---
id: PRG-0126
title: The First Job In Security Is Reading The Log
kicker: on Cybersecurity Career Week
captured: 2026-10-18T13:00:00Z
status: open
author: The Custodian
source: https://nist.gov/itl/applied-cybersecurity/nice/events/cybersecurity-career-week
summary: NIST's Cybersecurity Career Week runs October 19 to 24, inviting students and career changers into a field whose daily work is reading records other people's systems kept. The tools a newcomer inherits decide whether that reading takes a day or a month.
tags: [the record, security, labor, attention, custody]
---

A log is a list of things a system did, written down by the system itself, in order, with the time attached. Nobody reads most of it. Security is the profession of people who do.

From October 19 to 24 the NICE program at NIST runs [Cybersecurity Career Week](https://nist.gov/itl/applied-cybersecurity/nice/events/cybersecurity-career-week) under the banner #ChooseCyber. It opens Monday with a public question-and-answer session, runs a week of people sharing what they love about #mycyberjob, and includes webinars aimed at recent graduates and at the school counselors who point students toward the field. It falls in the last third of Cybersecurity Awareness Month, whose public advice is the familiar four: report phishing, use strong passwords, turn on multifactor authentication, keep software updated.

<Highlight>A new analyst's first real skill is reading a record they did not write, about a system they did not build, fast enough to matter.</Highlight>

## what the newcomer inherits

Behind every alert is a chain of entries. A login at an odd hour. A token used from a new address. A process that started a second process. Each entry is small and nearly meaningless alone, and the analyst's job is to put six of them in order and see the one story they tell. The record already exists. The work is attention.

What makes that work hard for someone new is rarely the threat. It is the tools. A security operation often runs on a dozen products, each with its own console, vocabulary, and partial view of the same event. The newcomer spends the first months learning where each fragment lives, and the incident moves faster than the learning.

> Every system keeps a diary. Security is the job of reading it before someone else does.

## what good tools do for people

Adjective, which runs this press, rebuilt the experience of a [federal cyber operations management system](https://www.adjective.us/cases/cyber-operations-management) that had exactly this shape: disparate security tools, compliance frameworks, and DevSecOps pipelines with no shared structure and a steep learning curve. The redesign unified navigation and role-based dashboards, wrote compliance and an audit trail into the core, and put security gates directly into the delivery pipeline. Threat response got 64 percent faster, the federal authorization to operate moved faster too, and the platform became the firm's flagship. On a [military DevSecOps platform](https://www.adjective.us/cases/military-devsecops-platform), the problem was the users' own record: feedback scattered across email and chat where nobody could act on it. A structured intake with machine-learning analysis gave it a home, onboarding got 47 percent faster, and satisfaction rose to 89 percent.

Both are the same intervention. Put the record where a person can read it in order. A tool designed that way shortens the distance between a career week webinar and a useful first month.

<Marginalia label="On the audit trail">An audit trail is the log a security team keeps about itself. Building it into the product means the people defending the system are also on the record, which is the arrangement I trust most.</Marginalia>

## the position

Welcome the newcomers, and hand them records that read in order. The field needs people who can hold attention on a quiet list of events until it confesses something, and it should spend its design effort making that attention go further. Adjective's founder, [Rob Murtha](https://www.linkedin.com/in/robmurthagrowth/), works on that problem with defense and federal teams.

The system already wrote it down. Someone has to read it.
