#cyber-and-careers

1 messages · Page 27 of 1

viscid haven
#

I'm going through the labs now. One was about powershell, one was about AWS.

#

You get a full VM and tasks, you have to do them, then submit and it grades the tasks in the VM

#

PBQ are simulated and totally different.

#

You may or may not get a lab. If you get a lab, you can't skip it or come back to it, you have to do it then and there

#

Went through two labs so far. Let's see what else is there.

#

Hopefully CASP+ doesn't test Windows OS specific things.

modest geode
#

Seems like according to comptias terminology both are PBQs

Screenshot_20240607_191338_Chrome.png
viscid haven
#

I'm getting a free voucher for CASP+. SecurityX replaces it and costs $50. Should I just use the CASP+ voucher or abandon that and go for the SecurityX? First I have to pass college exam, then if you pass it, you get a free voucher for certification. Right now, my goal is to pass the college exam. Which I passed already in the pre-assessment.

#

I did pretty alright. I just have to study a bit more, schedule college exam, pass it, get voucher, and then take a few more weeks to study for CASP+ before take the actual certification exam.

knotty bronze
#

should i feel bad or guilty for using chatgpt to code even though i know how to read documentation and make my own code and understand it?

stoic cave
undone shore
#

Significantly worse idea if you're using it instead of (or to bolster otherwise weak) coding ability

stoic cave
undone shore
#

Oh, 100%

tacit bobcat
knotty bronze
serene umbraBOT
#

Gave +1 Rep to @tacit bobcat (current: #11 - 575)

tacit bobcat
viscid haven
#

It depends on what you ask GPT to do

broken idol
#

Please don't self advertise, you've already been told this.

knotty bronze
viscid haven
#

Quite useless if I may say so

#

And instead of macros, it's best to use their provided API

knotty bronze
viscid haven
#

if it's illegal, don't do it.

modest geode
# viscid haven It depends on what you ask GPT to do

Ive recently been using it to explore the Linux kernel. Ask it about a certain subsystem, then get more specific with my questions. Then ask for a concrete code example from the kernel.
If I don't understand a certain language construct, ask it to explain me that line. Which it does step by step with further (commented) examples. If there's something I'm not familiar with, like yesterday a gcc attribute, one quick question before getting back on topic. Or what a certain typedef/struct/function in the code is meant for and which file it comes from if I want to look it up on github.
All in one clean UI with zero distraction, no clicking around. Just the information I want.

Incredibly valuable to me personally.

viscid haven
#

I make it do repetitive tedious tasks, among much else. Since I already know how to develop, I can tell secure code from insecure code.

balmy jackal
#

Ok, so we all on here obviously use THM, but what exactly should my path look like if this career change is going to happen?

I've completed Pre-Security, and will just keep doing pathways one by one, but where do I look to actually get a job? What one specific thing should I be getting? THM is great, but I'm assuming not a recognized certification

hidden lotus
#

guys can you suggest the bigginer friendly bug bounty platform

lime plinth
#

I think I've wasted the past 20 years of my life doing network security and systems administration.

#

I kind of want to something fun now

#

Like drive a forklift

cobalt rain
#

i agree with sys administration xD

lime plinth
#

It's kind of a slog when you do it day in and day out

#

for 20 fucking years

balmy jackal
#

I don't want to do anything 24/7, I want something that can be done remote and when you're vibing it

#

IT isn't going to go anywhere, even if you're just doing it for yourself

wary shell
#

Anyone knows the sweet spot of months or years of experience for finding a better IT job? I'm currently at a service desk job and only almost 3 months in and it's horrible trying to solve issues with 20 different vendor tools. I prefer solving problems at a physical locations instead of being behind a desk at an office and trying to solve things remotely...

balmy jackal
fringe spade
lime plinth
#

Duck

#

What do you want to do?

#

A year of experience is pretty good to kind of see what's out there

zenith turret
#

Could someone help me out? I applied for a cybersec traineeship at a company, they gave me a vm with ctf tasks i open the vm and it asks me to login but i didnt get any login credentials from them am i supposed to just guess ?

broken idol
zenith turret
#

I guess thats true, I just think am already stuck since I cant login haha

broken idol
#

Maybe you're not supposed to?

zenith turret
#

huh?

#

its ubuntu linux

#

I would provide a screenshot but I cant upload images for some reason

broken idol
#

Is it white box or black box?

zenith turret
#

Ive no clue, these are the instructions I was sent

broken idol
#

There you go, that gives you more than enough information to get started, I'm going to remove it now.

zenith turret
#

thanks

#

With that info I should know the login credentials as well?

