From curiosity to cybersecurity. SOC Analyst Linux | Networking | Security Operations Sharing lessons, labs, and beginner-friendly insights.
Lagos Nigeria
Joined September 2024
- Tweets9.8K
- Following1.5K
- Followers2.3K
- Likes6.3K
The next 6 months will pass whether you start or not. Imagine where you could be by then if you stayed consistent, learned the fundamentals, practised hands-on labs, and built real-world projects.
Don't just consume tutorials. Build skills, challenge yourself, and document your progress.
Start now. Your future self will thank you.
XXIII retweeted
October was a reminder that the cybersecurity landscape is changing.
PHP, Railway, OpenCode, Binance, LiteLLM, Cursor and several other platforms experienced security incidents.
But here's what caught my attention: AI is becoming part of both sides of the battlefield.
Attackers are exploring AI-assisted automation, while AI platforms, coding agents, API keys and developer tools are becoming new attack surfaces.
Not every incident involved AI, but the direction is clear: the attack surface is evolving.
For cybersecurity students and professionals, this is a wake-up call.
Don't abandon your fundamentals. Start understanding AI security, cloud security, supply-chain attacks and how to defend AI-powered systems.
The threats are evolving. Our skills must evolve too.
October was a reminder that the cybersecurity landscape is changing.
PHP, Railway, OpenCode, Binance, LiteLLM, Cursor and several other platforms experienced security incidents.
But here's what caught my attention: AI is becoming part of both sides of the battlefield.
Attackers are exploring AI-assisted automation, while AI platforms, coding agents, API keys and developer tools are becoming new attack surfaces.
Not every incident involved AI, but the direction is clear: the attack surface is evolving.
For cybersecurity students and professionals, this is a wake-up call.
Don't abandon your fundamentals. Start understanding AI security, cloud security, supply-chain attacks and how to defend AI-powered systems.
The threats are evolving. Our skills must evolve too.
XXIII retweeted
AI is growing rapidly, and businesses are adopting it faster than ever.
But with this growth comes a new set of security challenges.
AI-powered attacks, deepfakes, prompt injection, data poisoning, model vulnerabilities, automated phishing and attacks against AI agents.
The question is, how prepared are cybersecurity students and professionals for this new reality?
We can't keep preparing for tomorrow's threats using only yesterday's knowledge.
We need to understand AI, learn how to secure AI systems, adapt our defensive strategies and develop practical skills to investigate these emerging threats.
The future of cybersecurity will demand more than traditional security knowledge.
How are you preparing for it?
AI is growing rapidly, and businesses are adopting it faster than ever.
But with this growth comes a new set of security challenges.
AI-powered attacks, deepfakes, prompt injection, data poisoning, model vulnerabilities, automated phishing and attacks against AI agents.
The question is, how prepared are cybersecurity students and professionals for this new reality?
We can't keep preparing for tomorrow's threats using only yesterday's knowledge.
We need to understand AI, learn how to secure AI systems, adapt our defensive strategies and develop practical skills to investigate these emerging threats.
The future of cybersecurity will demand more than traditional security knowledge.
How are you preparing for it?
XXIII retweeted
Possibly! But I think 2027 will reward those who prepare before the hiring wave, not those who start preparing when everyone is talking about it. Build practical skills, gain hands-on experience and learn how to use AI in security. The opportunities may come, but we need to be ready to take them.
My advice: don't wait for 2027 to start preparing. Start now.
XXIII retweeted
As a beginner in cybersecurity, the first two months can be overwhelming enough to make you want to quit.
Now you're five months in, and deep down, you feel like you've achieved nothing or wasted your time.
But don't be too hard on yourself. Progress isn't always obvious.
Stop consuming endless tutorials and start practising. Build labs, investigate alerts, analyse logs and document your findings.
Also, don't be afraid to reach out to people already in the field. Sometimes, having someone guide you in the right direction can fast-track your journey.
You don't have to figure everything out alone. Keep going!
As a beginner in cybersecurity, the first two months can be overwhelming enough to make you want to quit.
Now you're five months in, and deep down, you feel like you've achieved nothing or wasted your time.
But don't be too hard on yourself. Progress isn't always obvious.
Stop consuming endless tutorials and start practising. Build labs, investigate alerts, analyse logs and document your findings.
Also, don't be afraid to reach out to people already in the field. Sometimes, having someone guide you in the right direction can fast-track your journey.
You don't have to figure everything out alone. Keep going!
XXIII retweeted
Stop watching YouTube videos and answering generic cybersecurity questions.
Put those months of studying to the test.
Get your hands dirty. Investigate alerts, analyse logs, hunt threats, investigate suspicious activity, and work through real-world SOC analyst scenarios in practical labs.
Knowledge is good. But can you apply it when it matters?
Challenge yourself. Stop preparing forever and start practising.
