THE TEST THAT WAS SUPPOSED TO FAIL The mad genius in my life is not a person. It is a habit, and it arrived by accident on a Tuesday. I should explain what I was doing there at all. I am forty-two. I taught school for twelve years in China and came back to Chicago when the market for foreign teachers collapsed and my job disappeared along with everyone else's. I became an insurance agent, which is not a creative profession, and I found something inside it that would not let me go. The industry runs on documents that prove things. Certificates, policies, customer records. It runs on data that would seriously harm people if it leaked. And I noticed that the systems moving that data around had never been examined by anyone. Not audited badly. Not audited at all. They were held together by the assumption that nobody would ever try. So I taught myself to build the things I thought should exist. Nobody asked me to. I was not paid for it. I was, in the most literal sense, a man in his forties learning to write software at night because a problem had annoyed him. One of the things I built was a scanner. Every night it checks the system's dependencies and container images against public vulnerability databases and tells me what is newly broken. Its first live run found two real CVEs in a production gateway, one of them a critical authentication bypass. I patched them. I felt clever. Then I did the thing that turned out to matter, and I want to be honest that it was not brilliance. It was suspicion. I wrote a second set of tests. Not tests that check whether the system works. Tests that try to reach things they should not be able to reach. Tests written to fail. If one of them ever passes, something is wrong. A vendor pushed a security update. Good. Security updates are good. That is the entire point of them. And one of my exposure tests started passing. Here is what a reasonable person concludes at that moment, and I concluded it too: my test is broken. Obviously it is. The vendor is a real company with real security engineers and a budget and a QA department. I am one man with a certificate in progress and a three-year-old asleep in the next room. Between their patch and my test, the overwhelming probability is that I am the one who made the mistake. I spent most of a weekend proving myself right about being wrong. I was not wrong. Their patch had closed the vulnerability it was written to close, and in doing so had permanently removed an unrelated access control. A different door, in a different wall, quietly taken off its hinges by the people who came to fix the window. Every dashboard I owned was green. The system was measurably less safe than before the security update, and the security update was the reason. I wrote a guardrail of my own to replace what they had removed. That is what a mad genius looks like to me, and it is deflating, because it is not genius at all. It is the willingness to write a test that assumes the expert is wrong. Everything downstream of that is ordinary work. Reading a changelog line by line is boring. Building a compensating control is boring. The unconventional part happened before any of it, in the decision to spend a weekend on the possibility that a real company's real engineers had made a real mistake, when the far likelier story was that I was an amateur who had misconfigured something. The world is full of people who can execute. It is much shorter of people willing to look stupid on the off chance that everyone else is. I think about this with my sons, who are three years old and three months old. I write children's books for them under a pen name, small stories where a boy called Ladik asks why. Why do we need to sleep. Ladik is the diminutive of Vladimir, which is my name, and the joke of the series is that the questions in those books are the ones my son actually asks, at the precise moment I most want him to stop asking. I hope he never stops. The discipline I have ended up in is professional not-stopping-asking. A green light is a claim. A vendor is a hypothesis. A tool reporting success is making an assertion, and the only thing separating an assertion from a fact is a test somebody bothered to write in the hope that it would fail. That is the mad part. Not the brilliance. The bothering.

Every night my family prays the Lord's Prayer together in Old Church Slavonic. My sons are three years and three months old. Neither understands a word of it yet, and the younger one mostly sleeps through it. I do it anyway, because my grandparents did exactly this, and because it is the one thing I can hand down that costs nothing and cannot be taken. That is what faith has been in my life. Not a position I argued myself into. A practice I was handed, and have decided to keep handing on. I grew up Rusyn, in the Carpathians, in a tradition that has survived without a state, without funding, and mostly without attention. My grandparents had a nighttime ritual: they prayed together as they prepared for sleep. I remember it the way a child remembers weather. It was simply what happened at that hour. Only much later did I understand I had been watching something being kept alive. There is a cliche that a family that prays together stays together. I have come to think it is true, though not for the reason people usually mean. It is not magic. It is that a family which does one thing together every single night has a floor underneath it that does not depend on the day having gone well. Faith has done two specific things for me. In hard times I have prayed and handed the thing over. When my teaching position in China was eliminated along with every other foreign teacher's, twelve years of work ending for reasons that had nothing to do with me, I did not have a plan. I had prayer, and the decision to trust I would be carried through it rather than around it. I was. And in the frightening times that are supposed to be joyful. Both times my wife was pregnant I prayed for her and for the child. It is the least sophisticated prayer there is and the most sincere I have ever managed. Both boys arrived healthy. I know this is not a transaction, and that other men pray the same words and are not answered. I am simply grateful. I should be honest about practice. I have no church community here. Mine is in the Carpathians. Travel is hard with a newborn and very little money. But something happened three months ago. My second son was born in a Chicago hospital, and when I stepped outside I saw a sign in old Cyrillic script across the street. It was a cathedral, over a hundred years old, built by my own people when they first arrived in this country. I had not known it existed. I found it by accident, in the week my American son was born, standing outside the building where he had just been. It felt like a homecoming. Like home calling me back. As for my career, I am moving into cybersecurity, which is a field about protecting what people entrust to you. I do not think that is unconnected. My entire inheritance is people who kept something alive because someone handed it to them and they refused to be the one who dropped it. That is the work. It has always been the work.

