York University Unleashes New Penetration Testing Program for Cyber Warriors

York University Unleashes New Penetration Testing Program for Cyber Warriors

At a glance

• York University launches a part-time Certificate in Penetration Testing.
• The program is aimed at early- to mid-career IT and security professionals.
• Students work through simulated attacks in a hands-on capstone.
• Industry practitioners helped shape the curriculum.
• The goal is graduates who can step into penetration testing roles.

A three-course certificate in ethical hacking

York University’s School of Continuing Studies in Toronto announced on March 18, 2025 a new Certificate in Penetration Testing for people who want to move into offensive security work. The part-time program has three courses: Penetration Testing Fundamentals, Network Penetration Testing and Web Application Penetration Testing. The first cohort starts in September 2025.

Why the program launched now

Employers are short of people who can find weaknesses before attackers do. Penetration testing is that job: probing a system’s defenses on purpose, with permission, to show where they fail. The certificate covers ethical hacking, vulnerability assessment, exploit development and cloud security.

York says the program is meant to give students practical skills they can use against real attacks and to prepare graduates to contribute at work right away.

Labs and a capstone

Practice is central. The program ends with a capstone in which students work through simulated cyber-attack scenarios using industry-standard tools. Students also get CompTIA PenTest+ materials and labs, a PenTest+ exam voucher and access to the TryHackMe platform.

York developed its new continuing-studies programs with industry experts so the material reflects current practice. Coursework mixes live sessions with self-paced study.

Aimed at career changers and upskillers

The program targets early- to mid-career IT professionals and security staff who want to specialize. Demand for testers is strong, and a PenTest+ voucher gives graduates a recognized credential to show employers.

It also fits a wider trend. Universities are building shorter, job-focused programs to meet employer demand for security skills.

What it means for students

For someone already in IT, a part-time certificate is a lower-risk way into offensive security than a full degree. Prospective students should compare the course list with job postings in their area, ask about class schedules, and check whether the exam voucher and lab access cover what they need for PenTest+.

Other schools are building similar programs to close the security skills gap, so applicants will have choices. Comparing capstone format and instructor experience is a good place to start.

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.