Starting a Cybersecurity Career

Comprehensive Malawian Guide

Enoch KM Singano      Published on 5 September 2025 | 9:45 AM

🌍🚀 My cybersecurity journey began in 2018, when I was a first-year student at the Malawi Polytechnic. Back then, IT & Cybersecurity wasn’t as popular as it is today, and finding local role models in the field was almost impossible. So, I became my own mentor, spending countless hours on YouTube tutorials, DEFCON talks, books, and global cyber communities to build my knowledge. The road wasn’t easy. Without anyone to encourage me, there were times it felt like I was walking this path alone. But everything shifted when I finally crossed paths with someone who believed in me and helped me take the next step forward.

If I could restart my cybersecurity journey, I’d take a more strategic path. This guide shares the lessons and resources I wish I had so your road can be smoother. 🚀

Your First Moves: Build Knowledge and Get Hands-On

1. Learn the Fundamentals 📚

Start with the basics: networking, operating systems, and security principles. Resources like intro courses, free platforms, or community learnings are your BFFs here.



2. Roadmap Your Learning 🗺️

Head over to roadmap.sh Cyber-Security roadmap, a community-built guide pointing you toward relevant skills, tools, and progression paths.



3. Level Up with TryHackMe 💻

Sign up at TryHackMe, a hands-on, browser-based platform offering labs, Capture-the-Flag (CTF) challenges, and well structured learning paths for beginners. Look for starter pathways like “Junior Pen-Tester” or “Hackers Learning Path”; there’s even a GitHub “Zero To Hero” setup guide to help automate your learning environment.

4. Dive into Practical Labs & Tools 🛠️

Once comfortable, challenge yourself with real rooms on HackTheBox and Vulnhub, or learn to use essential tools like Nmap or exploit vulnerabilities like Zerologon on TryHackMe.

🇲🇼 Localize Your Journey: Malawi-Focused Tips

This is your secret weapon. General advice is good, but local context makes a guide essential.

1. Understanding the Legal Framework 📜
As a professional, you'll need to know the laws that govern cybersecurity in Malawi. They define your rights, responsibilities, and the ethical boundaries of your work. Some of the cyber laws in Malawi include:

• The Electronic Transactions and Cyber Security Act (2016): This is the foundational law that criminalizes activities like hacking, illegal interception of data, and cyber fraud.


• The Data Protection Act (2024): This landmark law is crucial for anyone handling personal information. It sets out the rules for how data is collected, processed, and stored, and designates the Malawi Communications Regulatory Authority (MACRA) as the data protection authority. Understanding this act is essential for any modern cybersecurity role.

2. Join Local Communities
Networking is vital. Connect with those already in the field to find mentorship, job opportunities, and local insights.

• ICT Association of Malawi (ICTAM):
  This is the leading professional body for ICT experts. Joining their events and forums will connect you with a vast network of experienced professionals.
• Malawi Computer Emergency Response Team (mwCERT): As a national body, mwCERT plays a key role in coordinating cybersecurity incidents. Following them will keep you updated on national cyber threats and initiatives, such as their recent nationwide cyber drills aimed at building capacity in academic institutions like the Malawi University of Science and Technology (MUST).
• University Clubs: Look for clubs at institutions like the Malawi University of Science and Technology (MUST), Malawi University of Business And Applied Sciences (MUBAS) and the University of Malawi (UNIMA). They often host meetups, workshops, hackathons and competitions that are perfect for meeting peers and gaining practical experience.

3. Volunteer and Build a Portfolio 💼
Practical experience is the most valuable asset on your CV.

• Offer cybersecurity support to a local NGO or small business. For example, you could conduct a simple security audit for their website or offer to run a phishing awareness campaign for their staff.
• Contribute to local projects: Look for open-source projects or local tech initiatives where you can apply your skills. Real-world impact builds both your skills and your reputation.
• Start your own blog: Like this very article you're reading, creating content is an excellent way to demonstrate your expertise and build a personal brand.

🎯 Summary Flow to Get Started

• 1. Set strong foundations: networking, OS, security concepts
• 2. Map your learning: use roadmap.sh to set goals
• 3. Practice daily: TryHackMe is your playground.
• 4. Localize your journey: connect, volunteer, build real projects
• 5. Grow & specialize: pursue certifications or advanced paths when ready
• 6. Pro Tip: Dont try to master everything at once. Pick one path and commit 2-3 hours to it per week.

Final Vibe

Starting your cybersecurity career in Malawi isn’t just a personal quest—it’s a national mission. With free resources like TryHackMe and roadmap.sh on your side, plus a rising demand both locally and globally, you're in the driver’s seat. Keep it interactive, keep it consistent, and lean into your unique Malawian perspective. You’ve got everything you need to go from curious to certified. Need help drafting your roadmap or picking your first TryHackMe path? I’ve got you.

References & Resources

• My Favourite Hacking Books
• TryHackMe
• TryHackTheBox
• RoadMap
• MW National Cybersecurity Strategy
• Malawi Cybersecurity Act 2016
• Data Protection Act of Malawi