Three books, and none of them agree with each other. Notes from Underground was the first book that frightened me, because I recognised the narrator. Dostoevsky's man is intelligent, sees everything clearly, and is paralysed precisely because of it. He can build an argument for and against every action, so he takes none, and he resents the people who simply act. I read it at an age when I thought clear-sightedness was the same thing as capability. It is not. That book taught me that analysis without action is not sophistication. It is a hiding place, and a comfortable one. I have thought about it every time I nearly talked myself out of something. Emigrating. Leaving teaching. Starting a technical field at forty-one, which every reasonable analysis said was late. Darwin's Cathedral is the opposite kind of book. David Sloan Wilson looks at religion, which educated people usually treat as either true or foolish, and asks a third question: what does it do? He treats belief systems as functional structures that persist because the groups holding them survive better. Whatever you make of the argument, the method rearranged how I read everything. It taught me to ask what a thing is for before asking whether it is correct. That has become the most useful question I own. When I look at a badly designed system now, at work or in a curriculum, I do not start with what is wrong with it. I start with what it was doing for someone, because things persist for reasons. Then The Old Man and the Sea, which I avoided for years because it is assigned to schoolchildren and I assumed it was simple. It is simple, and that is the point. An old man catches the largest fish of his life and the sharks eat it on the way home, and he arrives with a skeleton. Nothing is redeemed. He does not get the fish. What Hemingway insists on is that the fight was real and the man was not diminished by losing it. I came back to that book after my teaching position in China was eliminated along with every other foreign teacher's. Twelve years of work ended for reasons that had nothing to do with me. I had built something and the sharks got it. The book offers no comfort about that. It offers something more useful, which is that the skeleton is still evidence of the fish. Those three shaped my goals in a way I only see looking backward. The first taught me to distrust my own cleverness when it argues for inaction. The second taught me to ask what a system is for. The third taught me that effort and outcome are separate accounts, and I control only one of them. I now work in security, where the entire discipline is asking what a system is actually doing rather than what it claims, acting on incomplete information instead of waiting for certainty, and accepting that you can do everything right and still lose the fish. I did not plan that. The books got there first.

