Careers and certifications in cybersecurity

Murad is in the 11th grade and wants to work in cybersecurity. In films a “hacker” is one person typing fast in a dark room. In reality it is a field of dozens of different jobs: defenders, testers, engineers, analysts, auditors and even lawyers. In this lesson we will draw the map together.

Teams and roles

The blue team defends: it monitors, detects and responds. The red team imitates a real attacker under a written agreement and shows the weak spots. When the two work together, it is called a purple team. GRC (governance, risk and compliance) deals with policies, standards and risk assessment.

What does a SOC analyst's working day look like? A shift starts by reading the notes from the previous shift. Then alerts arrive: most are false alarms, but each one must be checked, the decision justified and recorded. A suspicious case is escalated to a more experienced colleague. In quieter moments the analyst tunes detection rules so that there are fewer false alarms.

A map of certifications

A certificate does not replace skills, but it structures your learning and helps you get past an employer's first screening. The table below is a neutral overview: exam formats, prices and requirements change, so check the organisation's official website before deciding.

Where to start: a roadmap

1. 1
   Foundations

   Networks (TCP/IP, DNS, HTTP), Linux and Windows, one programming language — usually Python. Educora's informatics and Python courses cover this.

2. 2
   A home lab

   Set up virtual machines and install deliberately vulnerable training apps on them. All experiments happen only inside this closed environment.

3. 3
   Legal practice

   CTF competitions and training platforms such as TryHackMe and Hack The Box offer tasks you are allowed to attack.

4. 4
   Portfolio and a first certificate

   Write up the tasks you solved, share your scripts on GitHub and earn an entry-level certificate.

5. 5
   A first job

   An internship in a SOC, IT support or a system administrator job is a good start; specialise later.

Many CTF tasks start with encodings. The key lesson: Base64 is not encryption, just a way of writing data with a different alphabet — anyone can reverse it without a key. A password “hidden” with Base64 in a configuration file is effectively plain text.

import base64

secret = 'password: Xezer2026'
encoded = base64.b64encode(secret.encode()).decode()
print('Encoded:', encoded)
print('Decoded:', base64.b64decode(encoded).decode())

Encoded: cGFzc3dvcmQ6IFhlemVyMjAyNg==
Decoded: password: Xezer2026

import base64

found = 'RWR1Y29yYXtiYXNlNjRfaXNfbm90X2VuY3J5cHRpb259'
# decode it and print the flag

Educora{base64_is_not_encryption}