Embarking on a career in cybersecurity can be daunting. With countless resources available, where does one begin? Early in my journey, I stumbled upon the application for the SANS Cyber Academy. Although I considered it a long shot, I decided to apply. Not long after, I was accepted, and the experience has been a whirlwind ever since.
Recently, I completed the Foundations course and earned the corresponding Foundational Cybersecurity Technologies (GFACT) certification. The course exceeded my expectations. It covered a wide range of topics, including a deep dive into computer hardware, virtualization, containers, and programming syntax (along with common errors) in languages like Python and C.
Beyond these fundamental skills, I honed my Linux skills, delved into core networking concepts, and explored different file systems, server types, web technologies, and cloud computing models. I also gained familiarity with cryptography terminology and ethical considerations related to hacking.
Speaking of hacking, before joining SANS Cyber Academy, I spent significant time on TryHackMe, exploring various paths in cybersecurity. While my focus was on Blue Team operations, I also delved into the tools, techniques, and methods used by adversaries and pen testers. Now, I’ve not only enhanced my conceptual understanding but also gained hands-on experience through SANS coursework and labs. I developed a solid grasp of common exploit anatomy, attack methodologies, and the tools employed by attackers. Additionally, I explored forensic investigation tools and learned about the stages of an attack, as well as the steps taken by incident response teams to mitigate and resolve incidents.
Reflecting on this journey, I’m amazed at how much I absorbed in a relatively short time. As I progressed through the course and ultimately passed my certification, the bits of information coalesced into a comprehensive map of related terms, concepts, protocols, and procedures—forming the foundation of my cybersecurity knowledge. This is why SANS is so effective. The content they deliver, and their multifaceted approach make their courses and corresponding GIAC certifications highly sought after and highly regarded.
As I embark on my studies for my next course ‘Security Essentials – Network, Endpoint, and Cloud’, and the corresponding GSEC certification, I look forward to writing another update and adding another certification to my arsenal.