Indian Institute of Technology Jammu PG Certificate in Cybersecurity with GenAI
- Hands-on labs with Claude, OpenAI and Gemini APIs
- AI-assisted pentesting, bug bounty and red-team simulation in sandboxes
- Secure LLM, RAG and agentic systems against the OWASP LLM Top 10
- Capstone AI security audit defended before a CISO-level panel
- Batch 1
- Now open
- 6 months
- Weekend-only, live online
- 130 hrs
- 110 live + 20 project
- 3+ yrs
- Experience to apply
Curriculum
Six modules, one capstone.
Weekend sessions, 12 to 15 live hours per module. 24 weeks, 9 evaluations.
-
Module 1 Weeks 1 to 4
Foundations of GenAI and cybersecurity
How LLMs work, framed for security professionals. The AI threat landscape, MITRE ATT&CK and the OWASP Top 10 for LLM Applications, and India's regulatory landscape: DPDP Act 2023, CERT-In, RBI and SEBI. Build a sector threat-landscape analyser.
-
Module 2 Weeks 5 to 8
GenAI attack simulation and penetration testing
A full client-grade pentest of a sandboxed web app, LLM-planned and LLM-assisted, with a critique of where AI fell short. Burp Suite, OWASP ZAP.
-
Module 3 Weeks 9 to 12
AI-assisted vulnerability research and bug bounty hunting
An AI reconnaissance pipeline that discovers, classifies and prioritises assets across a bug bounty scope. Nuclei, Python.
-
Module 4 Weeks 13 to 16
Securing GenAI systems and AI governance
A production-style secure RAG app with role-based access, PII filtering and tenant isolation, and a least-privilege AI agent with approval gates, MCP hardening and a full audit trail. LangChain, ChromaDB, LLM Guard.
-
Module 5 Weeks 17 to 20
AI-powered threat detection and SOC operations
A SOC threat-triage bot that classifies SIEM alerts, extracts IOCs and writes analyst and executive summaries. YARA, VirusTotal API.
-
Module 6 Weeks 20 to 22
Enterprise AI security, governance and career readiness
AI governance for the enterprise, then mock technical interviews and a guest panel of CISOs and hiring managers.
-
Module 7 Weeks 23 to 24
Capstone: real-world AI security audit and strategy
8 live and 20 project hours. Audit a real organisation, defend it before IIT Jammu faculty and an industry panel. 30% of your grade.
What you'll learn
What you'll learn, build and gain.
-
25+
AI and security tools, hands-on
-
6
Graded builds you keep
-
2
Live assessments
-
1
Capstone defended in a 15-minute presentation and 10-minute viva
Toolchain: Claude, GPT, Gemini, LangChain, LlamaIndex, ChromaDB, Pinecone, FastAPI, Burp Suite, OWASP ZAP, Nuclei, MITRE ATT&CK, STRIDE, Splunk SPL, YARA, Sigma, KQL, VirusTotal, LLM Guard and NIST AI RMF. Tools may be replaced as the landscape evolves, at the discretion of the Institute.
Who it is for
Twelve roles this was built for.
-
Defenders
SOC analysts, threat hunters, network and infrastructure admins moving from keeping systems up to defending them.
-
Offensive security
Penetration testers, red teamers and bug bounty hunters adding AI-assisted recon and exploit development.
-
Engineers
Application security, cloud and DevOps, data and ML engineers, and software engineers moving into security.
-
Leaders and advisors
Security architects, GRC and compliance leads, CISOs, consultants and auditors building the AI governance case.
Purpose-built for working professionals in Indian enterprise contexts: BFSI, IT services, manufacturing and government. You do not need to be writing production code today.
Faculty and mentors
Taught by people who break systems for a living.
- IIT Jammu Prof. Badri Narayan Subudhi Programme Director · Associate Professor, Electrical Engineering
- IIT Jammu Prof. Harkeerat Kaur Programme Director · Assistant Professor, Computer Science and Engineering
- Offensive security Srinivasarao Kotipalli Modules 1, 2 and 5
- AI security Nikhil K Srivastava Modules 3, 4 and 6
- Application security Abhijeth D Guest faculty · Module 6
What you get
A PG Certificate, and an optional trip to Jammu.
-
Certificate
A PG Certificate issued by IIT Jammu
Issued on completion of all six modules and the capstone viva. The programme is executed through I3C-IIT Jammu in collaboration with USDC Global, and each certificate is verified by the I3C-IIT Jammu office.
-
Campus immersion, optional
Two to three days at IIT Jammu, Jagti
Lab time in the room, faculty face time and your cohort in person. Not required for the certificate. Travel and stay are your own.
-
For teams
Get your company to pay for it
We send an L&D-ready justification pack: outcomes, hours and a GST invoice in your employer's name.
Get reimbursed →
FAQs
Questions, answered.
Who is this program actually for?
Working professionals with 3+ years in IT, cybersecurity, engineering or a tech-adjacent role. It is not an entry-level security course, and it assumes you have shipped or supported real systems.
Do I need to be able to code?
You do not need to be writing production code today. The labs run in Python with instructor-provided targets, and a code background is an advantage, not a requirement.
What happens if I miss a live session?
Every session is recorded and available to you.
Is the campus immersion compulsory?
No. It is an optional add-on and not required for the certificate. Travel and stay are your own.
Are the offensive-security labs legal and safe?
Yes. Labs run in sandbox environments against instructor-provided research targets.
Does the program include placements?
No. I3C-IIT Jammu and IIT Jammu do not endorse or make any placement promises or guarantees associated with this program. Module 6 includes mock technical interviews and a guest panel of CISOs and hiring managers.
How does admission work?
By profile review, not a test. Submit the form, we check the experience requirement, you have an advisor call, then confirm your seat. About a week. If your background does not fit, an advisor tells you before you pay anything.