Michael goes from coffee roaster to cyber security analyst

But after changing careers on a whim, he now helps organisations defend against cyber threats as a Security Operations Centre (SOC) Analyst at WhiteRook Cyber.

It's a career change Michael never imagined making, but one that began with a single decision to enrol in TAFE Queensland's Certificate IV in Cyber Security (22603VIC).

"I decided on a whim that I'd like to pivot into the IT industry. I had a lot of friends and family working in IT who really enjoyed what they did, and cyber security had always been something that interested me," Michael said.

When he discovered he could study using Fee-Free TAFE funding, which allows eligible Queenslanders to study priority skill sets and qualifications, providing opportunities to upskill, reskill or start a career in high-demand industries at low or no cost, his decision was easy.

Living close to TAFE Queensland’s South Bank campus at the time, Michael enrolled and quickly discovered a learning environment that combined practical training with industry expertise.

"The best part was definitely the hands-on learning. I really enjoyed the lab work and penetration testing, but just as importantly, I made great friends throughout the course,” he said.

Michael credits TAFE Queensland's teachers with helping him build both the technical knowledge and confidence needed to enter the industry.

"They were always available to answer questions, provide feedback and share learning resources. They also brought real-world industry experience into the classroom, which made a big difference,” he said.

The practical focus of the course proved invaluable as Michael prepared to enter the workforce.

From report writing and presentations through to troubleshooting, teamwork and meeting deadlines, he said every part of the qualification has translated directly into his role as a SOC analyst.

Now working at WhiteRook Cyber, no two days are the same.

As part of a small and highly collaborative team, Michael contributes across incident response, security alert investigations, software patching, security engineering, technical support and cyber threat research.

"Every day is different, which is one of the things I love most about the role," he said.

The transition into industry has reinforced just how relevant his TAFE Queensland training was.

"Learning how to research and troubleshoot has probably been the most valuable skill. Everything we covered during the course has been useful in one way or another," Michael said.

WhiteRook Cyber National Cyber Security Director, William Ulyate, said TAFE Queensland graduates consistently arrive with practical experience, enabling them to contribute sooner.

"Australia has a well-documented cyber skills shortage, and it won't close itself," William said.

"TAFE Queensland's strength is that it produces graduates with practical, hands-on skills rather than purely academic ones."

"When we partner with providers like TAFE Queensland, we get graduates who need less runway before they're delivering value for clients."

William said the company looks beyond technical capabilities when recruiting entry-level cyber security professionals.

"At entry level, we're looking for curiosity, a genuine problem-solving mindset and evidence that someone has gone beyond the minimum," he said.

"Communication matters just as much as technical ability because so much of our work is client-facing."

He believes TAFE Queensland graduates stand out because they have already worked with industry-standard tools and realistic cyber security scenarios.

"They tend to arrive with more practical exposure than graduates from purely academic pathways," William said.

"They also have a clearer understanding of the different career pathways within cyber security, whether that's SOC operations, governance, risk and compliance, or offensive security."

As a growing cyber security consultancy, WhiteRook provides graduates with opportunities to gain experience across multiple disciplines before choosing a specialisation.

"We invest in mentoring, certifications and early client exposure," William said.

"Because we're a smaller organisation, our junior team members gain responsibility earlier, which helps accelerate their development."

For Michael, the opportunity has confirmed that he made the right career choice. He encourages anyone considering cyber security to take the first step, regardless of their background.

"You don't need a technical background to get started. I didn't have any IT experience before studying – just an interest in cyber security and a willingness to learn," he said.

"Cyber security is such a broad industry that there's genuinely something for everyone. If you're interested, give it a go."

William believes partnerships between industry and education providers such as TAFE Queensland are critical to addressing Australia's cyber security skills shortage.

"We'd much rather invest in local talent through partnerships with TAFE Queensland than compete for the same shrinking pool of experienced professionals," he said.

"It's better for graduates, better for employers and ultimately better for Australia's cyber security capability."