In this episode John shares an upcoming talk that he gave at the Simply Cyber Con '24 in Charleston, SC.

Title: From Technical to Tactical: Storytelling Skills to Level Up Your Cybersecurity Career

Description:

In the fast-paced and complex world of cybersecurity, technical expertise alone isn't enough to stand out. What if you could turn your experiences into compelling stories that not only capture attention but also propel your career forward? Drawing on the transformative principles from Matthew Dicks' acclaimed book Storyworthy, this talk will explore how cybersecurity professionals can harness the power of storytelling to connect with peers, present to leadership, and advance their careers.

We'll dive into key concepts like "The Five-Second Moment" and "Homework for Life," and show how these techniques can be applied to your cybersecurity journey. Whether you're looking to improve your networking, make a lasting impression in interviews, or establish yourself as a thought leader, mastering the art of storytelling is your secret weapon. Join me to learn how to craft narratives that not only resonate but also elevate your professional trajectory in cybersecurity.

Send us fan mail via text

In this episode we sit down with Joe Hudson, Director of Growth at TCM Security, to discuss the challenges and opportunities in cybersecurity job hunting. With experience on both sides of the cybersecurity job market, Joe shares his personal journey from teaching to recruiting, and ultimately into cybersecurity. He provides actionable advice for job seekers, from the importance of networking to decoding job descriptions, as well as tips on working with recruiters and preparing for interviews.

Key Takeaways:

• Joe’s unique path from a teaching career to a successful role in cybersecurity.
• The role of mentorship and networking in breaking into cybersecurity.
• How to approach recruiters and build lasting professional relationships.
• Strategies for applying to cybersecurity jobs, including navigating job descriptions and identifying red flags.
• Preparing for interviews and the importance of standing out with authenticity.
• Joe’s insights on the evolving cybersecurity landscape and what it takes to thrive in this field.

Connect with Joe Hudson:

• LinkedIn: Joe Hudson
• Email: jhudson@tcm-sec.com

Join Our Community:

• Discord: Cybersecurity Mentors Podcast Community
• LinkedIn: Cybersecurity Mentors Podcast
• Newsletter

Send us fan mail via text

Today, we have the pleasure of interviewing Dr. Gerald Auger. We’ll discuss his origin story, how he ventured into cybersecurity, his unique experience working at the South Pole, and the creation of Simply Cyber.
Gerry has generously offered our listeners a discount code for his GRC Analyst Master Class. Check out our show notes for the link to his class, and use the discount code CYBER10.

Simply Cyber Course - GRC Analyst Master Class

Check out our newsletter: https://sendfox.com/lp/m2vx85

Join us on Discord: Cybersecurity Mentors Podcast.

Notes from this episode:

• Apple IIe Games
• Trade Wars Emulator
• The Anarchist Cookbook
• War Games
• American Online
• FISMA
• Global Address List
• Black Hat
• University of Massachusetts Amherst
• RC Pro Am 
• Columbia University
• Carnegie Mellon University
• Sarbanes-Oxley Act
• U.S. National Science Foundation - Antarctic Program
• Palmer Station
• Drake Passage
• McMurdo Station
• The race to the South Pole: Scott and Amundsen
• Antarctica Service Medal
• Medical University of South Carolina
• InfoSecICU Podcast
• Simply Cyber 
• Gerry's Youtube Channel
• How to Level Up Your SOC Analyst Skill with Power Tool: Sigma
• Wild West Hackin Fest
• Simply Cyber Academy
• Knight TV
• The Midnight (artist)
• The Witcher (audio book)
• Simply Cyber Socials
• Simply Cyber Streams

Send us fan mail via text

This episode is our first interview with one of our first mentees, who is now a mentor himself. .

Join us on Discord at Cybersecurity Mentors Podcast.

Check out Carson's LinkedIn page.

Check out our newsletter:
https://sendfox.com/lp/m2vx85

Send us fan mail via text

In this episode we discuss the many paths career paths available in cybersecurity and how you can choose your own adventure.

