Cyberbits

  • Completing DevSecOps on THM

    Introduction Part 2 of my Security Engineer write-up closed with a promise: the DevSecOps path was next on the list. Consider it ticked. Seventeen rooms across five modules, all spent on the place where my two worlds meet: shipping software without shipping vulnerabilities alongside it. I am a platform engineer: these days my job is…

  • Completing Security Engineer on THM – Part II

    Introduction Part 1 covered the foundations, the risk math, and the hardening module of TryHackMe’s Security Engineer path. This half covers the three modules I enjoyed most: software security, incident management, and the OWASP wrap-up. It is also the half with the most terminal output, which is not a coincidence. Where security meets shipping Let’s…

  • Completing Security Engineer on THM – Part I

    Introduction Security Engineer is TryHackMe’s role path for the building side of security: 31 rooms across six modules, from cryptography and governance to hardening, secure development, and incident response. I finished it this week, a few months after passing SEC1, working through it in parallel with the offensive rooms I keep writing up here, most…

  • Security+ Governance, Risk, and Compliance

    Introduction Last in this series! As you know by now, I’ve been working through the CompTIA Security+ curriculum these last few weeks. It has a lot of overlap with the Google Cybersecurity series I did earlier this year, but it’s all interesting interesting nevertheless. Here’s what module 4 (Cybersecurity Governance and Compliance) covers, distilled into…

  • Security+ Cybersecurity operations and controls

    Introduction I spent a chunk of this week working through the operations and controls section of my CompTIA Security+ studies, and although the AI voice-over is annoying the f#ck out of me, it has some interesting material. Quick disclaimer: it has a lot of overlap with the Google Cybersecurity series I did earlier this year,…

  • Security+ Cybersecurity threats and defense

    Introduction I’ve been working through the CompTIA Security+ curriculum and the second module, Cybersecurity Threats and Defense, covers more ground than I expected. It starts with the attack landscape and works its way through malware, physical intrusions, network exploitation, application vulnerabilities, detection techniques, defense architecture, and data security. Although it has a lot of overlap…

  • Security+ Information security foundations

    Introduction I’ve been working through the CompTIA Security+ curriculum lately, starting with the information security foundations module. It covers a lot of ground, from the basics of the CIA triad all the way through to zero-day vulnerabilities and defensive monitoring. Rather than let those notes rot in a folder, I figured I’d write them up…

  • Google’s AI course and certification

    Introduction My cybersecurity adventure is still my number one priority, but since I think it would be foolish to ignore AI during this quest, I will take the occasional detour. I recently worked through Google’s AI Professional course, which was recommended at a couple of places to be a must have. A nice, professional certification…

  • Google’s Cybersecurity AI module

    Introduction As promised last week, today I’ll cover the Artificial Intelligence (AI) module that was added to the Google’s Cybersecurity Professional Certificate program. Although it’s a bit basic, this module, being part of a cybersecurity course, got me thinking. I ended up on YouTube, and did some research. I found out that cybersecurity deals/has to…

  • Google’s Prepare for cybersecurity jobs

    Introduction Last course of my Google’s Cybersecurity Professional Certificate adventure. I’ll cover everything except for the AI module. This one will deserve some special attention (next week). As always, I’ll share the cliff notes on the courses as I go. Dense summaries of what actually matters. Today: Put It to Work: Prepare for Cybersecurity Jobs.…