Career Journey

Systems and endpoints, then security.

My path into cybersecurity started with systems, endpoints, networks and users, not a classroom. Working IT support raised the questions that pulled me toward security: what happens when a system is compromised, what evidence does an attacker leave, how should an alert actually be investigated. This page separates where that foundation came from (professional and volunteer roles) from the hands-on security work I've built since (labs, projects and write-ups).

Where the foundation came from

IT Support Technician
Tfsgroupfs
Current
May 2025 to Present
  • Windows support
  • Hardware & software troubleshooting
  • Endpoint support
  • Connectivity troubleshooting
  • Switches & access points
  • Wireless networking
  • Structured cabling
  • POS systems
  • Printers & biometric systems
  • CCTV & surveillance
  • NAS & shared network resources
  • System builds & provisioning
  • Repairs & preventative maintenance
  • Event Viewer & System Monitor
  • Antivirus & endpoint security
  • Technical documentation
Volunteer Cybersecurity Analyst, Blue Team Training
Hacking Hub (Volunteer)
Current
October 2025 to Present
  • Structured Blue Team training: threat detection, incident response
  • SIEM operations & malware analysis
  • Consistently documenting findings for the community
  • First community member outside the founder to complete the Immersive Labs pathway
Radio Host & Technical Support
Q-lit Radio Station
February 2020 to February 2022
  • Windows workstations
  • Software support
  • Studio infrastructure
  • Installations & configuration
  • Maintenance & upgrades
  • Technical troubleshooting
  • User-facing support
  • Technical communication

Tfsgroupfs is paid, employed work. Hacking Hub is volunteer training, unpaid, alongside it. The labs, investigations and write-ups elsewhere on this site are hands-on project work I've built myself, not a claim of professional security industry experience. I keep all three clearly separate rather than blur them together.

From IT support to SOC-focused work

Feb 2020 to Feb 2022

IT Support Foundation

Radio Host and Technical Support at Q-lit Radio Station: Windows workstations, studio infrastructure, installations, troubleshooting and user-facing technical communication.

May 2025 to Present

IT Support Technician

Endpoint support, networking, security hardening and user support at Tfsgroupfs, the professional base this whole direction builds on.

Oct 2025 to Present

Blue Team Volunteering

Started structured Blue Team training with Hacking Hub: threat detection, incident response, SIEM operations and malware analysis, alongside the day job.

Oct to Dec 2025

Cybersecurity Foundations

Cyber Security 101 and Pre Security (TryHackMe), plus Cisco's Junior Cybersecurity Analyst Career Path, completed December 2025.

Mar to Jul 2026

Certifications

AZ-900 and SC-900 in March, Security+, CySA+ and AI Skills Fest in June, SC-200 in July. Nine certifications completed inside the same window.

Jul 2026 onward

Labs, Projects & Write-ups

Enterprise SOC Portfolio, the Conti ransomware investigation, Splunk log analysis and the account-takeover case study, turning certification knowledge into evidence.

Now

Current Development

AZ-104 retake and SC-500 preparation, studied side by side ahead of back-to-back exams in October.

Dec 2026+

Next Chapter

AI-901, then an open-ended stage of deeper SOC, Microsoft Security and Azure Security development, guided by my mentor as it unfolds.

2027

Four Certifications, In Priority Order

01 Blue Team Level 1, 02 CompTIA SecurityX, 03 AWS Certified Security – Specialty, 04 HashiCorp Certified: Terraform Associate. Full detail on the Certifications page.

Open to SOC & Cloud Security Roles