Join us on Discord at Cybersecurity Mentors Podcast.

SANS Roadmap:
https://www.sans.org/cyber-security-skills-roadmap/

SANS Cyber Security Job Roles:
https://www.sans.org/job-roles-roadmap/

Check out our newsletter:
https://sendfox.com/lp/m2vx85 

Send us fan mail via text

This episode discusses the benefits of volunteering and a recent trip to the South East Cyber Defense Competition (SECCDC). 

Join us on Discord at Cybersecurity Mentors Podcast. 

Send us fan mail via text

In this episode, we tell the stories of our journey to find a mentor.  

We talk about what mentoring in cybersecurity is, how to find a mentor, how to cultivate a positive mentor and mentee relationship and much more.

Join us on Discord at Cybersecurity Mentors Podcast. 

Send us fan mail via text

In this episode we answer one the most popular questions we get.

Join us on Discord at Cybersecurity Mentors Podcast. 

Send us fan mail via text

In this episode John and Steve introduce themselves, and talk about the goal of this podcast.

Join us on Discord at Cybersecurity Mentors Podcast. 

Send us fan mail via text

In this episode, we have an insightful conversation with Adam Anderson, a seasoned cybersecurity professional, entrepreneur, and author. Adam shares his journey from a technical "keyboard warrior" to realizing the power of emotional intelligence (EIQ) in building a successful cybersecurity career. We discuss the critical differences between IQ and EIQ, how emotional intelligence can be your secret weapon for career growth, and why you should strive to be Yoda rather than Luke Skywalker in the workplace. Tune in to discover actionable tips on how to improve your EIQ and leverage it to stand out in the cybersecurity field.

Key Takeaways:

1. Emotional Intelligence is Essential in Cybersecurity: It's not just about having the right answer; it’s about delivering it effectively so others understand, accept, and can act on it.
2. Be Yoda, Not Luke: Focus on advising and guiding rather than being the hero who takes on everything alone.
3. Developing EIQ Takes Time: Like technical skills, emotional intelligence requires practice and patience. Start with small exercises like asking better questions and practicing active listening.
4. Servant Leadership Can Be Practiced at Any Level: Regardless of your position, you can lead effectively by serving the needs of others and asking insightful questions.
5. Storytelling is a Powerful Tool: Learning to tell good stories can enhance your emotional intelligence and help you make complex technical topics relatable.

Quotes:

• "The reason we want to be Yoda and not Luke is that we don't own the responsibility for defeating the Empire—we own the responsibility of providing the intelligence, wisdom, and advice to those who do."
• "Your ability to tell and craft good stories is directly proportional to your emotional intelligence."

Practical Tips:

• Record Yourself: Practice explaining a concept and watch the recording to observe areas for improvement in communication.
• Elevator Pitch: Create concise explanations for technical topics, and remember to use relatable stories.
• Ask Questions in Interviews: Use interviews to understand team dynamics and signal your interest in contributing positively to the organization's goals.

Resources Mentioned:

• Book: Psychological Security: How to Use Psychology to Produce Better Security Results by Adam Anderson
• Online Lecture: Adam's lecture on emotional intelligence and its importance in cybersecurity.

Connect with Adam:

• LinkedIn: [Adam Anderson’s LinkedIn Profile]

Send us fan mail via text

In this episode we do a live coaching call with Grant Adams. Grant was one of the original interns who worked with us and took a hiatus from security to go on an adventure across the United States. He's now looking for advice to get back into security. We talk about his goals, give him advice on next steps, and do a deep dive into his resume. 

Send us fan mail via text

In this episode we interview Melissa and Kelly, who began their journey with us as interns and are now forging exciting careers in cybersecurity.

Join our community by subscribing to our newsletter packed with tips and guidance to empower your journey.

