Think Positive Cyber

Blog

Job searching with a Master of Science in Cybersecurity, which I earned in November 2023, has been an unexpectedly challenging and emotionally draining experience. Despite the hard work and late nights I poured into my degree, I’ve spent the past year struggling to find a position that reflects my skills and aspirations. Working at Rosa Parks Elementary in San Diego, CA, while meaningful, often feels like a world apart from the cybersecurity field I’m so passionate about. Each rejection email chips away at my confidence, leaving me feeling stuck and questioning if I’ll ever land the job I’ve worked so hard to qualify for.

This blog is my way of channeling those feelings into something constructive. Writing about my journey—the highs, the lows, and everything in between—helps me process the weight of these emotions and remind myself that I’m not alone in this struggle. Sharing my thoughts here also gives me hope: hope that by reflecting on my progress and connecting with others, I’ll rekindle my belief that I have what it takes to succeed in cybersecurity. Someday, I know I’ll look back at this as just one chapter in my story—a stepping stone on the path to a fulfilling career.

  • Blog: Pretexting, Memory Injection, and TOC/TOU Security Vulnerabilities

    CompTIA Security+ SY0-701 covers both human-based attacks and technical application vulnerabilities. Three important concepts are pretexting, memory injection, and TOC/TOU vulnerabilities. Although they describe very different attacks, each involves an attacker taking advantage of trust, timing, or the normal operation of a system. What Is Pretexting? Pretexting is a social engineering technique in which an…

  • Blog: MSP, MSSP, and Supply Chain Security Explained

    Third-party service providers are an important part of CompTIA Security+ SY0-701 because organizations frequently depend on outside companies for technology, security, software, infrastructure, and business services. Understanding the difference between an MSP and an MSSP is particularly important. What Is an MSP? An MSP, or Managed Service Provider, is a third-party company that provides or…

  • Blog: Security+ Threat Vectors: Unsupported Systems, Wireless Risks, and Physical Networks

    Preparing for the CompTIA Security+ SY0-701 certification exam requires understanding how attackers gain access to systems through different threat vectors. Some of the most important examples involve unsupported systems and applications, vulnerable wireless technologies, physical network connections, and Bluetooth attacks. Unsupported Systems and Applications Systems and applications that are no longer supported by their manufacturer…