, controls, evidence and vendor risk.
Deliverable: A full readiness pack for a fictional startup
Technical controls
MFA, logging, vulnerability management, backups, endpoint management. Reading AWS, GitHub and Google Workspace configs and spotting failures.
Deliverable: 15 control tests with pass/fail reasoning
Attack surface
Recon, OWASP Top 10, headers, DMARC and TLS, CVE triage. Writing a public CVE explainer.
Deliverable: An attack-surface report on a consenting target, plus a CVE write-up
Capstone
Pick a track: compliance readiness for a small startup (mentored), an integration or test for CATAAM’s open backlog, or research and content.
Deliverable: A reviewed, working capstone
Audit & career
Mock auditor interview, evidence walkthrough, Security+ / ISO 27001 Lead Implementer prep, resume and interview drills.
Deliverable: Mock-audit write-up and a portfolio site
How it works
Taught by people who ship a compliance product.
TheMarkups is the parent company of CATAAM, a compliance automation and attack-surface platform. Labs run against that platform, so you practise on the same kind of evidence an auditor asks for.
- 01ApplySend the short form below. It takes about five minutes and costs nothing.
- 02Screening assessmentA short online test and a quick call. Top scorers can qualify for a fee waiver.
- 03EnrolPay the first instalment (₹10,000) to confirm your seat.
- 04Learn and buildSix months of live sessions, labs, monthly deliverables and a mentored capstone.
Apply
Tell us about yourself.
We read every application and reply with the screening assessment.
FAQ
Before you apply
- Is this an internship?
- No. It is a paid training program with a mentored project. You pay a fee, and in return you get structured teaching, a capstone reviewed by practitioners, and a certificate. We do not use participants as unpaid labour on production work.
- What does it cost and how is it paid?
- ₹25,000 plus applicable taxes, for the full six months. It is paid in two instalments: ₹10,000 at enrolment and ₹15,000 at the start of month 3. Nothing is charged when you apply.
- Is a job guaranteed?
- No. We do not promise placement. You leave with a portfolio, a mock-audit write-up and exam preparation, and we make introductions and referrals where there is a fit.
- Who is it for?
- Final-year students, recent graduates, engineers moving into security, and career switchers. You need to be comfortable with a command line and willing to write and read a lot. You do not need prior security experience.
- How is it delivered?
- Two live sessions a week (about two hours each), recorded lessons for the early months, weekly mentor Q&A, and hands-on labs on a real compliance platform. Cohorts are small, around 20 to 25 people.
- What if I want to leave?
- Request a full refund within the first 7 days of the cohort. After that, fees already paid for completed months are not refundable.
- Are there scholarships?
- Yes. The top scorers on the screening assessment can qualify for a fee waiver or a reduced fee.