Personally, the toughest thing for me was justifying changes to the organisation and making sure any suggested changes are realistic for the maturity you're dealing with. This may mean some recommendations aren't best practice, but you can start moving the organisation in that direction, or even lay out a roadmap to make big changes more manageable and gradual.

As much as I would love to make hard and fast changes, this just isn't feasible in most organisations (especially government).

Hey everyone! I'm a new kid on the block in terms of professional blue teaming. Landed a role in a large firm as a SOC analyst and really enjoying my job. Looking to move up quickly and very motivated to do so (I'm almost in my 30's and have mouths to feed 😂)

Previously, I've been bouncing through roles from IT service desk to various admin (non-IT) roles. I also enjoy a bit of web design and running my own SIEM on Raspberry Pi's.