Stop Believing These Myths About Cybersecurity Jobs

# pip install requests
# Check security headers on a site you own or have permission to check
import requests

EXPECTED = ["Strict-Transport-Security", "Content-Security-Policy",
            "X-Content-Type-Options", "X-Frame-Options"]

def header_report(url: str):
    r = requests.get(url, timeout=10)
    for h in EXPECTED:
        print(f"{h:28} {'present' if h in r.headers else 'MISSING'}")

header_report("https://example.com")

# GRC-style check: compare a user list against an approved access list
approved = {"asha": "read", "ravi": "admin", "meena": "read"}
actual = {"asha": "read", "ravi": "admin", "meena": "admin", "temp01": "admin"}

for user, role in actual.items():
    if user not in approved:
        print(f"FINDING: {user} has {role} access but is not approved")
    elif approved[user] != role:
        print(f"FINDING: {user} has {role}, approved is {approved[user]}")

#!/usr/bin/env bash
# Review failed SSH logins on YOUR OWN Linux machine
# (log path differs by distro: auth.log or secure)
LOG=/var/log/auth.log

echo "Top source IPs with failed SSH logins:"
sudo grep "Failed password" "$LOG" \
  | awk '{for(i=1;i<=NF;i++) if($i=="from") print $(i+1)}' \
  | sort | uniq -c | sort -rn | head -5

#!/usr/bin/env bash
# Basic network checks on your own machine

echo "== Listening ports =="
ss -tuln | head -15

echo "== DNS lookup =="
nslookup example.com | tail -3

echo "== Route to a site =="
traceroute -m 8 example.com 2>/dev/null || echo "install traceroute"

import csv
from collections import Counter

# Summarise a firewall log export (CSV with columns: action, src_ip, dst_port)
rows = [
    {"action": "DENY", "src_ip": "203.0.113.9", "dst_port": "22"},
    {"action": "DENY", "src_ip": "203.0.113.9", "dst_port": "3389"},
    {"action": "ALLOW", "src_ip": "198.51.100.2", "dst_port": "443"},
    {"action": "DENY", "src_ip": "192.0.2.44", "dst_port": "22"},
]
denied = Counter(r["dst_port"] for r in rows if r["action"] == "DENY")
print("Denied attempts by port:", dict(denied))

Incident note (lab exercise)

Time: 05 Nov 2026, 10:00-10:05
Alert: 4 failed logins from one IP across 3 users
Check: IP not in company ranges; no successful login
Assessment: Likely password guessing, no compromise found
Action: IP blocked in lab firewall; users reminded about MFA
Follow-up: Review MFA coverage for all users

Collect 15 entry-level listings (SOC, security trainee, IT security).
For each note:

- Degree requirement
- Certifications mentioned (required or preferred)
- Tools (SIEM, firewall, EDR, cloud)
- Skills (Linux, networking, scripting)
- Shift work mentioned?

Let the counts guide what you learn first.

Security lab portfolio (legal, safe labs only)

1. Home lab: Linux VM with log review notes
2. Network basics: packet capture of your own traffic, explained
3. SIEM practice: free or trial SIEM with sample logs
4. Incident notes: 3 written lab incident reports
5. Hardening: checklist applied to your own VM, before/after

Target mix:
- SOC analyst L1 / security trainee roles
- IT support or network roles with security duties
- Security internships

Each week:
[ ] 5 tailored applications
[ ] 1 new lab write-up
[ ] 1 interview practice session