Pathway · Students & new grads

Your degree got you the basics. Now show what you can do.

Most new grads compete with the same coursework, the same Security+, and the same "SOC Analyst" search. Here's how to stand out: one target role, 2–3 projects you can explain, and a search that goes past page one.

The real problem

It isn't what you know. It's what they can see.

Hiring managers screening entry-level applicants can't tell a 3.9 GPA from a 3.1 in a six-second resume scan. What they can see is a project that says "I set up a SIEM, investigated a brute-force attempt, and wrote a detection for it", with a link to prove it.

That's what turns "no experience" into "some relevant experience".

Common mistake: listing courses and tools ("Wireshark, Nmap, Splunk") with no proof you used them.
Common mistake: stacking a third or fourth cert instead of building something.
Common mistake: only applying to jobs titled exactly "Entry Level Cybersecurity Analyst".
What works: one target role, 2–3 documented projects, a tailored resume, and fresh applications every day.
Your launch plan

Five steps, in order

Choose one entry point

SOC, GRC, IAM, vuln management, or a bridge role like help desk or NOC.

Fill fundamental gaps

Networking, Windows/Linux, logs and security basics: what interviews actually test.

Build 2–3 projects

Matched to your role. Capture screenshots, queries and findings as you go.

Package the evidence

A GitHub README per project and a one-page, role-specific resume.

Search wide, apply early

Alternative titles, career-site searches, new postings daily, and a tracker.

Starter projects

Three projects that read like real work

Free ideas to start this weekend. The Toolkit has 13 fully guided projects (including 5 in AI security), each with a worked example.

SOC

Home SIEM investigation

Send Windows + Sysmon logs into Wazuh or Splunk Free. Simulate failed logins, investigate, and write a short incident report.

  • Lab diagram
  • Queries + screenshots
  • Findings and recommendations
GRC

NIST CSF 2.0 risk assessment

Scope a fictional small business, identify 5 risks, score likelihood and impact, assign owners and propose controls.

  • Risk register (Excel)
  • Two written audit findings
  • Executive summary
IAM

Entra ID access lab

In a free Microsoft Entra tenant, build users and groups, enforce MFA with conditional access, then run an access review.

  • Policy screenshots
  • Access review findings
  • Least-privilege rationale
Want the full step-by-step version? Download Project 1 free, exactly as it appears in the Toolkit.
Golden rule: only put on your resume what you actually built, and be ready to explain every line of it. That's what interviewers test.
In the Career Toolkit

From coursework to a portfolio you can defend

  • 13 guided projects (8 core + 5 AI security), each with a worked example
  • 8 resume templates + 8 completed examples, including AI Security and Vulnerability Management
  • 100+ alternative job titles and Boolean strategies
  • 105-question interview bank with answer outlines
  • Application tracker and recruiter outreach templates
One-time · instant download

$39

Want a second opinion?

Get a 90-day plan built around you.

A 45-minute strategy session: your background, your target role, and exactly what to do next.