Duke Cyber student Lucy Li landed her first job before graduation

Why did you apply for the ME in Cybersecurity? What career goals led you to Duke?

My undergraduate major is Information Security, and I have found great enjoyment in my past study, research, and internship experiences in the security field. I want to pursue a more advanced and practical degree in cybersecurity, and I found that Duke’s Cybersecurity program offers numerous hands-on courses and industry connections. I hope I can join cybersecurity organizations and continue my security work.

How have you found your internship? In what way has the internship prepared you for getting a job?

“Prepare yourself, but don’t forget to network.” This is what my Duke Career Service coach told me when I felt depressed and upset about finding an internship at the beginning of 2024. After joining Duke in the fall of 2023, I spent a lot of time learning new skills, revising my resume, and applying for jobs. Almost all the applications went unanswered. The primary reason is that I didn’t establish connections with the target companies.

From that end, I set up coffee chats with employees in those companies and attended conferences to meet people. Professor Art Ehuan also helped me a lot by referring me to HR professionals and directors of cybersecurity companies. I met with Niko Bailey, the lead of the Security Operations Center (SOC) at Duke’s Office of Information Technology (OIT). They were looking for some interns for SOC analysis and were willing to give me an opportunity. My internship project involved utilizing Splunk for campus login monitoring, Proofpoint for checking potentially harmful emails, and Microsoft Defender for detailed analysis of security events.

Being a SOC analyst was a huge step for me. I not only gained technical skills such as using Splunk, Proofpoint, and Microsoft Defender, but I also learned how to work in a team and communicate more professionally with users and customers. Combined with networking skills, all these experiences prepared me for the Palo Alto Networks role: I recently received an offer for a Cybersecurity Risk Management Associate Consultant position.

How did the Cyber courses help you prepare for the internship and the job?

The Duke Master of Engineering in Cybersecurity program offers two tracks of learning: cybersecurity technical skills and cybersecurity management. I took courses in areas such as ethical hacking, cloud security, and machine learning. These courses helped me establish a solid foundation in cybersecurity principles. I also took some courses related to laws, regulations, and management, which provided a broader view of cybersecurity frameworks and controls.

Can you name 2-3 of the most critical skills you gained during the program?

In addition to technical skills and knowledge related to cybersecurity law, policy, and management, I learned some essential soft skills for success.

I learned to be open to learning new things. Practicing curiosity is critical for cybersecurity workers. Having passion and a desire for exploration opens opportunities for success. I learned not to be afraid to start something new. We should kick it off, continuously modify it along the way, insist on it, and finally, we will make it.

The cybersecurity leaders who met with us during the Cybersecurity Seminars emphasized the importance of continually learning something new every day. Both defensive and offensive sides will innovate new technologies, which requires us to be curious about what kinds of tools or methods they use during an incident and try to acquire new skills.

Where would you like to be professionally in 5 years?

Transitioning from student to professional worker is a significant shift. Over the next five years, I hope to build a solid foundation as a cybersecurity consultant, encompassing both technical and soft skills. It’s hard to say, “I must be a leader in 5 years,” but I hope I will still enjoy my work, remain open to challenges, and seek opportunities.