Train. Secure.
Research. Achieve.

I joined the pentesting intensive with zero red-team background. Nine weeks later I passed my OSCP and moved into a SOC analyst role at a private bank. The report standard they enforce is what got me through the interview.

Their audit team found a misconfigured storage bucket and two privilege-escalation paths our previous vendor missed entirely. The remediation plan was practical rather than theatre — our own engineers executed it in three weeks.

Two papers submitted and one accepted at an IEEE workshop during the six-month track. The mentorship on methodology was the part I genuinely could not have managed alone.

Fully funded MSc offer from TU Delft. They rewrote my statement of purpose three times and ran two mock interviews. I do not think I would have got there on my own.

We ran the incident response retainer for a year. Mean time to containment dropped from days to under four hours, and the quarterly exercises are the reason the team stayed sharp.

The web security cohort taught every vulnerability twice — once as the attacker, once as the developer fixing it. That second half is what made it stick.

I sent three of my postgraduate students through the behaviour analytics track. All three came out with submissions, and the methodology discipline carried back into my own lab.

Full funding plus a research assistantship in Canada. Sarah was blunt with me about my odds early on, which stung at the time and was completely correct.

The cloud engagement rebuilt our identity model from scratch. Six months on we can still answer who can reach what, which we could not before.

I failed the first report submission and was told to do it again. Annoying then, but it is the reason my first client deliverable went out without a single correction.