1 of 22

From Sus to Lit:

Slay Cyber Like a GOAT

Justin David Pineda CISSP, CISM

justinp@pinedacybersecurity.com

2 of 22

Why are you taking Information Technology or Computer Science?

Speaker Notes (Verbose):

Let’s anchor this from Session 3.

Arrays are powerful—but they come with structural rigidity.

Problem 1: Fixed Size (Static Behavior)

When you declare:

int arr[5];

You are committing upfront:

“I will only ever need 5 elements.”

👉 In real systems, that assumption is often wrong.

Logs grow unpredictably
User sessions fluctuate
Network packets vary

Problem 2: Expensive Insert/Delete (Shifting Cost)

Let’s say you insert at index 0:

Before: [10][20][30][40]

Insert 5 → shift everything →

After: [5][10][20][30][40]

👉 That’s O(n) cost.

Now imagine:

1 million elements
Real-time system

That’s unacceptable.

Problem 3: Contiguous Memory Requirement

Arrays require continuous memory blocks.

👉 If memory is fragmented:

Allocation fails even if total memory is enough

Transition to Linked Lists

Linked lists solve these:

No shifting → pointer updates only
No contiguous memory requirement
Dynamic growth

👉 Analogy:

Array = parking lot (fixed slots)
Linked List = street parking (anywhere, just linked directions)

👉 Key takeaway for students:

“Linked lists exist not because arrays are bad—but because real systems are messy.”

3 of 22

4 of 22

5 of 22

6 of 22

How do you start?

Start with your infosec core
And you can shift to other colors later on.
Experience is the best teacher

7 of 22

First: Security Operations (Blue)

8 of 22

SOC usual issues

Your SOC detects continuous multiple failed login attempts to a client server in US from China. What will you do?

9 of 22

Second: Security Assessments (Red)

10 of 22

Pentest Problem

You found a Critical Defect (SQL injection) in a web app. However, the app needs to go to production tomorrow. What will you do?

11 of 22

Third: Management (White)

12 of 22

Common Bureaucracy

You have already tested a new EDR that will be implemented for the organization and trained your team to use. But the CIO does not want it because he has another preferred brand but not as effective. What will you do?

13 of 22

Fourth: Leadership (White)

14 of 22

Fifth and Sixth: Strategy and Architecture (Yellow)

15 of 22

PCI woes a 100M USD deal

You are in a BPO doing security architecture work. A new client handles credit card (PCI) information. As a rule, your system cannot store any credit card information. However, you are still waiting for the new system and the old system stores all info. The client wants you to start this week and will pay upfront 100M USD. If you cannot accommodate them, they will look for another vendor. What will you do?

16 of 22

Present: Entrepreneurship (Everything)

17 of 22

Traits of Cybersecurity Professional

Cold Headed/ Calm
Can articulate things
Can think outside the box
Zero Trust
Skeptical
Gut feel (Tamang Hinala)
Ethical

18 of 22

Improve through training and certs (aside from experience)

19 of 22

Be socially aware…

20 of 22

Join orgs that will help you out…

21 of 22

Involve the youth!

22 of 22

“Cybersecurity has many doors to enter—but it’s your character that decides if you stay and grow better.” - Justin Pineda