My goal is narrow and dated: finish my Cybersecurity and IT certificate at Wright College in December 2026, hold CompTIA Security+ by early 2027, and be employed in a security engineering or SOC analyst role by mid-2027. Here is the plan, the money, and the parts that could go wrong. RESOURCES I ALREADY HAVE. A 4.0 GPA and coursework on schedule. Four completed certifications including the IBM Cybersecurity Analyst professional certificate. A portfolio built before I enrolled: a vulnerability scanning pipeline whose first live run found a critical authentication bypass in a production gateway, an approval gate with an append-only audit ledger, and a GLBA infrastructure assessment producing eighteen severity-scored findings. Twenty-five hours a week at a family insurance firm, eight of them paid, the rest spent maintaining their internal systems. That unpaid time is not charity; it is my lab. RESOURCES I NEED, WITH COSTS. CompTIA Security+ exam voucher, roughly $400. A CySA+ or Network+ voucher as the follow-on, roughly $400. Study materials, $100 to $200 if I do not use library and free resources, which I will. Reliable childcare during study blocks, which is the largest line and the hardest to price, because it is currently absorbed by my wife at home with our three-month-old. Transport to exam centres and interviews, perhaps $150. Total cash requirement: approximately $1,100 to $1,300. THE BUDGET IT SITS INSIDE. Our household of four runs on about $500 a month of earned income, supplemented by SNAP and TANF. There is no line in that budget from which $1,100 can be taken. This is the entire problem. It is not that the goal is expensive. It is that the margin is zero, so any cost is a blocker regardless of size. TIMELINE. August to December 2026: complete coursework, study for Security+ in parallel rather than after, because sequential study adds three months I cannot afford. December: certificate complete. January 2027: sit Security+. February onward: apply, using the certificate and the portfolio together. THE ANGLES I HAVE THOUGHT ABOUT. Applying for WIOA training funds through Illinois workNet, which can cover certification exam costs for income-eligible adults; this is the primary path and this scholarship is the backup. Applying for CCAP childcare assistance, since Illinois counts college enrolment as a qualifying activity, which converts money into the thing I actually lack, which is hours. Sitting Security+ before the certificate finishes if study goes well, to shorten the gap to employment. WHAT HAPPENS IF NOTHING ARRIVES. I work more paid hours, sit the exam later, and reach the same place perhaps six months slower. That is the honest answer. This is not a plan that dies without funding. It is a plan that runs late, and at forty-two supporting three people, late has a cost that compounds. I have already done the part that cannot be bought. I taught myself the field before anyone enrolled me in it. What I am asking for is the four hundred dollars that stands between finished coursework and a credential an employer can verify.

My plan for the future is unglamorous and I can state it in one sentence: finish my Cybersecurity and IT certificate at Wright College in December 2026, pass CompTIA Security+, and work in security engineering. What makes it worth telling is how I got here, because I did not choose this field so much as walk into it. I came to the United States from Slovakia at thirteen with my parents. Neither of them went to college, so when I applied there was nobody at home to ask what any of it meant. I got through, taught for three years in Slovakia, earned a master's here, and then spent twelve years in China as a teacher, program director and curriculum coordinator. In 2025 the foreign-teaching market contracted and my position was eliminated along with every other foreign teacher's. I came back to Chicago with my wife and son, and our second son was born here three months ago. I became a licensed insurance agent, which was meant to be the stable part. Instead it showed me the work I actually want. That industry runs on customer records that would seriously harm people if they leaked, and I found that the systems handling them had never been examined by anyone. They were protected mainly by the assumption that nobody would try. So I taught myself to build the controls I thought should exist: an access-control architecture, an append-only audit ledger, a platform designed so it never stores a credential. I built a nightly vulnerability scanner, and its first live run found two real CVEs in a production gateway, one a critical authentication bypass. The moment that decided things came afterward. A vendor's security patch went in and one of my exposure tests started passing when it should have failed. The patch had closed the CVE and quietly removed an unrelated access control. My first assumption was that my own test was broken, because they are a real company with real engineers and I am one person with a certificate in progress. It took reading their changelog line by line to accept they were wrong. That is the job. A tool reporting success is making a claim, not stating a fact, and the only thing separating the two is a test written to fail. I enrolled at Wright because I had reached the limit of what I could teach myself. I carry a 4.0, and I do the coursework in the hours a newborn leaves behind. Here is what the scholarship changes. My wife is at home with the baby, so there is no second income. We live on about five hundred dollars a month with SNAP and TANF covering part of the gap. The certification exams that make my coursework legible to an employer cost money I do not have, and every hour I spend earning that money is an hour not spent finishing on time. I am not asking for a head start. I have already done the work without funding. I am asking for the margin to finish it on schedule.

