Eva Deng

Current Company: Contra Costa Health

Information Security Analyst

Hear how Merritt College’s cybersecurity program helped shape Eva’s career path.

Click here to watch

A former preschool teacher, Eva discovered Merritt College’s Cybersecurity Program and decided to give it a try. The flexible two-year program fit easily into her busy schedule, and supportive instructors understood the balance of work and family. Encouraged to apply, she earned a Women in Cybersecurity conference scholarship—and today, she’s a Security Information Analyst at Contra Costa Health Services.

What skills or knowledge from the program have proven most useful in your work?

I’m grateful for all the professors at Merritt College who supported me throughout my studies. Cybersecurity is a fast-changing field — what you learn today might look very different a year from now. My biggest takeaway is the importance of staying engaged with the community, like the Merritt College Cybersecurity Program, and continuously networking with others. Keeping your knowledge current through ongoing study and connecting with professionals in the field is key to long-term success.

Are there any resources you’d recommend to students to supplement the program (e.g., Udemy)?

I recommend platforms like TryHackMe and Udemy for building cybersecurity skills at your own pace. Udemy even offers free courses from time to time, so keep an eye out for those — LinkedIn is a great place to spot those deals! I also highly recommend the SANS Institute, which offers cybersecurity programs with full scholarships. I’m currently part of the Diversity Workforce Academy – California program at SANS, and I’ve learned so much through that experience.

Are there any other organizations or groups that you are involved in that you felt was helpful/supportive?

Day of Shecurity, WiCyS, Cyversity, OWASP, SANS, RSA, BSides, ISLF

Noah Newdorf

Current Company: Allstate Insurance

Security Engineer

Noah, a Security Engineer at Allstate Insurance, was among the first graduates of Merritt College’s Cybersecurity Program. While studying computer science at Berkeley City College, he discovered the cybersecurity program at Merritt College and quickly found his passion. Starting as an intern at Esurance (later acquired by Allstate), he’s built a thriving cybersecurity career and earned multiple gold and silver rankings in National Cyber League competitions, reflecting the skills and confidence gained at Merritt.

What skills or knowledge from the program have been most useful in your work?

Merritt’s Application Security track and CodePath courses directly support my daily work. The program also strengthened my command-line skills and exposed me to multiple security domains, helping me build a solid foundation and discover my passion.

What resources would you recommend to students?

Hands-on learning has been the most valuable for me. Theory makes sense on paper, but true understanding comes from tackling real challenges. Here are a few standout resources:

• TryHackMe — Great for beginners, with guided hands-on labs across a range of security topics.
• The Web Application Hacker’s Handbook 2 — A deep dive into web attacks, written by the creator of Burp Suite.
• OverTheWire – Bandit — Teaches Linux command line and privilege escalation through increasingly difficult challenges.
• CodePath — Their OWASP-based course gave me early experience building real web exploits—tough but rewarding.
• HackTheBox & VulnHub — Great platforms to test yourself on real-world scenarios using your full skillset.

What did you gain from competing in the NCL?

NCL was a turning point for me. It exposed me to diverse security topics and taught me to quickly learn new tools and concepts. The competition boosted my confidence, strengthened my teamwork skills, and proved I could compete with students from top schools—all while having fun representing Merritt and placing well in team and individual games.

Wendy Segura

Current Company: Sage

Security Engineer

Wendy Segura is a Security Engineer at Sage, specializing in secure, scalable technology solutions. With over a decade of experience in cybersecurity, process optimization, and client advising, she focuses on building strong security frameworks and driving compliance for global organizations.

As an OWASP Bay Area Chapter Lead, Wendy actively fosters community and knowledge sharing in application security. She’s pursuing a Master’s in Cybersecurity at Georgia Tech and holds certifications in Cloud DevOps, Security, and Leadership.

What skills from the program have proven most useful in your work?

I completed the Application Security track, and the hands-on labs at Merritt truly prepared me for real-world challenges. When I began the program, I was interning as a Security Analyst, and each class directly reinforced what I was learning on the job.

In cybersecurity, you’ll never know everything—technology and threats are always evolving. Staying current through conferences, networking, and continued education is essential. Lifelong learning is the key to success.

Online Platforms

• HackTheBox — Hands-on labs for penetration testing and cybersecurity skills.
• Pluralsight — Courses covering cybersecurity, cloud security, and more.
• AWS & Microsoft Azure Certifications — Great for mastering cloud security concepts and industry best practices.

Recommended Books

• The Web Application Hacker’s Handbook — Dafydd Stuttard & Marcus Pinto A must-read on web application security and penetration testing.
• Metasploit: The Penetration Tester’s Guide — David Kennedy, Jim O’Gorman, Devon Kearns & Mati Aharoni
  Practical guidance on using Metasploit for real-world testing.
• Cybersecurity Essentials — Charles J. Brooks
  Clear overview of cybersecurity fundamentals, risk management, and network security.
• Network Security Essentials — William Stallings
  Covers cryptography basics, protocols, and core defense mechanisms.

I highly recommend joining these organizations—they offer excellent networking, training, and resources to help you stay current in cybersecurity.

• Day of Shecurity
• OWASP Bay Area – Monthly meetups posted on https://www.meetup.com/bay-area-owasp/
• WiCyS (Women in Cybersecurity)
• Bay Area Pacific Hackers – Meetups posted on https://www.meetup.com/pacifichackers/
• SANS
• BSidesS.F. (Great for volunteering and networking)