From curiosity to cybersecurity. SOC Analyst Linux | Networking | Security Operations Sharing lessons, labs, and beginner-friendly insights.
Lagos Nigeria
Joined September 2024
- Tweets9.8K
- Following1.5K
- Followers2.3K
- Likes6.3K
XXIII retweeted
The next 6 months will pass whether you start or not. Imagine where you could be by then if you stayed consistent, learned the fundamentals, practised hands-on labs, and built real-world projects.
Don't just consume tutorials. Build skills, challenge yourself, and document your progress.
Start now. Your future self will thank you.
XXIII retweeted
October was a reminder that the cybersecurity landscape is changing.
PHP, Railway, OpenCode, Binance, LiteLLM, Cursor and several other platforms experienced security incidents.
But here's what caught my attention: AI is becoming part of both sides of the battlefield.
Attackers are exploring AI-assisted automation, while AI platforms, coding agents, API keys and developer tools are becoming new attack surfaces.
Not every incident involved AI, but the direction is clear: the attack surface is evolving.
For cybersecurity students and professionals, this is a wake-up call.
Don't abandon your fundamentals. Start understanding AI security, cloud security, supply-chain attacks and how to defend AI-powered systems.
The threats are evolving. Our skills must evolve too.
XXIII retweeted
AI is growing rapidly, and businesses are adopting it faster than ever.
But with this growth comes a new set of security challenges.
AI-powered attacks, deepfakes, prompt injection, data poisoning, model vulnerabilities, automated phishing and attacks against AI agents.
The question is, how prepared are cybersecurity students and professionals for this new reality?
We can't keep preparing for tomorrow's threats using only yesterday's knowledge.
We need to understand AI, learn how to secure AI systems, adapt our defensive strategies and develop practical skills to investigate these emerging threats.
The future of cybersecurity will demand more than traditional security knowledge.
How are you preparing for it?
XXIII retweeted
Possibly! But I think 2027 will reward those who prepare before the hiring wave, not those who start preparing when everyone is talking about it. Build practical skills, gain hands-on experience and learn how to use AI in security. The opportunities may come, but we need to be ready to take them.
My advice: don't wait for 2027 to start preparing. Start now.
XXIII retweeted
As a beginner in cybersecurity, the first two months can be overwhelming enough to make you want to quit.
Now you're five months in, and deep down, you feel like you've achieved nothing or wasted your time.
But don't be too hard on yourself. Progress isn't always obvious.
Stop consuming endless tutorials and start practising. Build labs, investigate alerts, analyse logs and document your findings.
Also, don't be afraid to reach out to people already in the field. Sometimes, having someone guide you in the right direction can fast-track your journey.
You don't have to figure everything out alone. Keep going!
XXIII retweeted
Stop watching YouTube videos and answering generic cybersecurity questions.
Put those months of studying to the test.
Get your hands dirty. Investigate alerts, analyse logs, hunt threats, investigate suspicious activity, and work through real-world SOC analyst scenarios in practical labs.
Knowledge is good. But can you apply it when it matters?
Challenge yourself. Stop preparing forever and start practising.
XXIII retweeted
CALLING ALL SOC ANALYSTS - NEW LAB ALERT 🚨
A shell was opened inside a live card-authorization pod early on a Wednesday morning.
We need you to investigate what happened and what the Org needs to do next.
LIVE NOW AT DTO 🛡️
XXIII retweeted
Imagine if, as a beginner, you approached cybersecurity this way:
Instead of spending months jumping between courses, certifications, and different career paths, you picked ONE path and studied what employers actually expect from entry-level candidates.
You learned the fundamentals, practised the required skills, built projects to prove what you could do, documented your work, and started applying for relevant opportunities.
By the time you applied, you wouldn't just be saying, "I want to work in cybersecurity."
You'd have something to show for your effort.
That's the difference between simply learning cybersecurity and preparing yourself for a cybersecurity job.
Learn. Practise. Build proof. Apply. Improve. Repeat.
How to land your FIRST Tier 1 cybersecurity job with no experience 🧵
You don't need to know everything. You need to prove you're ready to do the job.
Here's the roadmap:
1. Pick a role.
SOC Analyst, IT Support, Junior Pentester, GRC Analyst, or Cloud Support. Focus on ONE.
2. Learn the job requirements.
Find 20 entry-level vacancies. Write down the skills and tools employers repeatedly request. Study those first.
3. Build your foundation.
Learn networking, operating systems, security fundamentals, and basic troubleshooting relevant to your chosen role.
4. Practice with real tasks.
For SOC: investigate alerts, analyze logs, and write incident reports.
For GRC: perform risk assessments and map controls.
For pentesting: practice legally in labs and write vulnerability reports.
5. Build 2–3 portfolio projects.
Document the problem, tools used, investigation process, findings, and recommendations. Make it easy for recruiters to verify your skills.
6. Get experience any way you can.
Apply for internships, apprenticeships, IT support roles, volunteer projects, and legitimate entry-level opportunities.
