As someone diving deeper into the world of cybersecurity, I recently completed the Careers in Cyber room on TryHackMe. This room isn’t a traditional CTF or hands-on hacking challenge—instead, it’s a career exploration module designed to help you understand the various roles in the cybersecurity industry.
Here’s a breakdown of what I learned, my personal takeaways, and why I think every aspiring cyber professional should go through this room.
🧭 Room Overview
The Careers in Cyber room is structured into several tasks, each focusing on a specific cybersecurity role. It’s beginner-friendly and takes about 30–45 minutes to complete. You don’t need any technical setup—just a browser and curiosity.
🧠 Key Roles Covered
1. Security Analyst
What they do: Monitor networks, analyze threats, and respond to incidents.
Skills needed: SIEM tools, log analysis, basic scripting, communication.
Learning path: TryHackMe’s Pre-Security and SOC Level 1 paths are great starting points.
💡 Personal Insight: This role feels like the “first responder” of cyber. It’s ideal for those who enjoy puzzles and real-time problem-solving.
2. Security Engineer
What they do: Build and maintain secure systems, implement firewalls, and harden infrastructure.
Skills needed: Networking, system administration, scripting, cloud security.
Learning path: Cyber Defense and Red Teaming paths on TryHackMe.
💡 Personal Insight: This role appeals to builders—those who want to proactively design secure environments rather than just react to threats.
3. Incident Responder
What they do: Investigate breaches, contain threats, and perform forensics.
Skills needed: Digital forensics, malware analysis, threat intelligence.
Learning path: SOC Level 1 and Threat Hunting modules.
💡 Personal Insight: This is the cyber equivalent of a detective. If you love digging into logs and uncovering what went wrong, this might be your path.
4. Penetration Tester
What they do: Simulate attacks to find vulnerabilities before real attackers do.
Skills needed: Kali Linux, Metasploit, Burp Suite, scripting, report writing.
Learning path: Offensive Pentesting and Complete Beginner paths.
💡 Personal Insight: This is the most “Hollywood” role—fun, technical, and high-impact. But it also requires strong ethics and communication skills.
5. Governance, Risk, and Compliance (GRC)
What they do: Ensure organizations meet security standards and regulations.
Skills needed: Policy writing, risk assessment, frameworks like ISO 27001, NIST.
Learning path: While not deeply technical, understanding security fundamentals is key.
💡 Personal Insight: GRC is often overlooked but is critical for aligning security with business goals. It’s perfect for those with a strategic mindset.
🧭 Lessons Learned
Cybersecurity is broad: There’s a role for every personality type—whether you’re technical, analytical, or strategic.
Soft skills matter: Communication, documentation, and collaboration are just as important as technical prowess.
Start with curiosity: You don’t need to know everything. Pick a path that excites you and build from there.
🧰 My Next Steps
After completing this room, I’ve decided to focus more on the Security Analyst path. I’m currently working through TryHackMe’s PT1 and SOC Level 1 learning path and brushing up on my log analysis and scripting skills.
🎯 Final Thoughts
The Careers in Cyber room is a fantastic starting point for anyone unsure about where they fit in the cybersecurity landscape. It’s informative, well-structured, and gives you a clear roadmap for your next steps.
If you’re just starting out or even considering a career switch, I highly recommend giving this room a try. It might just help you find your place in the cyber world.