The Grind.
Framework: the operator’s discipline stack.
Cybersecurity is a marathon disguised as a series of sprints. The threats don’t sleep, the certifications never end, and the field rewires itself every eighteen months. This is the operating framework I run on, the discipline stack that lets me grind hard for years without burning down the house.
“The quality of your output across a decade is set by the quality of your habits across a Tuesday. Stop optimizing the heroic effort. Optimize the boring repetition.”
Personal operating note, 2024
Five pillars of the Grind
Burnout in cyber rarely comes from one bad week. It comes from quietly neglecting one of these pillars for months. The framework is a checklist against silent collapse.
01 · Sleep
Non-negotiable. Seven hours minimum. Cognition is the asset; sleep is its uptime.
02 · Movement
30 min/day, six days/week. Cardio for the brain, lifting for the spine, mobility for the desk.
03 · Fuel
Real food, real water, no caffeine after 14:00. The body is the rig. Fuel it like one.
04 · Craft
90 minutes of deliberate study or build per day. Not consumption, production.
05 · People
Family and chosen connections, the work means nothing without them. Block the time.
Operating principles
Seven rules that took six years and one near-burnout cycle to internalize. Each is a tradeoff, not a rule of physics. They work together.
01 · Compound Interest > Heroic Effort
Two hours of focused study per day, every day, beats a 14-hour weekend cram. The exam doesn’t care how hard the last week was, it cares how prepared the last six months were. The same is true of certifications, fitness, and relationships. Show up small. Show up daily.
02 · Energy Is the Currency, Not Time
Time-management dashboards lie. You can have eight free hours and still get nothing done because the tank is empty. Schedule the hardest cognitive work into your peak window, for me, 06:00–10:00. Save shallow work (email, meetings, alert triage backfill) for the trough hours.
03 · The 80% Rule
Cybersecurity is a perfectionist’s graveyard. There is always one more log to read, one more vulnerability to chase, one more chapter to re-read. Ship at 80%. The remaining 20% is achieved in production, not in your head. The blog post you publish beats the perfect draft you don’t.
04 · One Big Rock Per Quarter
Multitasking on certifications is a trap. One major credential per quarter, max. Right now: CISSP. Next quarter: CISM. The rest of the bandwidth goes to job, blog, lab, family. The list of what you’re NOT doing is more important than the list of what you are.
05 · Build in Public
Every blog post, every lab writeup, every skill tree update is a public commitment device. The cost of quitting goes up when the work is visible. It also compounds: a body of public work scales beyond a single résumé line item. Recruiters find writing. Algorithms don’t find résumés.
06 · The Home Lab Is the Cathedral
The job pays the bills. The lab builds the operator. You will never have time for the home lab, you will only ever make time for it. 30 minutes most evenings: Splunk + Sysmon + Atomic Red Team running in a tiny VM cluster. Break it. Detect it. Document it. Repeat.
07 · Recovery Is the Workout
In strength training, the muscle grows in the rest, not the rep. The brain works the same way. One day per week is fully off. No labs, no certifications, no security Twitter. Walking, family, food, books not about computers. The grind only compounds when the recovery shows up too.
A day on the stack
An honest version of the operating day. It is not optimized. It is sustainable. The exact times shift; the structure does not.
Weekday, on shift
- 05:30 Wake. Water. No phone for 30 minutes.
- 06:00 Deep work block 1: study (CISSP / lab / writing).
- 07:30 Movement, lift, run, or row. 30–45 min.
- 08:30 Breakfast. Family. Real food.
- 09:00 Work shift starts. Triage → deep work → meetings.
- 17:00 Hard stop. Walk away from the screen.
- 18:30 30 min lab or blog, if energy permits.
- 21:30 Wind-down. Read. Lights out by 22:30.
Saturday, off day
- 07:00 Sleep in. No alarm.
- 09:00 Long walk or hike. Sunshine non-negotiable.
- 12:00 Family time. Errands. Slow lunch.
- 15:00 Reading, a non-cyber book.
- 17:00 Cook a real meal. No takeout default.
- 19:00 Movie night, game night, or just talking.
- 22:00 Sleep. Recovery is the workout. No labs. No CISSP. No security Twitter.
Anti-Patterns
Failure modes I’ve hit, watched colleagues hit, or read post-mortems on. If you spot any of these in your week, you are leaking.
The perpetual cram
Cycling between 16-hour days and three-day collapses. Average output is mediocre and you destroy your nervous system in the process. The tortoise wins this race, every time.
Cert tourism
Stacking three certifications simultaneously and finishing none of them. The dopamine of starting eclipses the discipline of completing. One rock. Per quarter.
The infosec Twitter loop
Eight hours of consuming threat intel and zero hours of producing anything. Information without application is just anxiety with extra steps. Ship something this week.
The “one more ticket” lie
Every ticket closed at 22:00 buys you a worse one tomorrow because you’re fried. Hard stops protect tomorrow’s output. The queue will be there at 09:00.
Skipping the boring reps
Mobility work, fundamentals review, root-cause writeups, the boring stuff is where the operator gets built. The flashy stuff is just ego optimization.
Measuring only outputs
Tickets closed, certs earned, posts published, all lagging indicators. The leading indicators are sleep hours, lab minutes, and family time blocks. Watch those.