Rising Above: Maria’s Journey into Cybersecurity and Aviation

Cybersecurity doesn’t exist in a vacuum—especially when it intersects with industries where safety, reliability, and human lives are on the line. Aviation is one of those rare domains where failure is not an option, and the mindset required to secure these systems closely mirrors the principles that keep aircraft safely in the sky.

In this interview, we sit down with Maria (@maria.cybersec) to explore her journey into cybersecurity, her deep connection to aviation, and how the two worlds overlap more than most people realize. From systems thinking and sensor fusion to persistence, curiosity, and community, Maria shares thoughtful insights shaped by nearly a decade in aviation and a deep passion for cybersecurity.

1. My Journey into Cybersecurity & Aviation:

How did your interest in cybersecurity begin, and what led you to work in or alongside the aviation industry?

I've always been interested in tech for as long as I can remember. Growing up, I spent weekends playing the Super Nintendo with my dad, then got my first computer with Windows XP and was hooked. In high school, I was obsessed with Minecraft and would play with my friends every single afternoon. I've always been that person who needs to understand why things work the way they do; whether it's a video game, a flight system, or a network architecture.

Aviation came into my life when I started flying, and I fell in love with everything about it. I've been working in aviation for almost 10 years now, and my entire life has felt like it's been up in the air. Later on, I also discovered skydiving, which opened up a whole new dimension of understanding systems under pressure and trusting sensor fusion to keep you alive.

But one day, I just woke up and thought: I love cybersecurity. I want to learn everything, be able to understand every system, every single electronic device, and know how to get inside and protect it from the inside out. I wanted to break things to build them again. That realization led me to start studying cybersecurity engineering in college, and the more I learned about the field, the more I fell down the rabbit hole. I could genuinely spend hours listening to people talk about detection logic, threat hunting, or defensive architecture without getting bored.

What I love about cybersecurity is that no one cares who you are or what you look like; what matters is what you bring to the industry and the skills you've developed. That really resonated with me.

2. Cybersecurity in Aviation:

What makes cybersecurity in aviation unique compared to other industries? Are there specific challenges, risks, or responsibilities that stand out when protecting aviation systems?

Aviation and cybersecurity have so much in common that it almost felt natural to transition between them. Both fields are built on the same core principles: defense in depth, proactive threat detection, and learning from failures before they become catastrophic.

In aviation, we use concepts like black box thinking, analyzing what went wrong after an incident to prevent it from happening again. We rely on sensor fusion, where multiple data sources are combined to create a reliable picture of what's happening, even when individual sensors fail. We design systems with failsafes and redundancy because a single point of failure isn't an option when lives are on the line.

These same principles apply directly to cybersecurity, especially in SOC operations and detection engineering. You're correlating data from multiple sources (logs, network traffic, endpoint telemetry) to detect threats. You're analyzing why detections fail and building better rules. You're designing defenses assuming that some layer will be breached, so you need backups and containment strategies.

What makes aviation unique is the stakes. When you're securing systems that control aircraft, air traffic, or flight operations, there's zero tolerance for failure. It's taught me to think critically about risk, to never assume a system is secure enough, and to always be looking for the edge cases that could lead to compromise.

3. Essential Skills for Aviation Security:

In your opinion, what skills or qualities are most important for cybersecurity professionals working in highly regulated and safety-critical environments like aviation?

I think the most important skill is systems thinking; the ability to see how different components interact and where vulnerabilities might emerge from those interactions. In aviation, a failure is rarely caused by one thing going wrong: it's usually a chain of small issues that turn into something catastrophic. The same is true in cybersecurity. You need to understand not just individual technologies, but how they work together and where the gaps are.

Another critical skill is pattern recognition. In both aviation and cybersecurity, you're constantly looking for anomalies, something that doesn't fit the expected behavior. Whether it's a suspicious flight path or unusual network traffic, being able to notice when something is off is essential for catching threats early.

Persistence is also key. I've learned through both flying and studying cyber that you have to try, fail, and try again hundreds of times before you get it right. Persistence beats skill in the end, but ideally, you have both. I also think having patience with the learning process is important. I have no rush because I like to learn things properly and build a good foundation.

Finally, I'd say curiosity and a love for learning. The threat landscape is always evolving, and if you're not constantly learning, you're falling behind. I genuinely enjoy the process of understanding how an attack works, why a detection failed, and how to build a better defense. That curiosity is what keeps me going.

