"Pedagogical Experiences from a Hands-on Cybersecurity Defense Course] \"It was a one of a kind experience:\" Student experiences and pedagogical design of a project-based hands-on cybersecurity pentesting course"

The selection of learning approaches, hands-on materials, and exercises for a hands-on cybersecurity defense course can be tricky and challenging. In this paper, we share the pedagogical design and student perceptions of a hands-on cybersecurity defense course. A hands-on cyber defense course was taught with the combination of lectures, guided penetration testing virtual labs, and an independent penetration testing project. To avoid potential pitfalls, the project goals were tied to the student learning outcomes, and student check-ins and mentoring were built in to the design of the project. The combination of guided labs and independent project allowed deep learning, increased student satisfaction and motivation, and taught important hands-on cybersecurity skills sought in the industry and higher level courses. Students found the learning experience in this course to be motivating and one of a kind. This paper will share the pedagogical design of the course and explore the student experiences and challenges afforded through the pedagogical choices made in the course. The paper contributes pedagogical knowledge to other faculty members looking for effective instructional strategies for hands-on, skill-based, or project-based learning. The insights may be useful in bridging the skills gap in the cybersecurity industry.