Send us fan mail via text

In this episode, we dive into actionable strategies for networking with cybersecurity professionals to land your dream job. From leveraging local security conferences to connecting with industry practitioners and engaging in online communities, we cover essential tips to help you build valuable relationships in the cybersecurity field. Whether you're new to the industry or looking to advance your career, this episode offers practical advice to enhance your networking efforts and open doors to new opportunities. Tune in and start building your cybersecurity network today!

Click here for the checklist and templates mentioned in this episode. 

Send us fan mail via text

Are cybersecurity bootcamps worth it in 2024 to start your career in cybersecurity?

We may have a controversial take on this topic. Tune in to find out what we have to say.

Contact us to sign up for your free 30-minute mentor session, or if you'd like a copy of the spreadsheet where we break down the options we describe in the episode.

Check out the YouTube link for the video version of this episode.

Send us fan mail via text

Today, we're thrilled to have Matthew Dicks with us—an acclaimed author whose nonfiction works like Storyworthy, Someday Is Today, and his latest, Stories Sell, have captivated audiences globally. Beyond his books, Matthew is an influential speaker, elementary school teacher, and co-founder of the storytelling organization Speak Up. He teaches storytelling and public speaking at esteemed institutions such as Yale and Harvard and collaborates with leading companies like Amazon and Slack.
Matthew's storytelling prowess is unmatched, being a record 56-time Moth StorySLAM champion and 9-time GrandSLAM champion. His captivating stories have graced The Moth Radio Hour, their weekly podcast, and TED Talks.
Join us for an exciting conversation about the transformative power of stories in our personal and professional lives. 

• https://matthewdicks.com/
• Storyworthy Academy
• Stories Sell: Storyworthy Strategies to Grow Your Business (book)
• Storyworthy: Engage, Teach, Persuade, and Change Your Life through the Power of Storytelling (book)
• Someday Is Today: 22 Simple, Actionable Ways to Propel Your Creative Life (book)
• Homework for Life - Tedx Talk (video)
• Speak Less. Expect More. - TedxTalk (video)
• Live Life Like You Are 100-Years Old - Tedx Talk (video)
• The Art of Manliness Podcast episode with Matthew Dicks
• Adam Anderson - Threat Captain

Sign up for our newsletter.

Join us on Discord at Cybersecurity Mentors Podcast.

Send us fan mail via text

Sign up for our newsletter  by July 19th 2024, and you may be the the lucky winner of a free mentor session with us.

Join us on Discord at Cybersecurity Mentors Podcast.

Send us fan mail via text

Join us on Discord at Cybersecurity Mentors Podcast.

Check out our newsletter:
https://sendfox.com/lp/m2vx85

• The Talent War Book
• The Talent War Matrix Spreadsheet
• The Hunt for Red October Movie

Send us fan mail via text

This episode features insights from two esteemed CISOs, Frank DePaola and Andrew Wilder, sharing their journeys into cybersecurity, the importance of mentorship, and essential leadership traits. They discuss the evolving role of a CISO, the need for business acumen, and the vital balance required between technical prowess and organizational needs.

• Frank DePaola and Andrew Wilder share their unique career paths in cybersecurity 
• Importance of mentorship in career development and growth 
• Insights into balancing technical skills and business acumen for aspiring CISOs 
• Current challenges faced by CISOs in a rapidly evolving threat landscape 
• Tools and resources that help CISOs maintain organizational security 
• The personal rewards and sense of purpose found in the CISO role 

If you're looking for personalized mentorship, click the link below to sign up for a free consultation with us. During this session, we'll talk about your goals, your challenges, and how we can better help you. This may include reviewing resumes, career advice, and setting up action plans tailored for your needs.

• Mentorship - sign up for a free session
• Frank DePaola's LinkedIn Profile
• Andrew Wilder's LinkedIn Profile

Send us fan mail via text

Welcome to the kickoff of Season 2 of the Cybersecurity Mentors Podcast! This season begins with an exciting collaboration with the Simply Cyber Media Group, bringing you inspiring personal journeys and emphasizing the transformative power of mentorship in cybersecurity. In this episode, John and Steve open up about their career paths, share their aspirations, and provide practical advice for anyone looking to build and grow a career in this dynamic field. We'll also dive into what this podcast is all about and reveal some of the exciting plans we have in store for this season!

