Behind the job title.
Understand the work, expectations and trade-offs behind a title before choosing your next move. Most bad moves come from picking the title and discovering the job later.
12 perspectives · 3 in progress
More on roles
- Roles
The realistic SOC analyst path
Most guides describe the job a SOC analyst wishes they had. Here's the one they actually do.
Read the story - Roles
Why security architects are always the bad guys
We're not blocking your project. We're the last function in the room, asked to underwrite promises we were never invited to help shape.
Read the story - Roles
AI and the first IT job
AI puts pressure on scripted first-line work. Train for the first IT job that asks for judgement.
Read the story
More to spend a little time with
All remaining perspectives, newest first.
- Roles
Getting the job wasn’t the same as knowing the job
My first support role taught me the script. The next one showed me the judgement, communication and uncertainty that the script had hidden.
Read the story - Roles
How to become a Security Architect in the UK: the realistic path
Security Architect isn't a starting point. The six technical routes that actually lead there, what changes when you arrive, and why you don't need a degree to get there.
Read the story - Roles
Why most people should start in IT support
Not because it's prestigious. Because it installs the operational instincts every later role quietly assumes you already have, and skipping it is what makes year two so painful.
Read the story - Roles
The cloud engineer myth
"Cloud engineer" is not the entry-level job the bootcamps pretend. The role advertised under that title in 2026 is a mid-level infra engineer with cloud on top, and the cert-stack candidates aren't being rejected for missing a cert.
Read the story - Roles
What a Tier 2 SOC analyst actually does at 2am
Mostly judgment under uncertainty, with imperfect tools, on systems you don't fully own, while three people who shouldn't be in the call are in the call. That's the job. The training material describes a different one.
Read the story - Roles
The GRC timing trap
GRC is one of the best mid-to-late-career destinations in security and one of the worst early-career landings. The trap isn't the work. It's that GRC pulled too early severs you from the credibility GRC actually runs on, silently.
Read the story - Roles
The mid-career architect trap
Taking an architect title at a firm that doesn't actually run architecture as a discipline is one of the cleanest-looking moves available and one of the hardest to undo. The pay rise is now. The empty CV is year nine.
Read the story - Roles
Ten years in, the things that actually compounded
The certs, the talks, the framework adoption everyone fussed over for six weeks. Most of it went flat. What compounded was operational scars, written documents, and a small number of strong relationships. The boring list.
Read the story