I came to calculus late, and badly. I was a political science undergraduate, then a teacher for many years. Mathematics was something I had passed and forgotten. When I started building security systems in my forties, I did not expect to meet it again. I did almost immediately, and not in the form I had been taught. Here is where it actually showed up. I built a nightly scanner that checks a production system for vulnerabilities. The first thing I learned is that a security system does not care much about a value. It cares about how that value is changing. A server at 60% memory is fine. A server that went from 20% to 60% in four minutes is not, even though the number is still below the alarm threshold. The static reading tells you almost nothing. The rate of change tells you everything. That is a derivative, and I was computing one before I recognised it as one. The same thing happened when I built a monitor for deployed code drifting away from version control. The question is never whether the two differ. Of course they differ. The question is how fast the gap is widening, and whether it is accelerating. Its first live run caught a repository thirty-two days stale with a hundred and seventy-one unmerged commits. What made that alarming was not the number. It was the slope. Calculus is the mathematics of change, and nearly everything worth monitoring in a technical system is a change rather than a state. The second half is accumulation. Any system with a queue, a budget, a rate limit or a log is integrating something over time. Rate multiplied by duration, summed. When I reason about how much a process will have written by morning, or how a slow leak becomes an outage in eleven hours, I am doing integration badly in my head. Doing it properly is better. But I think the deeper reason calculus matters in STEM is neither of those. Calculus is where you first meet the idea that you can say something rigorous about a quantity you cannot measure directly. There is no such thing as an instantaneous rate, because an instant has no interval. Calculus gets there anyway, by shrinking the interval and proving the answer converges. That habit of mind is the whole of technical work. You almost never have the measurement you actually want. You have a proxy, a sample, an approximation, and the real discipline is knowing how wrong it might be and by how much. I did not learn that from a security textbook. It was already sitting inside a subject I had dismissed as an obstacle to get past. I am forty-two, finishing a cybersecurity certificate, and I am going back to the mathematics I skimmed the first time. Not because a course requires it. Because I keep meeting it in the work, wearing different clothes, and I would rather recognise it on sight.

I am wary of the word selfless, because most of what I do that looks like it has a reason underneath. Here is the most honest example I have. For twelve years I taught in China, and the part of the job that mattered most was never in my contract. Almost all of my students intended to study abroad, into a system nobody in their families had entered. They did not know what a foreign university wanted, what a major meant in practice, or which schools would suit them. So I became the person they asked. I counselled them on where to apply and why. I explained the difference between programs that looked identical on paper. I talked them out of majors chosen for status and toward ones they actually wanted. I wrote their recommendation letters, which is unglamorous and takes hours, and I wrote real ones rather than templates, because a template is worse than nothing. None of that was paid or measured. I did it because I came to the United States at thirteen, my parents had never been to college, and when I applied there was nobody to ask. I know exactly what that absence feels like. Being that person for other people's children was the closest I could get to fixing it retroactively. The second example is smaller and harder to explain. I volunteer with ZRIS translating documents. Rusyn is a Carpathian minority language with no country behind it, no funded schooling, and a falling number of speakers. Translation is the least visible work there is: material that exists in one language and would otherwise stay locked there. Nobody thanks you for it, and most of the people it will serve have not been born yet. I do it at midnight, because there is no other time. I have a three-year-old and a three-month-old and I carry a full course load. The third is not about strangers at all. Of the twenty-five hours a week I work at my family's insurance firm, roughly eight are paid. The rest goes into building and maintaining their internal systems and security infrastructure, and nobody is billed for it. It needs doing and I am the only person there who can do it. I want to be precise about what those three have in common, because it is not virtue. Each is a case where something valuable was going to be lost by default, and I happened to be the only person positioned to prevent it. A student with no one to ask. A language with no institution behind it. A small business with nobody who understands its systems. I am not unusually generous. I am unusually unwilling to watch something disappear when I could have stopped it. That is a smaller claim than selflessness. I think it is the true one.

The sock went into the machine. It did not come out. Vlado knew this was not a crisis. He was forty-two. He had crossed an ocean twice, buried a career, learned two alphabets and a tonal language, and once spent a night in a Zhengzhou hospital corridor holding his wife's hand while the fluorescent tube above them buzzed like a trapped fly. He understood the difference between a problem and an inconvenience. Still. The sock. It was grey with a red heel. Its partner lay on the radiator, limp, one of a pair now permanently unpaired, and Vlado found he could not stop looking at it. "It's in the machine," his wife said, not looking up. "They're always in the machine." "I checked the machine." "Check it again." He checked it again. He ran his hand around the rubber lip of the door, into the fold where lint gathered in grey felt continents. He found a hair clip. He found a small plastic dinosaur, boiled to a softer green. He did not find the sock. His son, who was three, came in carrying a spoon for reasons he was not willing to explain. "Tato, what are you doing?" "Looking for a sock." "Why?" It was a reasonable question and Vlado did not have a reasonable answer. He had eleven other pairs. The sock had cost, at most, a dollar. If he never saw it again the material conditions of his life would be entirely unchanged. "Because it should be here," he said. His son considered this with the gravity of a small judge, put the spoon on the floor, and left. Vlado sat down on the tile. The baby was asleep in the next room, which meant the apartment had entered the fragile silence a family of four gets for perhaps forty minutes at a time. He was spending his forty minutes on the floor of a laundry alcove, looking at a hole in the world where a sock had been. He thought: I have lost a country. Twice, if you count the one I was born in and the one I built. I have lost a job, and a language I was fluent in and am now merely good at, and a version of myself who was going to be a professor. I did not sit on the floor for any of those. The sock was the size of his hand. It was the only thing small enough to grieve. He got up. He put the surviving sock back in the drawer, alone, because throwing it away felt like agreeing to something. Three weeks later it turned up inside a fitted sheet, static-clung to the corner, exactly where it had been the whole time. He did not tell anyone. He paired them, put them away, and stood there a moment longer than he needed to.

