← Back to Blog

Learning Journey

How I Started in Cybersecurity

My cybersecurity journey started with curiosity. I wanted to understand how websites, networks, servers, and security tools work together — and how attackers abuse weak configurations, exposed services, and human mistakes.

Why Cybersecurity Interested Me

Cybersecurity stood out to me because it combines problem-solving, technology, investigation, and continuous learning. It is not only about hacking. It is also about protecting systems, understanding risk, helping users stay safe, and documenting what happened clearly.

I became interested in topics like phishing, web security, Linux hardening, DNS, password safety, and network troubleshooting. These areas helped me understand that security is built from many small details working together.

My First Learning Areas

I started by focusing on fundamentals instead of jumping straight into advanced tools. The first areas I worked on were:

  • Networking: IP addresses, DNS, ports, HTTP/HTTPS, and basic troubleshooting.
  • Linux: Commands, permissions, SSH, logs, updates, and firewall basics.
  • Web security: OWASP Top 10 concepts, authentication, input validation, and security headers.
  • Email security: SPF, DKIM, DMARC, phishing indicators, and email headers.
  • Security tools: Nmap concepts, Wireshark basics, DNS checkers, hash tools, and browser dev tools.

Learning by Building

One thing that helped me improve was building my own projects. Instead of only reading about security concepts, I started creating tools and documentation. For example, I built a cybersecurity tools website that includes utilities like a DNS checker, phishing URL analyzer, IOC extractor, password generator, hash tools, and email security checkers.

Building these tools helped me understand the concepts better. For example, creating an SPF checker required me to understand DNS TXT records. Creating a phishing URL analyzer required me to understand suspicious URL patterns. Creating a subnet calculator helped me practice networking fundamentals.

Why Documentation Matters

I also learned that documentation is a major part of IT and cybersecurity. It is not enough to complete a lab or use a tool. I need to explain the goal, the process, what I observed, and what I learned.

Good documentation shows communication skills, which are important for roles like help desk, IT support, SOC analyst, and junior cybersecurity analyst.

Challenges I Faced

One challenge was figuring out what to learn first. Cybersecurity has many paths: blue team, red team, cloud security, web security, governance, networking, and forensics. To stay focused, I chose to build a foundation in networking, Linux, web security, and defensive analysis.

Another challenge was avoiding the mistake of only collecting tools without understanding the basics. A tool is useful only when I understand what it is showing me.

What I Am Focused on Now

My current focus is building practical skills for entry-level cybersecurity and IT roles. I am continuing to work on:

  • Security+ concepts
  • Linux hardening
  • DNS and email security
  • Phishing analysis
  • Security tools and documentation
  • Hands-on labs and technical writeups

Security Takeaway

Cybersecurity is a long-term learning journey. The best progress comes from combining fundamentals, hands-on practice, documentation, and responsible use of tools.

My goal is to keep building, learning, and documenting my work so I can grow into a strong cybersecurity or IT professional.