How I started my journey into cybersecurity and what I wish I knew earlier.
👋 Introduction
Hey there! I’m Semyon (GitHub: @Trytonottry) — a cybersecurity enthusiast and DevSecOps learner.
When I first got interested in cybersecurity, I was overwhelmed by how broad the field was. Should I learn networking? Ethical hacking? Python? Cloud?
If you’re at that point too — this post is for you.
Here are five things every beginner in cybersecurity should know before diving deep into this exciting (and chaotic) world.
1️⃣ Cybersecurity Is a Process, Not a Product
Cybersecurity isn’t just about “hacking” or fancy tools — it’s about protecting systems, data, and people.
It includes multiple domains: network defense, application security, forensics, cryptography, cloud protection, and more.
When I started learning, I realized that understanding why we protect systems is even more important than knowing how.
Focus on principles first, tools later.
🧠 Pro tip: Try hands-on platforms like TryHackMe or PortSwigger Web Security Academy to explore different areas.
2️⃣ Learn the Core Tools Early
You don’t need to master hundreds of tools — just start with a few that help you understand the basics:
- 🕵️♂️ Nmap — for network scanning and reconnaissance.
- 🌐 Burp Suite — for web app vulnerability testing.
- 📡 Wireshark — for network packet analysis.
- 🐍 Python — for scripting and automation (my personal favorite).
These tools will help you see how the internet and networks actually work — which is the real foundation of cybersecurity.
3️⃣ Build “Mini Projects” — Don’t Just Study
I used to learn passively — watching tutorials, reading docs — until I realized that building something small sticks better than hours of theory.
I started creating a small set of scripts called infosec-newbie on GitHub — automation helpers, scanners, and experiments.
Each project taught me more than any single course.
💡 Tip: Pick one concept (like port scanning, password hashing, or log parsing) and build a tiny project around it. Don’t worry if it’s simple — what matters is finishing it.
4️⃣ Practice Consistently and Embrace Mistakes
In cybersecurity, mistakes are not just okay — they’re part of learning.
Join CTFs, try labs, break things (in a safe environment), and write about your experience.
When I started writing my own cyber-notes and documenting solved challenges, I noticed how much deeper I understood each topic. Writing is learning.
🧩 Pro tip: Keep a “security journal” or GitHub repo with your practice notes. Future you will thank you.
5️⃣ Protect Yourself First
Before you can protect systems, you must protect yourself.
Many beginners overlook personal security — but it’s your first real test.
- Use strong, unique passwords (and a password manager).
- Turn on 2FA everywhere.
- Don’t click random links — phishing still works in 2025.
- Regularly review your online footprint (GitHub, social media, etc.).
If you can secure your own environment, you’re already ahead of 80% of users out there.
🧭 Final Thoughts
Cybersecurity is not a destination — it’s a continuous learning journey.
To recap:
- Understand what cybersecurity really is.
- Learn a few essential tools.
- Build small, meaningful projects.
- Practice often, learn from your mistakes.
- Protect yourself as you learn to protect others.
I’m still learning every day — and if you’re reading this, you’ve already taken your first real step.
If you’d like, I can write a follow-up post about “Starting with the OWASP Top 10” or “Intro to DevSecOps for Beginners” — let me know in the comments!
👨💻 Written by Semyon (@Trytonottry)
“Architects of a safe cyberspace.”