• Introduction of the hosts and podcast vision 
• John’s journey from IT support to CISO 
• Steve's experience starting from an intern to deputy CISO 
• Emphasizing mentorship and real-world experience 
• Importance of networking and soft skills alongside technical skills 
• Sneak peek into Season Two and future topics 
• Call for listener engagement and community connection

Send us fan mail via text

In this episode, we recap season one. We talk about lessons learned during our first season of the podcast, each of our favorite episodes, the top downloaded episodes of the year, reveal the countries that listen to us the most, and tease our season two plans for 2025, including exciting new collaborations that are in the works.

You can connect with us and leave us feedback in the following ways:

• Sign up for our newsletter. 
• Join us on Discord at Cybersecurity Mentors Podcast.
• Check out our YouTube channel and leave us a comment. 
• Follow our LinkedIn page. 

Or use the texting feature below to send us a one-way fan mail.

Send us fan mail via text

Join us for an exhilarating episode as cybersecurity pioneer Dave Kennedy, co-founder of TrustedSec and Binary Defense, shares his incredible journey from a curious kid in Cleveland to a leader in the cybersecurity industry. Discover how Dave transformed his passion for technology from dismantling toys to building computers, and how iconic films like "Back to the Future 2" and "Hackers" inspired his career path. Dave takes us through his time in military intelligence with the Marines, where he honed his skills in cyber warfare and forensics, leading to a successful transition into the private sector.

Dave's story is more than just a career path; it's a testament to the power of mentorship, community, and helping others. Get a sneak peek into the unique atmosphere at TrustedSec, complete with a Back to the Future movie artifacts and a TARDIS from Doctor Who. Listen as Dave emphasizes the importance of building strong relationships and fostering collaboration to implement effective security programs, sharing invaluable insights into overcoming the experience gap faced by new graduates entering the cybersecurity field.

This episode is packed with inspiring anecdotes and practical advice for anyone passionate about cybersecurity. Whether it's starting a successful company, creating community initiatives like DerbyCon, or navigating the challenges of a demanding industry, Dave's commitment to innovation and passion for nurturing young talent shine through. Don't miss out on this opportunity to learn from one of the field's most influential figures and discover how emerging technologies like AI and machine learning are shaping the future of cybersecurity.

Send us fan mail via text

This episode focuses on essential skills and tools for aspiring cybersecurity analysts, including network monitoring, incident response, and phishing defense. The conversation emphasizes the importance of practical experience and understanding the fundamentals to successfully navigate careers in cybersecurity.

• Importance of network monitoring in identifying suspicious activities 
• Understanding networking fundamentals for cybersecurity roles 
• Tools for capturing and analyzing network traffic 
• Steps to effectively manage and respond to security incidents 
• Strategies for identifying and mitigating phishing threats 
• Role of simulations and drills in training for real-world incidents 
• Need for hands-on experience to enhance cybersecurity skills 
• Insights into preparing employees against phishing attacks 
• Importance of documentation in incident response 
• How to differentiate oneself in a competitive job market

Send us fan mail via text

This episode is part one of two that focuses on essential tools and skills for aspiring security analysts. In this episode we discuss SIEM tools, vulnerability management, and endpoint protection. Check out the link for the resources. 

• Importance of SIEM tools for analyzing log data 
• Vulnerability management as a critical cybersecurity hygiene practice 
• Regular vulnerability scans and prioritizing remediation efforts 
• The evolution of endpoint protection and current threats 
• Real-world implications of failing to manage vulnerabilities 
• Practical tips and resources for gaining hands-on experience 
• Encouragement for community engagement and shared learning

Link to resources

Mentorship - sign up for a free session

Send us fan mail via text

Ryan Rath shares his journey from the military to a significant role in cybersecurity with Mandiant, discussing the challenges faced during the transition. Key topics include the importance of networking, the evolving skill sets required, and the ethical responsibilities of cybersecurity professionals, highlighting the need for mentorship and continuous learning.

