Transitioning from Newbie to Cybersecurity Professional: Using Cognitive Mapping to Model Expert Behavior

Posted on by csimpson

As a Cybersecurity Professor of Practice, I’ve seen many students struggle with the transition from classroom learning to becoming a cybersecurity professional. The key to success lies not just in acquiring knowledge, but in observing and modeling the behavior of experienced professionals.  Cognitive mapping, a technique that involves observing and modeling the behavior of experienced professionals, can be a powerful tool in your development. This approach, inspired by Cal Newport’s insights on pursuing challenging growth over comfort, can significantly enhance your academic experience and set you on the path to a thriving career.

 This blog post will outline practical steps to enhance your academic and professional journey in cybersecurity.

1. Frame Your Academic Experience

Enhance your academic experience by integrating practical, real-world activities with your studies. This not only enriches your learning but also provides a clearer picture of the cybersecurity landscape.

2. Engage with the Cybersecurity Community

Interact with your local cybersecurity community by attending local security group meetings. Bringing a friend or classmate can help break the ice and make the experience less daunting. This networking can open doors to mentorship, internships, and job opportunities.

3. Watch Classic Conference Talks

Watching classic conference talks by well-known professionals can provide deep insights into the industry’s challenges and solutions. These talks are often available online and cover a wide range of topics and expertise levels.  Look up anything you don’t understand as you watch these videos. Here are some examples of great talks:

CTI Summit Keynote – Cliff Stoll – (Still) Stalking the Wily Hacker

DEF CON 13 – Johnny Long, Google Hacking for Penetration Testers

DEFCON 19: Steal Everything, Kill Everyone, Cause Total Financial Ruin!

DEF CON 23 – Charlie Miller & Chris Valasek – Remote Exploitation of an Unaltered Passenger Vehicle

4. Read Foundational Books

Reading books such as the “Tribe of Hackers” series by Marcus J. Carey and Jennifer Jin can provide diverse perspectives and expert advice. The series includes:

Links are to the NU Library; login is required.

5. Listen to Industry Podcasts

Podcasts like Security Now, Darknet Diaries, and Paul’s Security Weekly are excellent resources to stay updated on the latest cybersecurity trends, news, and expert interviews.

6. Practice with Cyber Ranges

Using cyber ranges like TryHackMe, Hack The Box , and World of Haiku allows you to practice skills in a controlled environment. This practical experience is crucial for reinforcing theoretical knowledge and preparing for real-world scenarios. Many of our classes use these sites, you can post your completions on LinkedIn as you go through your classes.

7. Follow Security Leaders on Social Media

Follow security leaders on social media to stay informed about industry trends and discussions. For instance, the Infosec list on Twitter is a great starting point.

8. Participate in Cyber Competitions

Participate in cyber competitions like the National Cyber League. Watching videos from prior competitors can also provide valuable insights into competition strategies and techniques.

9. Engage in Online Communities

Read and contribute to Infosec-related channels on Reddit, such as:

10. Create and Share Your Own Content

Once you have a good understanding of what professionals do, start creating your own content and post it on platforms like LinkedIn. Engage in conversations on social media, always maintaining professionalism and respect. Remember, you might be wrong sometimes, and it’s crucial to handle such situations gracefully.

Conclusion

Remember, the path from newbie to cybersecurity professional is not always straightforward. It requires dedication, continuous learning, and a willingness to step out of your comfort zone. By observing and modeling the behaviors of successful professionals, you’ll not only enhance your academic experience but also build a strong foundation for a rewarding career in cybersecurity.

Your journey starts now. Embrace the challenges, seek out opportunities to learn, and never stop exploring the vast and ever-changing world of cybersecurity.

Would you like me to elaborate on any specific part of this blog post?

P.S. Cal’s Deep Question podcast is one of the podcasts I always listen to and is an excellent resource for improving your focus.