#

And then is it white or black box?

#

Im still in school so im kind of a noob

#

but for the upcomming year we have to apply for internships

#

so ye

broken idol
zenith turret
#

I read about it 5 minutes ago haha

broken idol
#

@quasi stream wrote a good room about penetraion testing fundementals.

zenith turret
#

awesome thanks!

broken idol
#

Now that is all the help I can give without helping you too much.

Good luck!

zenith turret
#

Thank you!!

hasty sentinel
serene umbraBOT
#

Gave +1 Rep to @broken idol (current: #1 - 2371)

broken idol
brittle pier
clear niche
#

Yes I am aspiring to become one , but after going through some stuff I saw that there is no entry level for that role so I am thinking to either start as bug bounty or soc side just to enter into industry then I can switch easily . Please tell me is this okay or did I miss something .
And yes I am having a lot of fun and will surely continue to work on networking, Linux and windows.I keep you advice about learning a lot and continuously applying for jobs in my mind
In the end thank you for the response and helping me to clear my mind.

serene umbraBOT
#

Gave +1 Rep to @rugged delta (current: #21 - 383)

brittle pier
clear niche
broken idol
brittle pier
#

Plus you learn how the people in blue team work and as you do get a pentesting job you know the flaws they have

rugged delta
# clear niche then how should i proceed i want to do pentesting and red teamer stuff but there...

Keep studying. You should aim to be able to complete the OffSec OSCP. It's quite a challenging exam but while it doesn't guarantee you a position, it's widely recognised and frequently requested by many pentesting teams. There is a lot to learn to become a pentester but you can certainly do it. If the OSCP seems a bit pricey there are other certs that, while not as widely recognised, provide a lot of the same skills, such as the TCM PNPT, HTB CPTS and INE eCPPT.

You should be aiming for 5+ hours study per day in such a venture. It's not going to be an easy road, but you are aiming for a role that's at the peak of an industry you're very new to. The following articles will give you a goood insight as to the path. Don't worry about the seemingly daunting prospect he produces, it's a very realistic path to being good at this game.

https://assume-breach.medium.com/im-not-a-pentester-and-you-might-not-want-to-be-one-either-8b5701808dfc
https://assume-breach.medium.com/im-not-a-pentester-and-you-might-not-want-to-be-one-either-part-2-the-response-ab838cca3519

balmy jackal
unique seal
#

question is putting the certificate of completion worth it on resumes ?

i’m looking at in the future once i get money again to get my certs instead. like i been in the hospital for two years and mine expired on me and lost my job so having to start over

#

im looking at the pentest + and casp + since i had a cyberops associates figure i go to the professional equivalent

broken idol
lost condor
#

Pentesting internship is starting tomorrow and I have not prepped at all. Procrastinated the whole week.

#

Thinking about where to start.

#

Might as well finish of the thm offsec path then start and start with the tcm PEH

dense dagger
dense dagger
#

@tacit bobcat , @flat sedge

hollow hedge
#

No pls

#

I'm a good boy I swear

broken idol
hollow hedge
#

That's understandable, thanks

brittle pier
#

Glad your okay

rugged delta
clear niche
clear niche
clear niche
serene umbraBOT
#

Gave +1 Rep to @rugged delta (current: #21 - 384)

gilded slate
#

Hey everyone. I like to know any internship opportunities for cybersecurity students. Just wanna know how to get into entry level.

unique seal
#

question i’m moving pretty fast through the jr pentest and going through the offensive one here in a week the rate i’m going. I already had a cyberops cert so i know enough to go trough it pretty quick

but is vulnhub okay for labs?
rn i can only afford this month for THM and that’s it so it be nice to have free labs

brittle pier
gilded slate
brittle pier
#

Are you in college

gilded slate
brittle pier
gilded slate
rugged delta
gilded slate
serene umbraBOT
#

Gave +1 Rep to @rugged delta (current: #21 - 385)

rugged delta
gilded slate
gilded slate
broken idol
rugged delta
gilded slate
gilded slate
serene umbraBOT
#

Gave +1 Rep to @broken idol (current: #1 - 2377)

brittle pier
rugged delta
#

Well you would have to contact them for their rules about such things 🙂

brittle pier
#

True

#

Thank you

#

Oh they have a student discount

#

Actually that’s for los Vegas

rugged delta
brittle pier
#

That’s actually very cool

warm tartan
#

Can u get a cyber job without working in IT support without a degree

stoic cave
#

I suppose if you had professional experience in an adjacent field or can leverage the field you're in to make the jump, but based off your question it sounds like you're starting at zero.