I work about twenty-five hours a week at Chicago Insurance and Financial Services while carrying a full-time course load at Wright College, where I have a 4.0. I want to be exact about those hours, because the shape of them matters. Roughly eight of the twenty-five are paid, at fifteen dollars an hour, which comes to about five hundred dollars a month. The rest is unpaid. I build and maintain the firm's internal systems and automation infrastructure, and nobody is billed for that time. I do it because the work needs doing and I am the only person there who can do it. It is also, not coincidentally, how I learned the field I am now studying. My wife is at home with our three-month-old son. We also have a three-year-old. SNAP and TANF cover part of what five hundred dollars does not. Every hour I work is an hour I am not studying, every hour I study is an hour I am not earning, and the unpaid hours compete with both. There is no version of the week where all three get what they need. I have done a harder version of this before, and that is why I know this one is survivable. While I was earning my master's at Northeastern Illinois University, I drove trucks full time. I was up at five to start the route, drove all day, went straight to campus for evening classes, and got home some nights at ten. Then I did the reading. I did not eat properly for two years. There was no time to cook and no money to buy my way out of it, so I lived on sandwiches and whatever I could assemble between the truck and the classroom. I was tired in a way that stopped feeling like an event and became a baseline. What got me through was not willpower, which runs out. It was learning to treat time as the scarce resource it actually is and to schedule against that, not against how I felt. I stopped waiting for good conditions, because good conditions were not coming. I read in the cab during loading. I planned the week on Sunday and refused to renegotiate it on Wednesday, because exhausted-me was a bad planner. The most useful thing I learned is that most of what fills a week does not need to be done well. Identifying the few things that do, and protecting only those, is what turns an impossible schedule into a merely difficult one. I finished that degree. I am older now and the stakes are higher, because three people depend on the outcome. But I have solved this problem before, at five in the morning, in a truck.

My family's story is about a language that is losing. We are Rusyn. It is a Carpathian minority language that has never had a country of its own, no army behind it and no ministry of education, and it is disappearing at the ordinary rate languages disappear when nothing institutional holds them up. That is what my parents spoke to me in Slovakia, and it is what I speak to my sons in Chicago. My parents brought me to the United States when I was thirteen. Neither of them had been to college. They had no map for the country and none for the system, and what they gave me instead was a working assumption I did not recognise as a belief until much later: nothing you value survives on its own. Someone has to keep it. If nobody does, it goes quietly, and afterwards people call it inevitable. That assumption has organised almost every serious decision I have made. It is why I taught. I spent twelve years in China, first in a Zhengzhou classroom, then as a program director, then as a curriculum coordinator. Most of my students were preparing to enter a system nobody in their families had ever entered. I advised them through it, wrote their letters, and told them which parts were normal. I was, for other people's children, the person my parents could not be for me. It is why I volunteer with ZRIS, translating documents so the written Rusyn record stays readable by somebody. It is why I published the first book of a children's series. And it is why my three-year-old and my three-month-old are being raised in a language they will never see on a road sign. It turns out it is also why I ended up in cybersecurity, which surprised me more than it surprised anyone else. When my position in China was eliminated along with every other foreign teacher's, we came back and I became a licensed insurance agent. That industry runs on records that would seriously harm people if they leaked. What I found was that the systems holding them had never been examined by anyone, and were protected mostly by the assumption that nobody would try. That is the same failure. Something valuable, left unattended, on the assumption it will simply persist. So I taught myself to build the controls. An access-control architecture. An append-only audit ledger. A platform designed so it never stores a credential. I built a nightly vulnerability scanner, and its first live run found a critical authentication bypass in a production system. Later a vendor's security patch silently removed an unrelated access control, and my own test caught it only because I had written that test assuming the vendor might be wrong. My career aspiration is security engineering, and the belief underneath it came from my parents rather than from any class. Nothing holds by default. A green dashboard is a claim, not a fact. A language does not survive because it is beautiful. Someone has to check, and keep checking. I would like that to be my job.

