Erich Winkler

Cybersecurity Manager | CISSP
I help beginners break into cybersecurity
Land Your First Cybersecurity Job In 90 Days Even Without a Degree ↓

[Erich Winkler @DecodedSecurity]

If studying cybersecurity were enough, you'd already be hired.

Most people optimize for activity, not outcomes. Employers don't test how much you studied, they test what you understand.

The 10 fundamentals that actually get you hired, free:
https://t.co/wwHqRArgiM

[Erich Winkler @DecodedSecurity]

Today only: 80% off my 90-Day Cybersecurity Job Blueprint.

The exact system I used to become a Cybersecurity Manager at 26, choose your path, prepare for what matters, land interviews (even without a degree).

14-day guarantee:
https://t.co/JdaPInHJg1

[Erich Winkler @DecodedSecurity]

If you're interested in cybersecurity, save this account for later!

[Erich Winkler @DecodedSecurity]

Anyone can put your CEO's address in the "From" field. The mail server delivers it happily.

This graphic shows why:

Actual sender -> [email protected]
What you see -> [email protected]

SPF and DKIM check the hidden parts.

Only DMARC checks the address you actually SEE.

[Erich Winkler @DecodedSecurity]

Can you tell a real threat from a false alarm?

I built a tool that drops you in the SOC analyst's seat: alerts come in, you make the call. It's the exact skill this article is about.

Try it: https://t.co/gHXJPyUGHA

[Erich Winkler @DecodedSecurity]

It is fascinating what people are willing to do just to avoid admiting they made a bad call.

We all make mistakes. Accept it, admit it and learn from it.

[Erich Winkler @DecodedSecurity]

Cybersecurity

[Erich Winkler @DecodedSecurity]

Dear algorithm,

please connect me with people interested in cybersecurity.

If that’s you, let’s connect!

[Erich Winkler @DecodedSecurity]

Most of you found me somewhere in the middle.

But it all started with one post, and this was it. One of the first things I ever wrote here.

For anyone who joined later and wants to see the beginning:

https://t.co/k8eDr8xkUe

[Erich Winkler @DecodedSecurity]

Do you spend your weekends studying?

[Erich Winkler @DecodedSecurity]

14 months and still waiting for my first viral post :(

[Erich Winkler @DecodedSecurity]

"Do the OWASP Top 10 and you're secure." ❌

No serious company believes this.

It's the BASELINE, not the finish line. The minimum bar.

If you can't handle the 10 most common risks, you have no business worrying about advanced threats.

https://t.co/09C0uDNaKq

[Erich Winkler @DecodedSecurity]

Just published 📢

Everyone in cybersecurity talks about the OWASP Top 10. Almost nobody can tell you why it matters.

It's not a list to memorize, it's a shared language + a way to prioritize what to fix first.

Full breakdown: https://t.co/09C0uDNaKq

[Erich Winkler @DecodedSecurity]

Thank you @guardingpearsof 🙏

I wrote a guest piece for their blog: the first rule of cybersecurity, no tool alone will save you from bad habits.

Big thanks to Tim for the collaboration 🤝

👉 https://t.co/3BBsFLWYCk

[Erich Winkler @DecodedSecurity]

This looks pretty close to another milestone! 🚀

[Erich Winkler @DecodedSecurity]

⏰ Last chance: Alert Triage challenge closes Sunday 23:59.

Real threat or false alarm? Make the call a SOC analyst makes all day.

Top 3 scores → 80% off my 90-Day Cybersecurity Job Blueprint.

Play + reply with your score 👇
https://t.co/gHXJPyUGHA

[Erich Winkler @DecodedSecurity]

https://t.co/MEVjqWHEqL

[Erich Winkler @DecodedSecurity]

The CEO is responsible for your company's cybersecurity. Not the CISO. The CEO.

They set the tone at the top. The CISO runs the program, the Data Owner decides access, the Custodian implements it.

A responsibility no one owns becomes nobody's job. That's how breaches start.

[Erich Winkler @DecodedSecurity]

https://t.co/8FtIsck2BW

[Erich Winkler @DecodedSecurity]

Dear algorithm,

please connect me with people who are interested in a free cybersecurity newsletter focused on key concepts required for interviews.

Thanks!
Erich
Decoded Security