warm tartan
#

I’ve done some web development in the past

#

I’ve also done an internship at a managed service provider

#

Currently I’m doing some cyber certifications, they’re free but with reputable companies

stoic cave
stoic cave
modest geode
#

I'd like to know these free certifications from reputable companies.

warm hinge
#

there's a difference between certifications and certificates? 😭

dense dagger
#

One example is CompTIA, you need to take one of their certification exams before they certify you.

warm hinge
serene umbraBOT
#

Gave +1 Rep to @dense dagger (current: #22 - 376)

sterile python
quaint bay
#

Does comptia really help you get employed

#

I have net sec and and zero calls back

#

The tests don’t tell you how to do your job imo

#

It’s like telling a truck driver what his truck is built out of rather than teaching him how to drive routes etc

broken idol
quaint bay
broken idol
quaint bay
#

for Cisco systems yeah

#

is it fair to say most people who are applying to entry level positions

#

have the net Sec and a

broken idol
#

Or/And CCNA

quaint bay
#

ccna with no job experience?

unkempt fern
#

I have alot of freedom at my current job and can pretty much run whatever OS I want from my Laptop. I want to learn Linux in an accelerated manor and have been running kali Purple as my daily for about 2 weeks now. I know its not really the purpose of the distro so im looking to change to something else. Does anyone have some solid suggestions of security analyst distros that can be run as a daily driver for work?

broken idol
quaint bay
#

no

#

a is entry level

#

net sec is intermediate

#

ccna is advanced

broken idol
flat sedge
#

CCNA and Net+ are roughly equivalent. The difference is that the CCNA focuses on cisco specific networking configuration, and net+ is more general.

quaint bay
#

hm ok

flat sedge
#

Citing Reddit is not exactly compelling evidence, Scrubz

broken idol
quaint bay
#

@flat sedge would you say most entry level applicants have the trifecta and ccna ?

flat sedge
#

No

quaint bay
#

i don’t want my certs to go to waste im working every single day 12 hour researching

#

need to get hired

flat sedge
#

If you aren't getting callbacks, it's very likely that the problem is either your resume, or you are applying for the wrong jobs.

modest geode
#

In my deleted message I had stated I held the CCNA. I don't, I was thinking RHCSA for some reason.

But I did prepare for the CCNA without ever taking it. It's still pretty basic, just covers a lot of topics. I wouldn't call it "advanced" by any means.

#

For example knowing the very basics of the three way handshake is enough for CCNA in terms of tcp. Meanwhile there's hour long videos on YT on specific details of TCP.
CCNA is still surface level knowledge in my book.

fading olive
warm hinge
#

hi I need help I can’t get a vm Mac
someone can help me ?

stoic cave
#

Unless they're in some form of education, internships will likely not be an option for them. Internships are typically reserved for students.

stoic cave
stoic cave
young badger
#

hi There, I want to switch due to the wlb..so if you have any openings then do let me know.

tech stack : python,/django,nestjs,node js,graphql,Postgresql,redis,docker and so.

if you have any openings the ln pls DM me.

bronze spire
#

I've applied to about 300 "cybersec analyst lvl 1" job listings and have gotten zero callbacks. Anyone mind roasting my resume? I want to know if its my resume that is causing me to not get cybersec jobs or if i'm just not qualified enough to land an entry lvl job? or is it just bad luck so far?

#

Is there a channel on this discord i can post an image of my resume?

flat sedge
bronze spire
flat sedge
#

and you can put those in this channel

crude sphinxBOT
bronze spire
#

I've applied to about 300 "cybersec analyst lvl 1" job listings and have gotten zero callbacks. Anyone mind roasting my resume? I want to know if its my resume that is causing me to not get cybersec jobs or if i'm just not qualified enough to land an entry lvl job? or is it just bad luck so far?

flat sedge
#

Be careful about posting personal info - i recommend you redact that and repost

bronze spire
flat sedge
#

Your resume seems fine for an analyst 1 position; given how long you've been working, you may be priced out of that kind of position. Try broadening your search to security engineer as well.

bronze spire
stoic cave
#

I started as an Engineer, just a degree and an internship. Plus unrelated work experience at other jobs

flat sedge
#

Analyst and engineer are different types of roles. Your background doesn't demonstrate much in the way of monitoring, but it does show that you understand at least more of the theory than i would expect out of an analyst

bronze spire
serene umbraBOT
#

Gave +1 Rep to @flat sedge (current: #10 - 761)

brittle pier
surreal heart
#

Hey! What is the entry level position for someone who wants to eventually end up being a Cyber Security Analyst? Is it SOC Level 1 or is there something below that position?

modest geode
surreal heart
#

But other than a few challenges I don't have much experience

rugged delta
surreal heart
#

Thank you for all the answers there are a lot of good points that I have not considered yet. I have been looking for an internship since January but in Europe or at least in Hungary we don't really have many opportunities. But again thank you, I received some valuable good advice.

shut zinc
#

has anyone in here had success using an AI generated resume?

