UNF students safeguard campus while launching cybersecurity careers
After getting to work early, grabbing a fresh cup of coffee and logging into the system, Alex Ramudo’s dashboard lights up with alerts.
More than 839 threats flagged for review. Over 10.7 million connection attempts blocked in just four hours.
Each alert represents a potential breach, a phishing attempt or suspicious activity that could compromise the University of North Florida’s network.
With a short sigh, Ramudo clicks into the first incident. It’s going to be another busy day.
What’s happening on his screen isn’t a simulation or classroom lab. It’s real-time cybersecurity defense.
Ramudo is a senior studying information technology at UNF, and he is part of the student-led Security Operations Center (SOC), part of UNF’s front line of defense against cyberattacks that is guided by UNF staff.
Fighting cybercrime
The impact of the SOC is measurable. Each month, the center collects more than 141 million security alerts. In the past six months alone, student analysts have handled more than 32,000 incidents and investigations, nearly 20,000 of them related to phishing attempts, one of the most persistent threats facing the University.
Operating as a live security hub, the SOC employs students like Ramudo who rotate shifts around their class schedules. Open to students of all majors and experience levels, the program places them in part-time roles as security analysts, where they monitor live data, investigate threats and respond to incidents using industry-standard tools from Microsoft, Fortinet and ServiceNow.
“Every day is different,” Ramudo said. “You might be looking at suspicious connections from places they shouldn’t be or responding to phishing attempts. You’re using the same tools professionals use, and you’re learning constantly.”
Suspicious activity gets reported to the SOC, where students begin their investigations. They determine whether alerts are false positives or active threats. That can mean dissecting email headers in suspected phishing attempts, scanning devices for signs of compromise or securing accounts to prevent further access. Some cases resolve in minutes. Others demand deeper analysis and collaboration with Information Technology Services (ITS) security staff across the hall.
Classroom principles such as data integrity, confidentiality and access control are no longer abstract concepts. They guide daily decisions with real consequences.
“You really feel the weight of the work,” Ramudo said. “It’s rewarding knowing you’re helping keep people secure, and it also teaches you patience, discretion and how to make unbiased decisions.”
Mentorship is central to the SOC experience. Students report to Clay Maddox, senior director of cyber infrastructure and information security, and a senior analyst who has been with the program since its launch. ITS security staff regularly step in to guide investigations and turn complex incidents into teachable moments.
“The entire UNF IT team is ready to help and teach you security best practices,” said Cody Copple, another information technology senior graduating this semester. “They walk you through situations and help you understand not just what happened, but why.”
Real world experience
What began in February 2024 with just two students has grown to support nine students this year. Four alumni have already secured full-time cybersecurity positions with organizations such as LSI, Triad Financial Services and Upstart Cyber.
Evan Baker, who earned his information technology degree in 2024 and now works at UNF as a Security Engineer I, credits the SOC with helping prepare him to launch his career.
“The SOC gave me real-world experience with what security looks like in a university and business setting,” Baker said. “I was seeing real activity, real threats and learning how to respond in real time.”
As cyber threats continue to evolve in scale and sophistication, the student-led SOC stands as both a shield for the University and a launchpad for future cybersecurity professionals.