Workshop: How to Think Like a Cybersecurity Defender

Cybersecurity isn’t just about tools. It’s about learning to think like the people responsible for defending systems and data.

This four-hour workshop introduces the mental models that cybersecurity professionals use to understand risk, defend systems, and respond to threats. Rather than focusing on specific technologies, students will explore the foundational principles that shape how defenders approach security problems. Concepts such as least privilege, the CIA triad, and the balance between prevention, detection, and response provide the starting point for understanding how security programs operate in the real world.

The workshop then expands into the practical frameworks organizations use to manage cyber risk, including defense in depth, zero trust principles, and basic threat intelligence. Students will also gain a high-level understanding of how modern security teams operate through Security Operations Centers (SOCs) and how technologies such as SIEM, EDR, and XDR support detection and response efforts.

Hands-on exercises reinforce the material through practical activities. Students will perform an OSINT investigation using freely available tools and participate in an interactive defense-in-depth exercise that demonstrates how layered security controls protect systems even when individual safeguards fail.

By the end of the workshop, participants will have a clear understanding of the mindset defenders use to approach cybersecurity challenges and will be better prepared to continue learning in the field or engage with more advanced security topics.