Stop watching YouTube videos and answering generic cybersecurity questions.
Put those months of studying to the test.
Get your hands dirty. Investigate alerts, analyse logs, hunt threats, investigate suspicious activity, and work through real-world SOC analyst scenarios in practical labs.
Knowledge is good. But can you apply it when it matters?
Challenge yourself. Stop preparing forever and start practising.
XXIII retweeted
CALLING ALL SOC ANALYSTS - NEW LAB ALERT 🚨
A shell was opened inside a live card-authorization pod early on a Wednesday morning.
We need you to investigate what happened and what the Org needs to do next.
LIVE NOW AT DTO 🛡️
XXIII retweeted
Imagine if, as a beginner, you approached cybersecurity this way:
Instead of spending months jumping between courses, certifications, and different career paths, you picked ONE path and studied what employers actually expect from entry-level candidates.
You learned the fundamentals, practised the required skills, built projects to prove what you could do, documented your work, and started applying for relevant opportunities.
By the time you applied, you wouldn't just be saying, "I want to work in cybersecurity."
You'd have something to show for your effort.
That's the difference between simply learning cybersecurity and preparing yourself for a cybersecurity job.
Learn. Practise. Build proof. Apply. Improve. Repeat.
How to land your FIRST Tier 1 cybersecurity job with no experience 🧵
You don't need to know everything. You need to prove you're ready to do the job.
Here's the roadmap:
1. Pick a role.
SOC Analyst, IT Support, Junior Pentester, GRC Analyst, or Cloud Support. Focus on ONE.
2. Learn the job requirements.
Find 20 entry-level vacancies. Write down the skills and tools employers repeatedly request. Study those first.
3. Build your foundation.
Learn networking, operating systems, security fundamentals, and basic troubleshooting relevant to your chosen role.
4. Practice with real tasks.
For SOC: investigate alerts, analyze logs, and write incident reports.
For GRC: perform risk assessments and map controls.
For pentesting: practice legally in labs and write vulnerability reports.
5. Build 2–3 portfolio projects.
Document the problem, tools used, investigation process, findings, and recommendations. Make it easy for recruiters to verify your skills.
6. Get experience any way you can.
Apply for internships, apprenticeships, IT support roles, volunteer projects, and legitimate entry-level opportunities.
7. Fix your CV.
Show projects, technical skills, and measurable results. Don't just write "passionate about cybersecurity."
8. Apply strategically.
Tailor your CV to each role. Practice technical interviews. Track applications and improve based on feedback.
9. Use certifications wisely.
Get relevant certifications if job listings justify them, but don't wait until you've collected five certificates before applying.
The goal isn't to finish learning cybersecurity. It's to become competent at the job you're applying for.
Save this. Start with Step 1 today.
This isn't a guaranteed way to get hired, but it gives you a practical roadmap to improve your chances.
Imagine if, as a beginner, you approached cybersecurity this way:
Instead of spending months jumping between courses, certifications, and different career paths, you picked ONE path and studied what employers actually expect from entry-level candidates.
You learned the fundamentals, practised the required skills, built projects to prove what you could do, documented your work, and started applying for relevant opportunities.
By the time you applied, you wouldn't just be saying, "I want to work in cybersecurity."
You'd have something to show for your effort.
That's the difference between simply learning cybersecurity and preparing yourself for a cybersecurity job.
Learn. Practise. Build proof. Apply. Improve. Repeat.
How to land your FIRST Tier 1 cybersecurity job with no experience 🧵
You don't need to know everything. You need to prove you're ready to do the job.
Here's the roadmap:
1. Pick a role.
SOC Analyst, IT Support, Junior Pentester, GRC Analyst, or Cloud Support. Focus on ONE.
2. Learn the job requirements.
Find 20 entry-level vacancies. Write down the skills and tools employers repeatedly request. Study those first.
3. Build your foundation.
Learn networking, operating systems, security fundamentals, and basic troubleshooting relevant to your chosen role.
4. Practice with real tasks.
For SOC: investigate alerts, analyze logs, and write incident reports.
For GRC: perform risk assessments and map controls.
For pentesting: practice legally in labs and write vulnerability reports.
5. Build 2–3 portfolio projects.
Document the problem, tools used, investigation process, findings, and recommendations. Make it easy for recruiters to verify your skills.
6. Get experience any way you can.
Apply for internships, apprenticeships, IT support roles, volunteer projects, and legitimate entry-level opportunities.
7. Fix your CV.
Show projects, technical skills, and measurable results. Don't just write "passionate about cybersecurity."
8. Apply strategically.
Tailor your CV to each role. Practice technical interviews. Track applications and improve based on feedback.
9. Use certifications wisely.
Get relevant certifications if job listings justify them, but don't wait until you've collected five certificates before applying.
The goal isn't to finish learning cybersecurity. It's to become competent at the job you're applying for.
