Want to become an ethical hacker in Dubai but have no IT background? It’s not glamorous advice, but the path is well-trodden: build foundations, pick up a recognised cert, ship a portfolio, practise interviews. Realistic timeline for a disciplined learner in the UAE is 6–12 months. Here’s the roadmap we hand our Dubai freshers on day one.
Month 1–2: Foundations you can’t skip
- Networking basics (TCP/IP, subnetting, OSI) — ~40 hours.
- Linux command line proficiency — ~30 hours.
- Python basics (scripting, not full engineering) — ~30 hours.
- Windows administration fundamentals — ~20 hours.
Our SEC-100 cybersecurity essentials training in Dubai covers exactly this layer with UAE-focused lab scenarios.
Month 3–4: Your first real cert — CEH v12
CEH is the standard UAE entry credential. It opens SOC and junior-analyst roles. Plan 4–8 weeks of focused prep including iLabs. See the syllabus and batch schedule on our CEH v12 Dubai page.
Month 5–6: Build a visible portfolio
- Create a TryHackMe profile; climb to top 5%.
- Do 10+ HackTheBox machines; write clean writeups on a personal blog.
- Contribute one small tool to GitHub (even a Python recon helper).
- Document 2–3 Dubai-relevant case studies (e.g., fintech API security, e-commerce XSS).
Month 6–9: Job hunt + first role
- Target: SOC Analyst L1, Junior Security Analyst, Security Engineer I.
- Dubai employers to watch: banks (ENBD, DIB, Mashreq), fintechs (DIFC), MSSPs (Help AG, Paramount), consulting (PwC, EY, Deloitte UAE).
- LinkedIn-first: UAE recruiters filter on keywords + CEH.
- Practise 3 behavioural and 5 technical interviews minimum before first live interview.
Month 9–12: Level up towards pentest
Once you’re in a SOC/analyst role, start committing to CPENT or OSCP in evenings/weekends. That’s where AED salary jumps.
AED budget for a fresher (2026)
- SEC-100 + fundamentals self-study: AED 1,500–3,000.
- CEH ATC bundle: AED 4,000–6,500.
- Labs/platforms (THM/HTB): AED 200–400/month.
- Total ~AED 6,000–11,000 over the first year.
Common Dubai-specific mistakes to avoid
- Buying “cheap” non-ATC CEH prep, then paying voucher + retake separately and spending more.
- Skipping foundations and jumping to OSCP — almost always fails.
- Applying with no portfolio — UAE recruiters screen on visible projects, not cert alone.
- Ignoring Arabic-optional government roles that pay well but sit outside LinkedIn.
FAQs
Can I do this while working in another field? Yes — most of our Dubai cohorts are weekend or evening.
Is a degree required? No — cert + portfolio beat a degree for entry-level UAE security roles.
Can I start from Abu Dhabi? Yes — live online or on-site corporate batches. See Abu Dhabi training.
0 Comments