Hey everyone,

I'm currently a college student and I'm trying to prepare for an entry-level SOC Analyst L1 role, but I'm honestly pretty lost about what I should be doing.

I have around 6 months left before college placements, and I'm currently able to give around 2 hours/day to cybersecurity.

My current knowledge is:

• Basic networking: OSI model, TCP/IP, DNS, DHCP
• Very basic Linux commands
• Python basics for scripting
• Basic understanding of cybersecurity concepts

The problem is that even though I'm studying around 2 hours every day, I don't really feel like I'm progressing. I keep finding huge roadmaps with 50 different tools/topics, and I'm not sure what I actually need for an SOC L1 job.

What I'm confused about:

1. Where should I actually practice Linux?

Should I just use a Linux VM and practice commands there? Are there any good platforms/labs specifically for learning Linux for SOC work?

2. How much networking do I actually need?

I know the basic theory (OSI, TCP/IP, DNS, DHCP), but I'm confused about whether I need to go much deeper.

Do SOC analysts actually need practical networking skills?

If yes, where should I practice them?

Should I be using something like Wireshark, Packet Tracer, etc.?

3. Once my foundations are ready, what should I learn next?

4. Where should I practice SOC skills?

5. What projects should I build?

Once I have the fundamentals, what projects would actually be useful for an entry-level SOC resume?

And finally — getting the job

With around 6 months left before college placements, is it realistic to aim for an SOC L1 / Junior SOC Analyst position as a fresher?

Do SOC L1 jobs usually require previous experience, or are there companies that hire fresh graduates?

Any advice, especially from SOC analysts or people who recently got their first SOC job, would be really appreciated.