• Ryan's military background and transition to cybersecurity
• The significance of networking in career development
• Challenges faced while applying for jobs in tech
• Importance of practical experience over certifications
• Skills needed within the cybersecurity landscape
• Ethical considerations in handling technology
• The role of mentorship and giving back to the community

Mentorship - sign up for a free session

Ryan Rath's LinkedIn Profile

Send us fan mail via text

Max Harley's journey into cybersecurity began unexpectedly with a childhood passion for video games, which sparked a deeper interest in programming and security. His competitive spirit emerged through capture-the-flag competitions, leading him to impactful roles at SpecterOps and Prelude, emphasizing mentorship, networking, and continuous learning in crafting a successful cybersecurity career.

• The spark of interest starting from video games and programming
• Importance of competitions like Pico CTF and CCDC in developing skills
• The role of mentorship and networking in career advancement
• Experiences in red teaming and offensive security
• Transitioning thoughts on proactive cybersecurity and evaluative metrics

Mentorship - sign up for a free session

Max Harley's LinkedIn Profile
Max's talk at BSides Charleston 2024

Send us fan mail via text

This episode delves into the current state of the cybersecurity job market and offers essential strategies for breaking into the industry. Kelly Belding, an experienced IT recruiter, discusses hiring trends, the importance of relevant skills and certifications, and the significant role of networking for career advancement.

• Overview of the changing IT job market dynamics 
• Discussion on entry-level versus mid-senior level positions 
• Importance of skill sets and certifications in job applications 
• Insights on current salary expectations for new graduates 
• Networking's vital role in securing job opportunities 
• The impact of AI on hiring practices and operational roles

Send us fan mail via text

In this episode we chat with Daniel, who is just starting on his journey in cybersecurity. We work to give him guidance, direction, and a roadmap for landing his first job. 

• What sparked Daniel's interest in cybersecurity 
• Current job enhances troubleshooting skills and problem-solving mindset 
• Pursuing cybersecurity certifications one step at a time 
• Importance of framing experiences effectively on resumes 
• Networking and social media presence as tools for job hunting 
• Resilience and adaptability are essential for a successful entry into cybersecurity

Send us fan mail via text

Can a cybersecurity mentor or coach really help you break into or grow your career? 

In this episode, we break down the difference between mentorship and coaching, why investing in guidance matters, and what a structured 6-month mentorship journey looks like.

We also share real success stories from our mentees—and why going it alone might be slowing you down.

Plus, we’re running a limited-time offer: Get our coaching Plus Plan ($119/month) for the price of the Starter Plan ($69/month) for six months—available to the first 10 sign-ups. Sign-up link provided below. 

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Connect with us and leave us feedback:

● Cybersecurity Mentors Podcast Swag: https://the-cybersecurity-mentors-pod.myspreadshop.com 

● Mentorship - Sign up for a FREE session: https://www.cyberprofessionalservices.com/scheduling-free-consultation

● Sign up for our Newsletter: https://sendfox.com/lp/m2vx85 

● Join us on Discord: https://discord.com/invite/g4yRKjnD78

● Follow our LinkedIn page: https://www.linkedin.com/company/cybersecurity-mentors-podcast

● Check out our YouTube channel for more content: https://www.youtube.com/@CybersecurityMentorsPodcast

● TCM Affiliate Link: https://certifications.tcm-sec.com/?ref=198

===========================================================================

Episode Resources:

 ● Mentorship and Coaching Promotional Sign Up #FIRST10  

Link: https://www.cyberprofessionalservices.com/first-10

 ● CPS Mentorship/Coaching Pricing Plans

Link: https://www.cyberprofessionalservices.com/pricing

Send us fan mail via text

In Part 3 of our Mastering Cybersecurity series, we explore why learning how to hack isn’t just for red teamers — it’s a critical skill for defenders, too. Understanding offensive tactics can sharpen your defensive abilities, improve threat detection, and help you shift from reactive to proactive security.