Being first-generation was supposed to be something you get past once. It has not worked that way for me. I came to the United States from Slovakia at thirteen with my parents. Neither of them went to college, so when I applied there was nobody at home to ask. I got through it. Then I did it again in Slovakia, and again in China, and I am doing it now at forty-two in a community college classroom in Chicago, in a field where I have no history at all. What being first-generation actually means is that there is no one ahead of you who can say which parts are normal. You cannot tell a real problem from a rite of passage. You over-prepare for the wrong things and get blindsided by the obvious ones, and you carry a quiet suspicion that everyone else was handed instructions you never received. The challenges now are more concrete than that. My wife is at home with our three-month-old son. We also have a three-year-old. Our household runs on about five hundred dollars a month of part-time income, with SNAP and TANF covering part of the gap. I taught for twelve years in China until the foreign-teaching market contracted and my position was eliminated along with every other foreign teacher's. I came back and started over. I do my coursework in the hours a newborn leaves behind, and I carry a 4.0. My dream is narrow, and I have already started on it. I want to work in security engineering. Before I enrolled anywhere I taught myself enough to build an approval gate with an append-only audit ledger, a platform designed so it never stores a credential, and a nightly vulnerability scanner whose first live run found a critical authentication bypass in a production system. I enrolled at Wright College because I had reached the limit of what I could teach myself. I have a second dream that costs nothing and matters as much. I grew up speaking Rusyn, a Carpathian minority language that has never had a country of its own and is running out of speakers. I volunteer translating documents for its preservation, and I published the first book of a children's series. I am raising both my sons in that language, because no school will do it. This scholarship pays for certification exams, and more than that it buys hours. Every dollar I do not have to earn is an hour I can put into finishing on schedule in December, or into my children. Right now I choose between those two daily, and one of them always loses. I have already proved I will do this without funding. Funding would let me finish it on time.

I have crossed an ocean twice, and the second crossing was harder, because the second time I brought children. I came to the United States from Slovakia at thirteen, with my parents. We spoke Rusyn at home, a Carpathian minority language that has never had a country of its own and is steadily losing speakers. Neither of my parents had been to college. When I applied, there was no one to ask. I finished a degree at Loyola, taught for three years in Slovakia, came back for a master's, and then went to China and stayed twelve years. Classroom teacher in Zhengzhou, then program director, then curriculum coordinator. I learned Mandarin. I ran a small restaurant for three of those years. I married there, and my older son was born there. Then the market for foreign teachers contracted and my college eliminated my position along with every other foreign teacher's. The life I had built stopped working. We came here, and my younger son was born in Chicago three months ago. I am teaching both boys Rusyn. One of them has never seen the mountains it comes from and the other will not remember them. There is no country behind this language and no school that will teach it to them. I volunteer with ZRIS, the Union of Rusyn Intelligentsia in Slovakia, translating documents and assisting with research, and I published the first book of a children's series. If I do not pass it on, it stops with me. My career aspiration is security engineering, and I did not arrive at it from an interest. I became a licensed insurance agent when we got here. The industry runs on customer records that would seriously harm people if they leaked, and I found that the systems handling them had never been examined by anyone. So I started building the controls I thought should exist, teaching myself as I went. An access-control architecture. An append-only audit ledger. A platform designed so it never stores a portal credential. A nightly vulnerability scanner whose first live run found two real CVEs in a production gateway, one a critical authentication bypass. An assessment against GLBA that produced eighteen severity-scored findings against my own infrastructure. Only then did I enroll at Wright College, because I had reached the limit of what I could teach myself. I carry a 4.0 while my wife is at home with the baby and our household runs on about five hundred dollars a month. What I want to say about being an immigrant is not the resilience part, which everyone already believes. It is this. I have started from zero in three countries, and every time the thing that saved me was refusing to assume that the way something looked was the way it was. In a new country that instinct keeps you upright. In security it is the entire job. I did not change fields so much as finally learn the name for what I had been doing.