4. Women in Cybersecurity & Aviation:

Cybersecurity and aviation have both traditionally been male-dominated fields. From your experience, what steps can organizations take to better attract, support, and retain women in cybersecurity roles within aviation?

Both aviation and cybersecurity have made progress in recent years, and honestly, one of the things I love most about cybersecurity is that it genuinely doesn't matter who you are, what matters is what you can do and what you bring to the table. My experience has been really positive in that sense. People in this field treat you with respect based on your skills and knowledge, not your gender, and that's incredibly empowering.

That said, I do think it's important to encourage more women to enter cybersecurity because representation matters. When I started, I found so much inspiration from women who were sharing their journeys on Instagram, speaking at conferences, and creating technical content. Seeing people who look like you doing the work you want to do makes it feel possible. There's something really powerful about women uniting in STEM and supporting each other through the journey.

I think organizations can help by creating visibility and mentorship opportunities. Amplify the voices of women already in the field, create spaces where people can connect and learn from each other, and invest in hands-on learning opportunities like conferences, workshops, and community events. Some of the best experiences I've had came from attending events and meeting people who were willing to share their knowledge and experiences.

Another important factor is fostering a culture of respect and professionalism. If you're smart enough to be in this field, you should be smart enough to treat everyone with respect, regardless of gender. Emotional maturity goes a long way in creating an environment where everyone can thrive.

I do believe the industry is moving in the right direction. More women are entering cybersecurity every day, and the community has been incredibly welcoming. Seeing women unite and support each other in STEM is not only inspiring but essential for the future of the industry.

5. Learning & Career Resources:

Are there any courses, certifications, conferences, or resources you've found particularly helpful for building a career in cybersecurity, especially in the aviation or transportation sector?

Absolutely. My journey has been entirely self-taught, so I've relied heavily on a mix of hands-on practice, community engagement, and learning from people who have real experience in the field.

One of my favorite resources is Hack The Box Academy. It's where I spend a lot of my time doing hands-on labs and practicing real-world scenarios. The platform is incredible for building practical skills, and the HTB community on Discord is amazing! there are always people sharing knowledge, helping each other solve challenges, and discussing techniques. I'm also part of communities like Simply Cyber and Blue Team Village, where the collaborative learning environment has been invaluable.

I've also read books by authors like David Kennedy, Peter Kim, Mati Aharoni, and Devon Kearns, which helped me build a strong technical foundation and understand different approaches to offensive and defensive security. These resources gave me insight into methodologies that I apply in my own projects.

In terms of online content, I watch a lot of YouTube channels. Some of my favorites are David Bombal, John Hammond, Professor Messer, InsiderPhD, HackerSploit, Computerphile, and NetworkChuck. They break down complex topics in really accessible ways, and I've learned so much from their technical deep dives and career advice. I also follow creators like Naham Sec and 13 Cubed, who share practical tips and real-world experiences that you won't find in textbooks.

I've made it a habit to fill my daily life with cybersecurity news and content. Whether it's between flights or at home on a day off I try to immerse myself in the field as much as possible. The more you consume, the more patterns you start to recognize, and the faster you can connect concepts across different areas of security.

Conferences have also been a huge part of my learning process. Attending events and maker spaces around the world has given me the chance to meet people, ask questions, and learn from their experiences. There's something about talking to someone face-to-face who's been in the industry for years and can share insights you won't find in a book or video. Honestly, one of the most important things I've learned is to listen to people who have experience in the field. Seniors know what they're talking about because they've been through it, and while it's important to carve your own path, I find learning from those who have that experience extremely important.

Building in public, sharing my projects, my learning process, and my failures has also been one of the best decisions I've made. It keeps me accountable, and it's led to so many great conversations with people who are on similar journeys. The cybersecurity community is incredibly welcoming, and I'm grateful to be part of it.

Maria’s journey highlights something powerful: whether you’re securing aircraft systems or defending networks, the principles remain the same—anticipate failure, design for resilience, and never stop learning. Her perspective at the crossroads of aviation and cybersecurity is a reminder that the best defenders are systems thinkers, lifelong learners, and community builders.

If you’re interested in cybersecurity, aviation, or building a career where precision and responsibility truly matter, Maria’s story is proof that curiosity, persistence, and passion can take you incredibly far.

Maria  
📸 Instagram: @maria.cybersec
🌐 Website: mariacybersec.com