Plus, having both offensive and defensive skills makes you more marketable in today’s cybersecurity job market, especially for roles that value versatility and hands-on experience.

We’ll also share practical ways to start learning these skills safely using your own home lab — no red team experience required.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Connect with us and leave us feedback:

● Cybersecurity Mentors Podcast Swag: https://the-cybersecurity-mentors-pod.myspreadshop.com 

● Mentorship - Sign up for a FREE session: https://www.cyberprofessionalservices.com/scheduling-free-consultation

● Sign up for our Newsletter: https://sendfox.com/lp/m2vx85 

● Join us on Discord: https://discord.com/invite/g4yRKjnD78

● Follow our LinkedIn page: https://www.linkedin.com/company/cybersecurity-mentors-podcast

● Check out our YouTube channel for more content: https://www.youtube.com/@CybersecurityMentorsPodcast

● TCM Affiliate Link: https://certifications.tcm-sec.com/?ref=198

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Episode Resources:

Recommended Certifications

PEH – Practical Ethical Hacking

Why recommend it:
Covers the full pentesting pipeline—network scanning, exploitation, privilege escalation, and more—with hands-on tools and labs.

Enroll here: https://certifications.tcm-sec.com/practical-ethical-hacking/?ref=198

 PNPT – Practical Network Penetration Tester

Why recommend it:
TCM’s flagship certification simulates a real-world pentest engagement—from external recon to internal exploitation—and includes a full report and video walkthrough.

Enroll here: https://certifications.tcm-sec.com/pnpt/?ref=198

 Hands-On Practice Platforms

TryHackMe – Offensive Path
Learn offensive security with guided, hands-on labs.
Link: https://tryhackme.com/

Hack The Box
Pentesting labs and real-world CTF challenges for all skill levels.
Link: https://www.hackthebox.com/

Tools to Explore

Kali Linux
A Linux distro made for penetration testing.
Link: https://www.kali.org/

Metasploit Framework
A powerful framework for exploitation and post-exploitation.
Link: https://docs.rapid7.com/metasploit/

Nmap
Powerful network scanning tool
Link: https://nmap.org

Send us fan mail via text

In this episode, we chat with Carson Sallis, Senior Offensive Security Engineer and Vulnerability Researcher at NVIDIA. Carson walks us through a day in the life of a pentester and shares actionable advice for anyone looking to break into offensive security. He also gives a live demo of fuzzing with AFL (American Fuzzy Lop) and explains how tools like this are used in real-world vulnerability research.
Whether you're just starting out or looking to sharpen your red team skills, this episode is full of insights you won’t want to miss.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Episode Resources:

GitHub: https://github.com/cybersecmentors/season_3_ep_6

Guest: Carson Sallis 

Follow Carson and connect for updates, demos, and career insights.

LinkedIn:  https://www.linkedin.com/in/carson-sallis/

Fuzzing Tools & Resources

· AFL (American Fuzzy Lop)
The fuzzing tool featured in Carson's demo.
Link: https://lcamtuf.coredump.cx/afl/

· AFL++
An advanced fork of AFL with modern features.
Link: https://github.com/AFLplusplus/AFLplusplus

· Fuzzing: Brute Force Vulnerability Discovery (Book)
A foundational guide for learning fuzzing.
Link: https://nostarch.com/fuzzing

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Connect with us and leave us feedback:

