
01
Red Team
Friendly hackers you hire, with permission, to test your locks before a real attacker shows up.
- Try to break in the way an attacker would
- Find weak spots first
- Write up how to fix them
The career observatory
There’s more than one way into tech, and no single right path. Explore what’s out there: the teams, the work they do, and the roles you’ll see.
Teams 101
In cybersecurity you’ll hear about the red, blue, and purple teams. Here’s who does what, then explore every path below.

01
Friendly hackers you hire, with permission, to test your locks before a real attacker shows up.

02
The security guards and detectives. They watch, investigate, and stop attacks.

03
Red and blue working together, so what attackers find makes the defense better.
Your match: Blue Team
You’re a defender. You notice details and love solving the case. Every team needs you.
Your match: Red & Purple Team
You’re a tester. You see how things break so they can be made stronger. Every team needs you.
Your match: More Cybersecurity Paths
You’re a planner. You bring order, rules, and the big picture. Every team needs you.
Your match: Paths That Aren’t Cyber
You’re a builder and helper. You make tech work for real people. Every team needs you.
Cybersecurity
Detect suspicious activity and help respond to incidents.
Windows and Linux logs, networking, SIEM queries, incident handling.
Analyze sample authentication logs, write one detection, and document your triage decisions.
Job titles and requirements vary by employer. Everyone’s path looks different.
Cybersecurity
Test defenses in authorized environments and explain how to improve them.
HTTP, operating systems, networking, scripting, clear reporting.
Complete a deliberately vulnerable web lab and write a finding with evidence and remediation.
Job titles and requirements vary by employer. Everyone’s path looks different.
Cybersecurity
Preserve evidence and reconstruct what happened during an incident.
File systems, evidence handling, operating system artifacts, timelines.
Investigate a sample disk image and produce an evidence inventory and event timeline.
Job titles and requirements vary by employer. Everyone’s path looks different.
Cybersecurity
Connect security controls, business risks, and evidence.
Risk assessment, control frameworks, evidence review, stakeholder communication.
Assess a fictional small business and create a risk register plus a short remediation plan.
Job titles and requirements vary by employer. Everyone’s path looks different.
Cybersecurity
Give people the access they need and remove access they no longer need.
Authentication, authorization, least privilege, directories, automation.
Model a joiner, mover, and leaver process and show how you would validate access changes.
Job titles and requirements vary by employer. Everyone’s path looks different.
Cybersecurity
Configure and monitor cloud environments with security in mind.
Cloud services, IAM, networking, logging, infrastructure automation.
Diagram a small cloud environment and explain its access, network, logging, and cost controls.
Job titles and requirements vary by employer. Everyone’s path looks different.
Cybersecurity
Design how security controls fit together across a system.
System design, threat modeling, network and identity controls, business requirements.
Create a reference architecture with trust boundaries, a threat model, and a decision record.
Job titles and requirements vary by employer. Everyone’s path looks different.
Cybersecurity
Help teams build safer software throughout development.
Programming, HTTP, secure design, authentication, code review.
Build a small application, threat model it, and document one security improvement with a test.
Job titles and requirements vary by employer. Everyone’s path looks different.
Not cyber
Build and maintain applications that solve problems for users.
Programming, version control, testing, APIs, accessible interfaces.
Build a small useful application with a README, tests, and a clear explanation of its users.
Job titles and requirements vary by employer. Everyone’s path looks different.
Not cyber
Use data to answer questions and evaluate useful models.
A fast-growing area.
SQL, statistics, data quality, Python, evaluation, responsible data use.
Analyze a public dataset and publish your question, cleaning steps, findings, and limitations.
Job titles and requirements vary by employer. Everyone’s path looks different.
Not cyber
Keep systems connected, available, and understandable.
TCP/IP, DNS, routing, switching, operating systems, monitoring.
Build a small network lab and document addressing, segmentation, and a connectivity investigation.
Job titles and requirements vary by employer. Everyone’s path looks different.
Not cyber
Help people resolve technology problems and improve everyday systems.
Troubleshooting, operating systems, customer communication, ticketing, documentation.
Create a troubleshooting knowledge base with example tickets, resolution steps, and escalation criteria.
Job titles and requirements vary by employer. Everyone’s path looks different.
Not cyber
Turn complicated information into useful guides people can understand.
Research, interviewing, writing, editing, information structure.
Write a clear getting started guide for a tool, then ask someone unfamiliar with it to follow it.
Job titles and requirements vary by employer. Everyone’s path looks different.
Not cyber
Understand customer needs and help people get value from technology.
Customer communication, product knowledge, discovery, training, follow through.
Create a sample onboarding plan for a new software customer, including discovery questions and a clear success goal.
Job titles and requirements vary by employer. Everyone’s path looks different.
Not cyber
Understand how people use products and make those experiences clearer.
User research, visual design, accessible interfaces, prototyping, usability testing.
Interview someone about a frustrating website, sketch an improved experience, and test whether it is easier to use.
Job titles and requirements vary by employer. Everyone’s path looks different.