Applying Cybersecurity Concepts Through Real-World Projects and Hands-On Learning
During both undergraduate and graduate studies, Erika Hernandez focused heavily on hands-on cybersecurity, infrastructure, and systems administration projects designed to simulate real-world enterprise environments. These experiences helped bridge the gap between classroom theory and practical IT operations — strengthening skills in cybersecurity, compliance, vulnerability management, networking, and risk assessment.
Rather than focusing only on textbook concepts, these projects emphasized practical problem-solving, technical documentation, teamwork, system hardening, and security analysis. Many of the concepts explored in these assignments directly connect to responsibilities Erika later encountered in professional IT and cybersecurity environments.
Areas of focus included:
• CIS Controls & Security Frameworks
• Vulnerability Assessments & Risk Analysis
• Network Security & Infrastructure Protection
• Linux Administration & Kali Linux
• Security Auditing & Compliance Concepts
• Team-Based Cybersecurity Competitions
• Technical Documentation & Reporting
• Incident Response & System Hardening
CIS Controls & IT Audit Frameworks
One major area of study focused on CIS Controls and their role in strengthening organizational cybersecurity and operational security practices. Through coursework and research projects, Erika explored how businesses use security controls to improve risk management, system integrity, access control, and audit readiness.
These concepts later became highly relevant in professional environments involving IT controls, compliance reviews, operational security processes, and audit preparation efforts. This experience helped build a stronger understanding of how cybersecurity frameworks support real business operations beyond the classroom.
Vulnerability Assessment & Security Analysis with Nessus
As part of a hands-on cybersecurity assignment, Erika performed vulnerability assessments using Nessus within a Kali Linux virtual machine environment. The project involved scanning multiple operating systems and intentionally vulnerable machines to identify security weaknesses, analyze vulnerabilities, and research associated CVEs (Common Vulnerabilities and Exposures).
This project strengthened practical experience with:
• Vulnerability scanning and reporting
• Kali Linux administration
• Security analysis and remediation concepts
• CVE research and risk identification
• Troubleshooting and lab environment configuration
The assignment provided valuable exposure to the types of tools and methodologies commonly used within cybersecurity operations and vulnerability management programs.
Cybersecurity Competition & Team Defense Operations
While serving as Cybersecurity Club President, Erika participated in a team-based cybersecurity competition focused on defending enterprise infrastructure in a simulated attack environment. Teams were responsible for securing servers, desktops, services, and network infrastructure while responding to real-time security threats and operational challenges.
The competition emphasized collaboration, rapid problem-solving, system hardening, patch management, and defensive security operations under pressure. With limited preparation time and incomplete information about the environment, participants had to quickly assess risks, secure systems, and maintain operational stability as a team.
This experience reinforced the importance of communication, adaptability, and teamwork within cybersecurity operations while providing practical exposure to real-world defensive security concepts.