Master'sAutomotive & Motorsport Applications open

Master’s in Platform Cybersecurity and Tactical Communications Engineering

Online master's programme of 1,900 hours in cybersecurity engineering for platforms and tactical communications. 12 modules covering NIST SP 800-53, ISO/IEC 27001:2022, ISO/IEC 15408, embedded systems security, tactical communications, applied cryptography, network security, accreditation and incident response, using Wireshark and Security Onion, with an assigned technical tutor.

Duration1900 h
ModeOnline
LanguageEnglish
Start datesSet by the faculty
AwardSEIUM Institute diploma
Virtual lab · try it before you enrol

Take the controls.

Run a real engineering trade-off from this programme. Move the sliders, watch the model react in real time and beat the challenge.

SIM · LIVE ●
Learning outcomes

What you will be able to do

01

Analyse the attack surface of defence platforms from a defensive standpoint.

02

Manage cyber risk using recognised frameworks.

03

Design the security of on-board systems.

04

Understand tactical communications architectures.

05

Apply cryptography and network security.

06

Evaluate and accredit systems in line with standards.

07

Manage cybersecurity across the life cycle according to ethical criteria.

Profile

Who it's for

  • Platform cybersecurity engineers working on vehicles, ships or aircraft.
  • Embedded security architects designing secure on-board systems.
  • OT cybersecurity analysts moving into defence platforms.
  • Secure communications engineers working with tactical networks and radios.
  • System accreditation managers preparing evaluation and accreditation files.
  • Incident response analysts who need to work with on-board and tactical systems.
  • Engineering or science graduates aiming to enter the defence industry.
Standards & tools

What you'll work with

  • NIST SP 800-53 (security and privacy controls)
  • ISO/IEC 27001:2022 (information security management systems)
  • ISO/IEC 15408 (Common Criteria for IT security evaluation)
  • RTCA DO-326A (airworthiness security process)
  • IEC 62443 series (security of industrial automation and control systems)
  • Royal Decree 311/2022 (Spanish National Security Framework)
  • Directive (EU) 2022/2555 (NIS2)
  • ISO/IEC 27005:2022 (information security risk management)
  • Wireshark
  • Microsoft Threat Modeling Tool
  • Security Onion
  • OpenSCAP
  • GNU Radio
Syllabus

12 modules · 1900 h

  1. 1.1Platforms as cyber-physical systems
  2. 1.2Attack surface of vehicles, ships and aircraft
  3. 1.3Differences between IT, OT and on-board systems
  4. 1.4Legal and doctrinal framework of cyber defence
  5. 1.5International law in cyberspace
  6. 1.6The programme's defensive approach
  7. 1.7Cybersecurity ethics
  8. 1.8European cyber defence bodies
  9. 1.9Incidents in open sources
  10. 1.10Case study: attack surface analysis of a generic platform
  1. 2.1Risk management frameworks
  2. 2.2NIST RMF
  3. 2.3ISO/IEC 27005
  4. 2.4STRIDE threat modelling
  5. 2.5Attack trees
  6. 2.6MITRE ATT&CK
  7. 2.7Mission impact assessment
  8. 2.8Security requirements
  9. 2.9Risk acceptance
  10. 2.10Lab: threat model of an on-board system
  1. 3.1Embedded security architectures
  2. 3.2Secure boot
  3. 3.3Hardware security modules
  4. 3.4Hypervisor-based separation
  5. 3.5Data bus security
  6. 3.6Security of MIL-STD-1553 and CAN
  7. 3.7Secure updates
  8. 3.8System hardening
  9. 3.9Security of COTS components
  10. 3.10Practical exercise: configuring secure boot on an embedded board
  1. 4.1Tactical communications architectures
  2. 4.2Software-defined radio
  3. 4.3Mobile ad hoc networks
  4. 4.4Satellite communications
  5. 4.5Data links: concepts
  6. 4.6Network management
  7. 4.7Quality of service
  8. 4.8Resilience against interference: principles
  9. 4.9Interoperability
  10. 4.10Case study: network architecture of a generic unit
  1. 5.1Symmetric and asymmetric cryptography
  2. 5.2Key management
  3. 5.3Public key infrastructure
  4. 5.4Secure protocols
  5. 5.5Post-quantum cryptography
  6. 5.6Approved cryptographic products
  7. 5.7Evaluation of cryptographic products
  8. 5.8EU and NATO requirements
  9. 5.9Secure implementation
  10. 5.10Lab: implementing mutual TLS
  1. 6.1Segmentation and security zones
  2. 6.2Firewalls and data diodes
  3. 6.3Cross-domain gateways
  4. 6.4Intrusion detection
  5. 6.5Security monitoring
  6. 6.6Wireless security
  7. 6.7OT network security
  8. 6.8Secure configuration management
  9. 6.9Zero-trust architectures
  10. 6.10Practical exercise: designing a zero-trust architecture
  1. 7.1Common Criteria ISO/IEC 15408
  2. 7.2Protection profiles
  3. 7.3Product evaluation
  4. 7.4CCN CPSTIC catalogue
  5. 7.5System accreditation
  6. 7.6Authorised penetration testing
  7. 7.7Configuration audits
  8. 7.8Continuous assessment
  9. 7.9Accreditation documentation
  10. 7.10Workshop: preparing an accreditation file
  1. 8.1DO-326A and DO-356A
  2. 8.2ED-202A
  3. 8.3IMO maritime cybersecurity
  4. 8.4Classification society requirements
  5. 8.5Avionics security
  6. 8.6Naval systems security
  7. 8.7Fleet vulnerability management
  8. 8.8Incident response on the platform
  9. 8.9Lessons learned
  10. 8.10Case study: security analysis of an aeronautical link
  1. 9.1Security operations centres
  2. 9.2Monitoring of on-board systems
  3. 9.3Log analysis
  4. 9.4Anomaly detection
  5. 9.5Incident response
  6. 9.6Forensic analysis
  7. 9.7Recovery
  8. 9.8Coordination with CERTs
  9. 9.9Cyber defence exercises
  10. 9.10Practical exercise: incident response exercise in a simulated environment
  1. 10.1Supply chain risks
  2. 10.2Counterfeit hardware and software
  3. 10.3SBOM and component transparency
  4. 10.4CMMC requirements
  5. 10.5Security in development
  6. 10.6In-service patch management
  7. 10.7Obsolescence and security
  8. 10.8End of life and secure erasure
  9. 10.9Supplier audits
  10. 10.10Workshop: SBOM of on-board software
  1. 11.1NIS2 Directive
  2. 11.2Spanish National Security Framework (ENS)
  3. 11.3Cyber Resilience Act
  4. 11.4Classified information regulations
  5. 11.5International law of cyberspace
  6. 11.6The Tallinn Manual as an academic reference
  7. 11.7Ethics and responsible conduct
  8. 11.8Responsible vulnerability disclosure
  9. 11.9Cybersecurity governance
  10. 11.10Case study: responsible disclosure policy
  1. 12.1System definition
  2. 12.2Threat model
  3. 12.3Risk assessment
  4. 12.4Security architecture
  5. 12.5Controls prototype
  6. 12.6Accreditation plan
  7. 12.7Response plan
  8. 12.8Conclusions
  9. 12.9Master's Thesis report
  10. 12.10Master's Thesis: defence before a panel
Methodology, software & labs