Save this. Start with Step 1 today.
This isn't a guaranteed way to get hired, but it gives you a practical roadmap to improve your chances.
XXIII retweeted
How to land your FIRST Tier 1 cybersecurity job with no experience 🧵
You don't need to know everything. You need to prove you're ready to do the job.
Here's the roadmap:
1. Pick a role.
SOC Analyst, IT Support, Junior Pentester, GRC Analyst, or Cloud Support. Focus on ONE.
2. Learn the job requirements.
Find 20 entry-level vacancies. Write down the skills and tools employers repeatedly request. Study those first.
3. Build your foundation.
Learn networking, operating systems, security fundamentals, and basic troubleshooting relevant to your chosen role.
4. Practice with real tasks.
For SOC: investigate alerts, analyze logs, and write incident reports.
For GRC: perform risk assessments and map controls.
For pentesting: practice legally in labs and write vulnerability reports.
5. Build 2–3 portfolio projects.
Document the problem, tools used, investigation process, findings, and recommendations. Make it easy for recruiters to verify your skills.
6. Get experience any way you can.
Apply for internships, apprenticeships, IT support roles, volunteer projects, and legitimate entry-level opportunities.
7. Fix your CV.
Show projects, technical skills, and measurable results. Don't just write "passionate about cybersecurity."
8. Apply strategically.
Tailor your CV to each role. Practice technical interviews. Track applications and improve based on feedback.
9. Use certifications wisely.
Get relevant certifications if job listings justify them, but don't wait until you've collected five certificates before applying.
The goal isn't to finish learning cybersecurity. It's to become competent at the job you're applying for.
Save this. Start with Step 1 today.
This isn't a guaranteed way to get hired, but it gives you a practical roadmap to improve your chances.
How to land your FIRST Tier 1 cybersecurity job with no experience 🧵
You don't need to know everything. You need to prove you're ready to do the job.
Here's the roadmap:
1. Pick a role.
SOC Analyst, IT Support, Junior Pentester, GRC Analyst, or Cloud Support. Focus on ONE.
2. Learn the job requirements.
Find 20 entry-level vacancies. Write down the skills and tools employers repeatedly request. Study those first.
3. Build your foundation.
Learn networking, operating systems, security fundamentals, and basic troubleshooting relevant to your chosen role.
4. Practice with real tasks.
For SOC: investigate alerts, analyze logs, and write incident reports.
For GRC: perform risk assessments and map controls.
For pentesting: practice legally in labs and write vulnerability reports.
5. Build 2–3 portfolio projects.
Document the problem, tools used, investigation process, findings, and recommendations. Make it easy for recruiters to verify your skills.
6. Get experience any way you can.
Apply for internships, apprenticeships, IT support roles, volunteer projects, and legitimate entry-level opportunities.
7. Fix your CV.
Show projects, technical skills, and measurable results. Don't just write "passionate about cybersecurity."
8. Apply strategically.
Tailor your CV to each role. Practice technical interviews. Track applications and improve based on feedback.
9. Use certifications wisely.
Get relevant certifications if job listings justify them, but don't wait until you've collected five certificates before applying.
The goal isn't to finish learning cybersecurity. It's to become competent at the job you're applying for.
Save this. Start with Step 1 today.
This isn't a guaranteed way to get hired, but it gives you a practical roadmap to improve your chances.
XXIII retweeted
New course alert on Defend the Org: IAM Basics!
Who has access to what, and why? That’s a question every security professional should be able to answer.
Learn the fundamentals of Identity & Access Management and build a stronger cybersecurity foundation.
Start learning 👇
defendtheorg.com/dashboard/c…
New course alert on Defend the Org: IAM Basics!
Who has access to what, and why? That’s a question every security professional should be able to answer.
Learn the fundamentals of Identity & Access Management and build a stronger cybersecurity foundation.
Start learning 👇
defendtheorg.com/dashboard/c…
XXIII retweeted
For those asking where to learn SQL, you can start with the basics on Defend The Org. 👇
defendtheorg.com/dashboard/c…
Start with the fundamentals and build from there.
Many beginners slide into my DMs asking about SQL and why a SOC analyst needs it.
SQL is a language used to retrieve and analyze data stored in databases.
Why does it matter in a SOC?
1. Investigate suspicious user activity.
2. Find patterns in security data.
3. Identify records linked to potential incidents.
Start with SELECT, WHERE, ORDER BY, and JOIN.
You don't need to be a database expert. Learn the basics and understand how to use data during investigations.
Remember: A good SOC analyst knows how to ask the right questions of the data.
For those asking where to learn SQL, you can start with the basics on Defend The Org. 👇
defendtheorg.com/dashboard/c…
Start with the fundamentals and build from there.
XXIII retweeted
IAM is HUGE right now.
Here’s an easy way to learn the basics in under 2 hours.