1. Cybersecurity Mentors Podcast Swag: https://the-cybersecurity-mentors-pod.myspreadshop.com 
2. Mentorship - Sign up for a FREE session: https://www.cyberprofessionalservices.com/scheduling-free-consultation
3. Sign up for our Newsletter: https://sendfox.com/lp/m2vx85 
4. Join us on Discord: https://discord.com/invite/g4yRKjnD78
5. Follow our LinkedIn page: https://www.linkedin.com/company/cybersecurity-mentors-podcast
6. Check out our YouTube channel for more content: https://www.youtube.com/@CybersecurityMentorsPodcast
7. TCM Affiliate Link: https://certifications.tcm-sec.com/?ref=1

Send us fan mail via text

In this episode, Steve and John dive into why securing systems is a must-know skill in cybersecurity. Learn the basics of system hardening, access control, and logging, plus practical tools and labs to get hands-on. They also explore how AI can boost your defense game — and why thinking like both an attacker and defender will set you apart.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Episode Resources:

Hands-On Labs & Platforms

1. TryHackMe 
   • Labs: Intro to Windows, Hardening, Linux Privilege Escalation, Pre-Security Path
   • Great for learning system hardening and exploitation from both Red and Blue perspectives.
   • Link: https://tryhackme.com
2. Hack The Box Academy 
   • Modules on Windows/Linux fundamentals, Active Directory hardening, and network security.
   • Link: https://www.hackthebox.com/
3. Cyber Defenders 
   • Real-world challenges with system logs, hardening tasks, and detection engineering.
   • Link: https://cyberdefenders.org/

Security Benchmarks & Guides

1. CIS Benchmarks 
   • Free hardening guidelines for Windows, Linux, macOS, network devices, and cloud platforms.
   • Link: https://www.cisecurity.org/cis-benchmarks
2. Microsoft Security Baselines 
   • Microsoft’s official security settings for Windows 10/11, Server, Office, and more.
   • Link: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-security-baselines

Tools & Scripts

1. Windows Hardening Guide by Debloat Windows
   • Open-source PowerShell scripts to harden Windows easily.
   • Link: https://github.com/ChrisTitusTech/win10script
2. Lynis (Linux Hardening Audit Tool)
   • CLI tool that scans Linux systems and gives a security score with suggestions.
   • Link: https://cisofy.com/lynis/
3. Ansible Lockdown Roles
   • Prebuilt automation scripts for applying CIS hardening via Ansible.
   • Link: https://github.com/ansible-lockdown/

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Connect with us and leave us feedback:

1. Cybersecurity Mentors Podcast Swag: https://the-cybersecurity-mentors-pod.myspreadshop.com 
2. Mentorship - Sign up for a FREE session: https://www.cyberprofessionalservices.com/scheduling-free-consultation
3. Sign up for our Newsletter: https://sendfox.com/lp/m2vx85 
4. Join us on Discord: https://discord.com/invite/g4yRKjnD78
5. Follow our LinkedIn page: https://www.linkedin.com/company/cybersecurity-mentors-podcast
6. Check out our YouTube channel for more content: https://www.youtube.com/@CybersecurityMentorsPodcast
7. TCM Affiliate Link: https://certifications.tcm-sec.com/?ref=1

Send us fan mail via text

Craig Sheffield shares his unconventional journey transitioning from teaching English in Taiwan to pursuing a cybersecurity career, highlighting how his background in music and audio engineering provided unexpected transferable skills. He also shares his candid experiences with the TryHackMe Security Analyst Level 1 certification. 

Episode Resources:

• Craig’s LinkedIn page - https://www.linkedin.com/in/sheffieldcraig/
• Craig’s Github page with his project breakdown - https://github.com/ideafieldpro
• Chris Romano's site for his SOC academy - https://sites.google.com/careerup.tech/careerup-tech
• John Strand and the Black Hills team do Pay What You Can courses - https://www.antisyphontraining.com/
• Free Anki flashcards decks for certification exams (no SAL1) from Josh Madakor - https://lognpacific.com/free-certification-practice-tests/
• MyDFIR youtube channel with projects and career advice - https://www.youtube.com/@MyDFIR