I want to answer this honestly, which means starting with what does not give me an advantage. I am forty-two. I have less runway than almost everyone I am competing against, less energy than I had at twenty-five, and I do my coursework in the hours a three-month-old leaves behind. If you are looking for the applicant with the most years ahead of them for your investment to compound, that is not me. Here is what I do have. Most applicants are asking you to fund a plan. I am asking you to fund something already in motion. Before I enrolled at Wright College I had built an approval gate with an append-only audit ledger sitting in front of an autonomous software agent, a platform designed so that it never stores a credential, and a nightly vulnerability scanner. That scanner's first live run found two real CVEs in a production gateway, one of them a critical authentication bypass. I assessed my own infrastructure against GLBA and produced eighteen severity-scored findings against myself. Nobody paid me for any of it and no course assigned it. I did it because I had found a problem and could not leave it alone. The second advantage is a habit rather than an achievement. After a vendor's security patch went into that same system, one of my exposure tests started passing when it should have failed. The patch had closed the CVE and quietly removed an unrelated access control. My first assumption was that my own test was broken, because the vendor is a real company with real security engineers and I am one person with a certificate in progress. It took reading their changelog line by line to accept that they were wrong. That is the whole job. A tool reporting success is making a claim, not stating a fact, and the only thing separating the two is a test written to fail. Most people can recite that. I learned it by nearly getting it wrong. The third advantage is that I have already proved what I will do without money. I support a wife and two sons on about five hundred dollars a month, with SNAP and TANF covering part of the gap, and I carry a 4.0. I taught for twelve years in China until my position was eliminated along with every other foreign teacher's, and I came back and started over in a field where I had no history at all. There is no fallback behind me and nobody is doing this on my behalf. So the advantage I am claiming is not potential. It is track record, produced under conditions where quitting would have been an entirely reasonable decision. Funding will not make me try. It decides whether trying is enough.

I returned to school at forty-one, with a three-year-old in the next room and a wife who was pregnant with our second son. He is three months old now. I do most of my coursework in the hours a newborn leaves behind, which are not the hours anyone would choose. The hardest challenge has not been the material. It has been the arithmetic. Our household runs on about five hundred dollars a month of part-time income. My wife is at home with the baby, so there is no second wage. SNAP and TANF cover part of the difference. Every hour I spend on coursework is an hour I am not earning, and every hour I earn is an hour I am not studying or with my children. There is no version of the week where all three get what they need. I choose which one to shortchange, and I choose again the next day. The second challenge was starting over in a field where I had no history at all. I taught for twelve years in China, as a classroom teacher, then program director, then curriculum coordinator. In 2025 the foreign-teaching market contracted and my position was eliminated along with every other foreign teacher's. I came back to Chicago with my family and became a licensed insurance agent, and there I found work I had not expected to love. The industry runs on customer records that would seriously harm people if they leaked, and the systems handling them had never been examined by anyone. So I taught myself security engineering. Before I enrolled anywhere I had built an approval gate with an append-only audit ledger, a platform designed so it never stores a credential, and a nightly vulnerability scanner whose first live run found a critical authentication bypass in a production system. I assessed my own infrastructure against federal standards and produced eighteen severity-scored findings against myself. Then I enrolled at Wright College, because I had reached the limit of what I could teach myself. I carry a 4.0. The third challenge is the one nobody warns you about, which is that returning to school as a parent means being visibly the oldest person in the room while also being the least sure you belong there. I came to this country from Slovakia at thirteen. Neither of my parents went to college. I was the first, and at forty-one I was the first all over again, in a new field, with less time and more at stake than the twenty-year-olds beside me. What I have that they do not is that I already know how expensive this is. I am not doing it because it is the next thing. I am doing it because I looked at what my family needs and concluded this was the shortest honest route there. My certificate finishes in December 2026. Whether I go straight to work or continue studying is not a decision I get to make on the merits. It will be made by what we can afford. That is the plainest way I can put it. I have already proved I will do the work without money. Money would let me finish it on time.