Skip to main content
Home Lab Guide

Build a Home Lab That Gets You Hired

"Tell me about a project you've worked on" is one of the most common interview questions in cybersecurity. This guide gives you a real project to build — and the exact language to describe it.

Stand out from paper-only candidates

Most applicants have certs but no hands-on evidence. A lab changes that.

Answer every "experience" question

Interviewers want proof you've done the work. Your lab is that proof.

Build real muscle memory

The tools you use in your lab are the exact tools you'll use on the job.

Choose Your Path

What You Need

Everything below is free or has a free tier. No expensive hardware required — a laptop or desktop with 16GB RAM is plenty.

VirtualBoxFree

Hypervisor to run virtual machines on your PC or Mac

Windows Server 2022 EvaluationFree (180 days)

The target machine you'll monitor and generate logs from

Ubuntu Server 22.04Free

Linux server for your SIEM installation

Splunk FreeFree (500MB/day)

The industry-standard SIEM tool. 500MB/day is plenty for a home lab

Kali LinuxFree

Attack machine to generate realistic log activity to detect

Important: Only run attacks inside your isolated lab network. Never test tools against systems you don't own or have explicit written permission to test.

Step-by-Step Setup

Create a Host-Only network in VirtualBox settings. This isolates your lab traffic from your home network — important so your attacks stay contained.

Your Resume Bullet

Copy and adapt this. Swap in your specific tools, numbers, and details. Don't use it word-for-word.

Built a home SOC environment in VirtualBox using Splunk SIEM to ingest Windows Event Logs; created detection rules for brute force and lateral movement, then tuned alert thresholds to reduce false positives by [X]% (measure your own before-and-after rate and replace [X] with the real result).

Customize with your actual tools, timeframes, and specific results. Specificity beats generic.

How to Talk About It in Interviews

Click each question to see a sample answer. These are starting points — adapt them to what you actually built.

Ready to put this on your roadmap?

Your personalized roadmap will show you the training resources that pair best with this lab work.