Connect with us and leave us feedback:

• Cybersecurity Mentors Podcast Swag: https://the-cybersecurity-mentors-pod.myspreadshop.com 
• Mentorship - Sign up for a FREE session: https://www.cyberprofessionalservices.com/scheduling-free-consultation
• Sign up for our Newsletter: https://sendfox.com/lp/m2vx85 
• Join us on Discord: https://discord.com/invite/g4yRKjnD78
• Follow our LinkedIn page: https://www.linkedin.com/company/cybersecurity-mentors-podcast
• Check out our YouTube channel for more content: https://www.youtube.com/@CybersecurityMentorsPodcast
• TCM Affiliate Link: https://certifications.tcm-sec.com/?ref=198

Send us fan mail via text

In this episode, we delve into the often-overlooked yet fundamental importance of learning how to "build" systems, networks, and applications for cybersecurity professionals. Coining the philosophy "Build, Secure, Hack," we explore why hands-on experience in building provides an essential foundation for effectively securing and ultimately understanding how to hack those environments. We discuss the pitfalls of skipping these foundational IT skills, highlight the immense value of setting up a home lab for practical learning, and offer concrete examples of what to build to enhance your cybersecurity expertise and career prospects in today's job market.

Check out our new merch shop! https://the-cybersecurity-mentors-pod.myspreadshop.com

YouTube Resources

• NetworkChuck - https://www.youtube.com/c/NetworkChuck
• Techno Tim - https://www.youtube.com/c/TechnoTimLive 
• LearnLinuxTV - https://www.youtube.com/c/LearnLinuxTV 
• The Coding Train - https://www.youtube.com/c/TheCodingTrain 
• Professor Messer - https://www.youtube.com/@professormesser

Virtualization Platforms

• VirtualBox – Free and easy to use. - https://www.virtualbox.org/
• VMware Workstation Player – Personal use version of VMware.
• Proxmox VE – Advanced, self-hosted hypervisor.

Lab Design Ideas

• pfSense as your firewall/router
• Linux and Windows VMs for practice
• Add vulnerable VMs from VulnHub to practice attack/defend - https://www.vulnhub.com/
• Add Security Onion to practice detection - https://securityonionsolutions.com/

Automation / DevOps

• Ansible – Infrastructure as code for deploying and managing servers - https://www.ansible.com/
• Docker – Build and run isolated containers (great for web apps or SOC tools) - https://www.docker.com/
• HomelabOS – Build an entire lab with one command - https://homelabos.com/

Cloud Options

• AWS Free Tier - https://aws.amazon.com/free/
• Google Cloud Free Tier - https://cloud.google.com/free
• Microsoft Azure for Students - https://azure.microsoft.com/en-us/free/students/

Send us fan mail via text

In this episode, we talk with Doug Burks, founder and CEO of Security Onion Solutions. He shares his journey from computer enthusiast to cybersecurity company founder and how he's helping defenders catch bad guys through accessible network security monitoring tools. We also discuss how important setting up your home lab is as a crucial learning environment for security professionals at all levels. 

• Security Onion Solutions 
  • https://securityonionsolutions.com/ 
• Doug Burks – Linkedin 
  • https://www.linkedin.com/in/dougburks/ 
• BSides Augusta
  • https://bsidesaugusta.org/ 

Check out our new merch shop! https://the-cybersecurity-mentors-pod.myspreadshop.com

Send us fan mail via text

In this episode, we dive deep into the world of cyber deception—from classic honeypots to canary tokens and more. Learn how deception isn't just a defense tactic, but a skill every aspiring cybersecurity analyst should master. 

We'll explore real-world stories, ethical considerations, and how strategic deception can give you the upper hand against attackers.

Episode Resources:

• Offensive Countermeasures Book
• Canary Tokens
• Honeyport - Powershell Script

Check out our new merch shop! https://the-cybersecurity-mentors-pod.myspreadshop.com

Send us fan mail via text