Real-world IT & cybersecurity career guidance, practical insights, and lessons from the field. Drawing on 26+ years in IT & cybersecurity and 14+ years in the classroom, I cover career decisions, skills, certifications, security operations, GRC, leadership, and what the work actually looks like.
Showing 12 of 41 articles
This is probably the single most common question I get from people considering a move into cybersecurity, and it’s usually asked with an undertone of ...
If you are trying to get into cybersecurity, you have probably asked questions like what certification should I get, do I need a degree, should I buil...
If you are studying for Security+, learning Python, practicing penetration testing, reading about cloud security, and researching GRC frameworks all a...
If you have sent out 200 applications for cybersecurity jobs and heard nothing back, the problem may not be your resume. It may be that you are compet...
A lot of people will tell you that you need a home lab to break into cybersecurity. Some will say it is absolutely essential. Others will say it is a ...
If you’ve never sat through a security interview, the phrase “scenario-based question” probably sounds vague and a little scary. Nobody explains what ...
Two of the most common entry points into cybersecurity look nothing alike once someone’s actually doing the job. A SOC Analyst and a GRC Analyst might...
Most cybersecurity resumes fail before a human ever reads them. In a field desperate for talent, entry-level candidates and career changers still stru...
Smart home devices promise convenience: lights that turn on automatically, a thermostat that learns your schedule, a doorbell camera you can check fro...
A twenty-character password should be unbreakable. That’s what most people believe. Yet accounts protected by genuinely strong, complex passwords get ...
Every cybersecurity decision revolves around three fundamental principles. Whether protecting a personal password, securing a small business, or imple...
Selecting a first cybersecurity certification can feel like navigating a minefield. CompTIA Security+, ISC2 SSCP, various cloud security credentials, ...