A curriculum designed for maximum employability
The Master’s in Cybersecurity is structured over a single academic year, divided into two terms, totalling 60 ECTS credits. The programme is designed to offer you a logical progression, starting with the fundamental pillars of information security and moving on to the more sophisticated technologies and methodologies that define the current landscape.
First term
The first stage of your training focuses on building a robust, cross-disciplinary knowledge base. Here, you will learn not only the ‘what’ but also the ‘why’ of cybersecurity. You will understand the regulatory context, how risks are managed within an organisation, and the architectures that underpin any defence strategy. These subjects are crucial because they provide you with the strategic vision that distinguishes a technician from a true leader in cybersecurity.
| Module | Credits |
| Risk Analysis | 2 |
| Cybersecurity Risk Control | 4 |
| Cybersecurity governance | 3 |
| Threat intelligence | 3 |
| Regulatory framework | 3 |
| Privacy | 3 |
| Supply chain security | 2 |
| Technology process security | 4 |
| Cybersecurity architectures | 3 |
| Information access control: cryptography and GICA | 3 |
The aim of this first module is to provide you with a 360-degree perspective. Subjects such as Cybersecurity Governance and Regulatory Framework teach you how to align security strategies with business objectives and to comply with increasingly stringent legislation (such as the GDPR). Meanwhile, Risk Analysis and Control equips you with the methodologies needed to identify, assess and mitigate vulnerabilities before they turn into incidents. Finally, modules such as Threat Intelligence and Cryptography immerse you fully in the technical side of things, teaching you to think like the adversary and to use the encryption tools that protect your most valuable asset: information.
Second term
Once the foundations have been laid, the second term immerses you fully in the areas of specialisation that are currently in highest demand in the job market. The focus becomes much more technical and practical, preparing you for the real-world challenges you’ll face in your day-to-day work as a professional. This is where you’ll learn to defend modern infrastructures, from cloud systems to industrial networks, and where you’ll put your skills to the test using controlled offensive methodologies.
| Course | Credits |
| Cloud Security | 3 |
| Ethical Hacking | 3 |
| Work Placements | 6 |
| Monitoring and response processes | 3 |
| Communications network security | 3 |
| Security in wireless, mobile, OT and IoT systems | 3 |
| Security in operating systems and databases | 3 |
| Master’s Thesis | 6 |
This module places you at the forefront of the sector. With Cloud Security, you will master the protection of AWS, Azure and Google Cloud environments, which are essential in today’s business landscape. The Ethical Hacking module is one of the most highly rated, as it teaches you to use the same techniques as cybercriminals to proactively identify and rectify security vulnerabilities. Furthermore, modules such as Security in Wireless, Mobile, OT and IoT Systems address the defence against new attack surfaces, such as connected devices and operational technology – a rapidly expanding field. Finally, the External Placements and the Master’s Thesis (TFM) allow you to apply everything you have learnt in a real-world environment or through an in-depth research project.
Why does this curriculum prepare you for the future of the industry?
The cybersecurity sector is evolving at breakneck speed. Today’s threats will not be the same as tomorrow’s, and the technologies we defend are constantly changing. That is why a high-quality Master’s programme must not only teach you about current tools, but must also equip you with the ability to adapt and continue learning throughout your life.
This curriculum achieves this through several key pillars:
- Comprehensive view of risk: by combining risk management (Analysis, Control, Governance) with the technical aspects, you learn to make security decisions based on the impact on the business – a highly sought-after skill in senior roles.
- Focus on high-demand areas: the syllabus places particular emphasis on fields such as cloud security, threat intelligence and OT/IoT security. Professionals with expertise in these areas are in short supply and, as a result, highly valued. Companies are migrating to the cloud on a massive scale and connecting their industrial systems, creating an urgent need for experts who know how to protect these environments.
- An offensive mindset for proactive defence: the inclusion of ethical hacking is essential. Understanding how an attacker thinks and acts enables you to design far more robust defences and anticipate their moves. It is not just about building walls, but about knowing where they will try to break them down.
- Preparation for incident response: the module ‘Monitoring and Response Processes’ is key. Knowing how to react is just as important as prevention. You will learn to manage a security incident from its detection through to its resolution and recovery, minimising the impact on the organisation.
This approach ensures not only that you’ll secure a job upon completion, but also that you’ll have a professional career with excellent future prospects, capable of progressing into roles such as CISO (Chief Information Security Officer), security architect, intelligence analyst or specialist consultant.
What methodologies and practical labs are used?
Theory is necessary, but in cybersecurity, practice is everything. The methodology of the UAX online Master’s in Cybersecurity is designed to allow you to balance your studies with your personal and professional life, without compromising on practical, hands-on training.
The model is based on being:
- Online and supported: from day one, you’ll have academic advisers to guide your learning. You won’t feel alone in front of the screen. You’ll have a study plan and a Virtual Campus with all the tools you need: documents, live and recorded virtual classes, and forums to clarify any queries.
- Flexible: you decide where and when to study. Access to the Virtual Campus is available 24/7, giving you complete freedom to organise your learning around your own schedule. You can contact your lecturers via various channels at any time.
- Hands-on with virtual labs: although specific labs aren’t detailed here, a curriculum featuring subjects such as ‘Ethical Hacking’ or ‘Network Security’ relies heavily on virtual labs (cyber ranges). On these platforms, you can launch attacks in controlled environments, analyse malware safely, configure firewalls and intrusion detection systems (IDS/IPS), and, ultimately, ‘learn by doing’ without any risk.
- Assessment tailored to you: you have the flexibility to choose whether you prefer to sit your exams online from home or in person at UAX-approved centres, fully adapting to your needs.
This combination of flexibility and support, together with a strong practical component through laboratory sessions, ensures that you acquire not only theoretical knowledge but also the technical skills you will be able to apply from your very first day at work.
Work placements as a minimum: your link to the real world
The crowning glory of your training is the work placement. The master’s programme includes 150 hours of work placement, which will serve as your first professional experience in the sector or help you consolidate your career if you are already working in technology.
The university offers you access to over 8,800 partnership agreements with leading companies, including tech giants such as IBM, Microsoft, Hispasat and Telefónica, amongst many others. This opens the door for you to apply your knowledge in real-world settings, work on cutting-edge projects and build valuable professional networks.
Furthermore, if you already have at least one year’s experience in a role related to cybersecurity, you can apply to have your work placement recognised, allowing you to focus that time on other areas of the Master’s programme. Throughout the process, you’ll receive personalised support from professional advisers who will help you make the most of this experience.
Summary
Ultimately, when you ask what subjects are covered in cybersecurity, the answer goes beyond a simple list of modules. It is a comprehensive training programme that transforms you into a well-rounded professional. Through this Master’s programme, you’ll acquire a solid foundation in risk management and governance, specialise in the most in-demand technical areas such as cloud computing and ethical hacking, and develop the necessary practical skills through labs and work placements at leading companies. This programme is designed not only to award you a qualification, but also to prepare you in a practical and effective way for one of the most exciting and essential professions of the 21st century – a field in which, moreover, salaries for cybersecurity experts are highly competitive.
Sources
Alfonso X el Sabio University (UAX). (2024). Curriculum for the Master’s Degree in Cybersecurity.
