Introduction

My journey into cybersecurity is still in its early stages, but I have already learned how broad and interesting the field can be. I started learning cybersecurity because I wanted to understand how technology, security, and people all work together—and how organizations protect their information from threats.

As I continue learning, I have been focusing on building practical skills rather than only learning definitions. I want to understand not just what a security concept is, but also why it matters and how it could be applied in a real-world environment.

I created this blog to document that journey, share what I learn, and keep track of my progress as I work toward a career in cybersecurity.

What I've Been Learning

One of the things I've enjoyed most about cybersecurity is how many different areas are connected.

I've been learning about topics including:

• Linux and Linux permissions

• Python programming

• SQL and databases

• Networking and security fundamentals

• Vulnerability management

• The NIST Cybersecurity Framework

• Risk assessments

• Identity and Access Management (IAM)

• Security Information and Event Management (SIEM)

• Security Orchestration, Automation, and Response (SOAR)

• Social engineering

• VPNs and firewalls

• Denial-of-Service attacks

• Common Vulnerabilities and Exposures (CVEs)

Each topic has helped me understand another part of the bigger cybersecurity picture.

Learning Linux

Linux has been one of the areas I've been working on as I build my technical foundation.

I've been learning how Linux handles files, directories, permissions, users, and groups. Understanding permissions has been especially important because access control is a major part of cybersecurity.

For example, knowing who can read, write, or execute a file can help prevent unauthorized users from accessing sensitive information.

I'm still developing my Linux skills, but working with the command line and learning how Linux systems are structured has made me much more comfortable working with technology.

Learning Python

I'm also learning Python as part of my cybersecurity studies.

At first, programming can feel intimidating, especially when something as simple as indentation can cause an entire program not to work. However, practicing has helped me become more comfortable with concepts such as:

• Variables

• Lists

• Functions

• Conditional statements

• Loops

• String manipulation

• File handling

• Exceptions

One of my goals is to eventually use Python for practical cybersecurity tasks, including automation and analyzing information.

Risk Assessment and Security

Another area I've found particularly interesting is cybersecurity risk assessment.

I've been learning how organizations identify assets, threats, vulnerabilities, and potential risks. A security problem isn't always simply about whether a vulnerability exists. It's also important to understand what could happen if that vulnerability were exploited and how serious the impact could be.

I've been practicing these concepts through security scenarios where I have to identify weaknesses and recommend appropriate controls.

For example, one scenario involved protecting a highly sensitive medication formula stored in a Microsoft SQL Server database. Employees in a research lab had read access to the formula, while another employee had administrative privileges.

This type of scenario helped me think about concepts such as least privilege, access control, privileged access management, and protecting sensitive information.

Identity and Access Management

IAM has also become an important part of what I'm learning.

One of the biggest lessons I've taken from IAM is that users should have the access they actually need to perform their jobs—not unlimited access simply because it is convenient.

The principle of least privilege can help reduce the damage caused by compromised accounts or insider threats.

I'm learning about concepts such as:

• User authentication

• Authorization

• Roles and permissions

• Administrative accounts

• Privileged Access Management (PAM)

• Access reviews

• Least privilege

These concepts show how cybersecurity isn't only about stopping hackers from getting into a system. It's also about making sure legitimate users have the correct access in the first place.

Building Hands-On Experience

I've also started using GitHub to document some of my cybersecurity work.

One of my projects involves performing a cybersecurity risk assessment. Working on projects like this has helped me take concepts from my coursework and apply them to realistic situations.

I think hands-on practice is extremely important because I don't want to learn cybersecurity only through memorization. I want to be able to look at a situation, identify the security risks, explain why they matter, and think through possible solutions.

What I'm Working Toward

My ultimate goal is to build a career in cybersecurity or IT.

I'm currently focused on developing my technical foundation and gaining more hands-on experience. I know that I still have a lot to learn, but I'm also realizing that cybersecurity is a field where learning never really stops.

There will always be new technologies, vulnerabilities, attack methods, and defensive techniques to understand.

For now, I'm focusing on building a strong foundation in areas such as Linux, Python, networking, security principles, risk assessment, and access control.

I am currently learning GRC, and it has really helped me understand the outside world. I would recommend learning about it, especially if you want a deeper understanding of it.

Why I'm Starting This Blog

I decided to start this blog because I want to document my progress instead of simply saying that I'm "learning cybersecurity."

I want to be able to look back months or years from now and see how much I've improved.

I'll be using this blog to share projects, lessons I've learned, technical concepts that I find interesting, and some of the challenges I encounter along the way.

I'm still learning, and I don't expect to know everything. My goal is to keep learning, keep practicing, and continue building practical cybersecurity skills.

This is just the beginning of my cybersecurity journey.