From Capture the Flag to Cyber Engineer

Amaan Abbas is a Cybersecurity major at George Mason University (B.S., May 2028) and incoming M.S. in Digital Forensics (December 2028). He completed the CCI Project-Based Learning Program with CACI in Fall 2025 and is participating in CACI’s 2026 Summer Program.

What made you interested in this project, and what were you working on?

I first learned about CCI and its opportunities about a month before applying to the CACI x CCI internship. Before that, I honestly didn’t know opportunities like this existed. At the time, I was participating in Capture the Flag (CTF) competitions through Mason and Mason Competitive Cyber (Mason CC) and building skills in Linux, cybersecurity, and digital forensics.

A friend, Eshaan Varnasi, shared the opportunity with me, and it immediately stood out because it aligned with the kind of hands-on work I was already pursuing. What I appreciated most about the CCI and CACI process was the focus on real skills. My experience with TryHackMe labs, CTFs, and self-directed learning was valued.

During the interview, I was given a CTF-style challenge and asked to write a report, which made the process feel directly connected to the type of cybersecurity work I enjoy.

What’s something new you learned or got to try during this experience?

This internship was my first time working in a professional cybersecurity environment, and it opened a lot of doors. I learned about teamwork, professionalism, communication, and the importance of documentation.

My manager, Louis Ruffino, gave me the freedom to build my own challenges, which allowed me to learn in a very hands-on way. I also gained experience with tools and technologies like Docker, memory forensics, Volatility, AWS, Metasploit, Event Viewer, and Autopsy.

The most valuable part wasn’t just learning these tools—it was applying them in real projects and seeing how they’re used in the field.

Was there a moment where you felt challenged? What did you do to figure it out?

One of the biggest challenges was realizing this was more than a typical school project. I had to manage weekly meetings, submit timesheets, and keep up with sprint goals. Since much of the work was remote and independent, I had to become more disciplined with my time and hold myself accountable. Using a calendar and Todoist helped me stay organized.

I also dealt with imposter syndrome and worried about making mistakes. Over time, I learned that struggling through problems is one of the best ways to improve. Cybersecurity is a field where you learn by doing—testing things, breaking them, fixing them, and asking questions.

What was it like working with a real employer on a cybersecurity project?

Working with a real employer showed me how valuable hands-on experience really is. This experience helped me understand how cybersecurity work is done in the real world—from using industry tools to recognizing the importance of clear communication and documentation.

It reinforced my belief that real-world opportunities teach you things that classroom learning alone cannot.

How has this experience influenced what you want to do next in your career?

At first, I thought opportunities like this mainly provided financial support, but I quickly realized they offer much more. CCI helped me build connections, grow professionally, and strengthen my passion for cybersecurity.

Through other CCI experiences, like Cyber Fusion—where my team won—I was able to meet recruiters and connect with others in the field. Because of these experiences, I plan to pursue a master’s degree in digital forensics (DFOR) at George Mason University.

I am currently interning at CACI as a Cyber Engineer, where I continue to learn something new every week. I will also serve as treasurer of MasonCC for the 2026–2027 academic year.

Outside of cybersecurity:

I enjoy playing soccer, going to the gym, spending time with friends, hiking, trying new foods, traveling, and learning about the stock market.

Related Content