How you'll learn

100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. There are no fixed timetables: you progress at your own pace within the intake, so the programme can be combined with work.

Each module combines theory, guided reading of the original standard and applied exercises. The working software is Wireshark, Microsoft Threat Modeling Tool, Security Onion, OpenSCAP and GNU Radio, in free, academic or evaluation versions. Practical work is based on real procedures for threat modelling of on-board systems, designing secure network architectures and incident response exercises in simulated environments. Assessment is continuous by module, plus the final Master's Thesis.

Standards covered: NIST SP 800-53, ISO/IEC 27001:2022, ISO/IEC 15408, RTCA DO-326A, IEC 62443 series, Royal Decree 311/2022 (ENS), Directive (EU) 2022/2555 (NIS2), ISO/IEC 27005:2022.

Assigned technical tutor:every module ends with a deliverable that your tutor marks individually.
Standards-based learning:guided reading of NIST SP 800-53, ISO/IEC 27001:2022 and ISO/IEC 15408 applied to real cases, not as a theoretical annex.
Industry software:Wireshark, Microsoft Threat Modeling Tool, Security Onion, OpenSCAP and GNU Radio, in free, academic or evaluation versions.
Master's Thesis with defence:A security project for a defence platform, covering threat model, risk assessment, security architecture, controls prototype and accreditation plan, defended before a panel.
Flexible format:100% online, no fixed timetables, compatible with full-time work.
Capstone project

Build it end to end

Your final project follows the real engineering workflow, step by step, reviewed by your tutor.

Threat model
Build a STRIDE threat model of an on-board system and assess its mission impact.
Secure on-board design
Configure secure boot and harden an embedded board.
Zero-trust network
Design a zero-trust network architecture with segmentation and cross-domain gateways.
Incident response
Run an incident response exercise in a simulated environment and document recovery.
Master's Thesis
A complete platform security project with accreditation and response plans, defended before a panel.
Career opportunities

Where this takes you

Platform cybersecurity engineerEmbedded security architectOT cybersecurity analystSecure communications engineerSystem accreditation managerIncident response analyst
Admissions & scholarships

Requirements

  • University degree in engineering, science or architecture, or equivalent demonstrable professional experience.
  • Internet connection and a computer capable of running the programme software.
  • English sufficient to read technical standards.

Ready to start?

Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.

FAQ

Frequently asked questions

The programme totals 1,900 hours over 12–14 months. You set your own pace within each intake, and your tutor helps you plan the workload around your job.

You work with Wireshark, Microsoft Threat Modeling Tool, Security Onion, OpenSCAP and GNU Radio, using free, academic or evaluation versions. Your tutor indicates the free alternative wherever one exists.

A SEIUM Institute diploma, awarded on passing the continuous assessment and the Master's Thesis. It is SEIUM's own qualification, not an official state degree; its recognition depends on the programme completed and the regulations of each country.

Yes. Modules passed in a course or postgraduate diploma in the same area are recognised in the higher programme. Ask about the recognition policy when you enrol.

A degree in engineering, science or architecture (or equivalent professional experience), a suitable computer and English sufficient to read technical standards.

Start dates are set by SEIUM's faculty for each intake. Our admissions team will confirm the next available date when you apply.

Master’s in Platform Cybersecurity and Tactical Communications EngineeringEnrol
Scroll to Top
SEIUM – Institute of Advanced Engineering
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.