7. Fix your CV.
Show projects, technical skills, and measurable results. Don't just write "passionate about cybersecurity."
8. Apply strategically.
Tailor your CV to each role. Practice technical interviews. Track applications and improve based on feedback.
9. Use certifications wisely.
Get relevant certifications if job listings justify them, but don't wait until you've collected five certificates before applying.
The goal isn't to finish learning cybersecurity. It's to become competent at the job you're applying for.
Save this. Start with Step 1 today.
This isn't a guaranteed way to get hired, but it gives you a practical roadmap to improve your chances.
XXIII retweeted
How to land your FIRST Tier 1 cybersecurity job with no experience 🧵
You don't need to know everything. You need to prove you're ready to do the job.
Here's the roadmap:
1. Pick a role.
SOC Analyst, IT Support, Junior Pentester, GRC Analyst, or Cloud Support. Focus on ONE.
2. Learn the job requirements.
Find 20 entry-level vacancies. Write down the skills and tools employers repeatedly request. Study those first.
3. Build your foundation.
Learn networking, operating systems, security fundamentals, and basic troubleshooting relevant to your chosen role.
4. Practice with real tasks.
For SOC: investigate alerts, analyze logs, and write incident reports.
For GRC: perform risk assessments and map controls.
For pentesting: practice legally in labs and write vulnerability reports.
5. Build 2–3 portfolio projects.
Document the problem, tools used, investigation process, findings, and recommendations. Make it easy for recruiters to verify your skills.
6. Get experience any way you can.
Apply for internships, apprenticeships, IT support roles, volunteer projects, and legitimate entry-level opportunities.
7. Fix your CV.
Show projects, technical skills, and measurable results. Don't just write "passionate about cybersecurity."
8. Apply strategically.
Tailor your CV to each role. Practice technical interviews. Track applications and improve based on feedback.
9. Use certifications wisely.
Get relevant certifications if job listings justify them, but don't wait until you've collected five certificates before applying.
The goal isn't to finish learning cybersecurity. It's to become competent at the job you're applying for.
Save this. Start with Step 1 today.
This isn't a guaranteed way to get hired, but it gives you a practical roadmap to improve your chances.
XXIII retweeted
New course alert on Defend the Org: IAM Basics!
Who has access to what, and why? That’s a question every security professional should be able to answer.
Learn the fundamentals of Identity & Access Management and build a stronger cybersecurity foundation.
Start learning 👇
defendtheorg.com/dashboard/c…
XXIII retweeted
For those asking where to learn SQL, you can start with the basics on Defend The Org. 👇
defendtheorg.com/dashboard/c…
Start with the fundamentals and build from there.
XXIII retweeted
IAM is HUGE right now.
Here’s an easy way to learn the basics in under 2 hours.
XXIII retweeted
Many beginners slide into my DMs asking about SQL and why a SOC analyst needs it.
SQL is a language used to retrieve and analyze data stored in databases.
Why does it matter in a SOC?
1. Investigate suspicious user activity.
2. Find patterns in security data.
3. Identify records linked to potential incidents.
Start with SELECT, WHERE, ORDER BY, and JOIN.
You don't need to be a database expert. Learn the basics and understand how to use data during investigations.
Remember: A good SOC analyst knows how to ask the right questions of the data.
XXIII retweeted
🚨 TIME TO TEST YOUR DETECTION ENGINEERING SKILLS 🚨
THE WEEK 7 CHALLENGE IS HERE...
Identify PowerShell processes patterns that are commonly used by attackers to evade detection.
Available FREE - at DefendTheOrg.
XXIII retweeted
What skills would you want to see added to @defendtheorg ?
Currently we have:
- Code Review
- Detection Engineering
- Incident Response
- MITRE ATT&CK
- Security operations
- Scripting
- System Design
- Threat Hunting
- Threat Modeling
Are there any blue-team specific skills you'd want to see labs for?
Some ideas I've been floating around:
- IAM
- Cloud Security
- Threat Intel
- (Insert Your Skill Here...)
XXIII retweeted
Someone can find your home address without ever hacking your accounts.
That's something I think more people should understand about online privacy.
We focus heavily on passwords and MFA, but personal information can already be circulating through data brokers.
XXIII retweeted
Cybersecurity is a broad field, and the learning curve can be overwhelming. That’s why choosing a path should go beyond salary, popularity, or what others are doing.
Take time to understand your strengths, interests, and the kind of problems you enjoy solving. If you choose a path that genuinely interests you, you’re more likely to stay curious, remain consistent, and push through the difficult stages of learning.
Every path requires effort, but when your interests align with your work, staying committed becomes easier.
Don’t just choose a path because it’s in demand. Choose one you can see yourself growing in for the long term.
XXIII retweeted
It’s not just about choosing a path because it’s popular. Know yourself, understand your strengths, and identify what you’re genuinely good at and enjoy doing. The right path is the one that aligns with your interests and abilities, not just what everyone else is choosing.