#

i heard a lot of companies use AI to filter through resumes so it would make sense that an AI would like an AI generated resume

rugged delta
#

You should be changing your resume to suit each role for each application

shut zinc
rugged delta
shut zinc
#

and i signed up for offered.ai because it applies for me and modifies my resume to fit the role

#

so far no success but im not sure if its because the service is trash or i dont have the qualifications for level 1 SOC

rugged delta
#

You should make sure your resume is correct, accurate and truthful. If you don't have the actual skills needed, you might find it difficult to secure a role

#

You should read the Tribe of Hackers books. They provide a lot of details on different cybersecurity roles

shut zinc
#

lol i started it a while ago and never finished it

#

thanks for reminding me

#

oh btw, should I include any THM paths I've completed on my resume?

#

i finished jr pentester and i have it on there

distant pier
#

Also check out the amazing Career Hub on the THM site:
From Entry-Level to Expert, the TryHackMe Career Hub has you covered every step of the way.
https://tryhackme.com/r/careers

TryHackMe
TryHackMe | Cyber Security Training

TryHackMe is a free online platform for learning cyber security, using hands-on exercises and labs, all through your browser!

distant pier
shut zinc
#

do you think THM could ever have a built in jobs board for people with high scores?

broken idol
dense dagger
shut zinc
#

a place for recruiters to scout people who use THM a lot

broken idol
shut zinc
broken idol
shut zinc
#

K

#

Not sure if I have enough room on my resume for hobbies tbh

broken idol
#

I really wouldn't put THM anywhere else tbh.

shut zinc
#

K

flat sedge
shut zinc
#

Do hiring managers read resumes?

#

Thought they just used AI to do that for them

warm hinge
shut zinc
#

That's what I've heard

#

Is that not true?

#

I've been trying to write a resume that passes an AI filter

warm hinge
#

Maybe some do. But I hope not.

pseudo creek
shut zinc
#

ah

rugged delta
# shut zinc ah

The people who eventually decide on the candidates to interview will, in fact, read your resume and they'll expect you to know what you sent them when they discuss it with you in an interview. They'll also talk about your skills and experience, find out what you might bring to the team, where you might fit in, if you need particular training along the way, how long it'll take to on-board you, etc... It's not just about the filtering system

fading olive
shut zinc
#

i'm confident in my ability to do well in an interview and my skills on the job, but getting up to that point is always the hard part

#

wish i could show instead of tell to impress a hiring manager

novel gyro
#

any cs analysts here

#

how is the csecurity these days

rugged delta
shut zinc
#

so basically do more than certifications

#

lately i've been power studying for sec+

#

guess i should do more THM once i have it

rugged delta
shut zinc
#

btw i decided to skip net+ and go straight to sec+

#

do you think not having net+ is a big deal for a first time security analyst role/

rugged delta
shut zinc
#

k

#

i did a lot of net+ studying and watched the messer course but i dont think im ready for the actual test

#

can't risk wasting 300 dollars

#

but sec+ im definitely ready for

#

halfway through the sec+ messer playlist and done with 10/26 examcompass practice tests

#

i'll schedule the exam when they're finished

mint hound
#

Do you guys think I can land a position after getting AZ-104? I have 1 /1.5 year of help desk support along with CCNA,Net+

modest geode
mint hound
modest geode
#

And frankly, like with most certs, passing AZ-104 says little to nothing about being able to independently use the technology to deliver value.
Companies know that. That's why they expect actual work experience.

#

With the rare exception.

mint hound
#

@modest geode I guess Build a portfolio of things I have created , github account showcasing my work would increase my chances? Maybe I should set my sights on something else

modest geode
fluid trench
#

Already got input from one of the hiring managers that normally would hire for this position (he is referring me, so it is going to a different one) but any extra input on this?

image.png
daring shell
brittle pier
shut zinc
#

how does this look?

image.png
#

personal info redacted

fluid trench
brittle pier
#

Very solid resume. There isn’t really much you can change with it

shut zinc
#

thx

flint river
#

Hi! If i want to incorporate both data analysis with cybersecurity (specifically reconaissance and OSINT investigation) but I don't have any professional experience in cybersecurity, should I place an emphasis on projects or volunteer experience?

bronze spire
brittle pier
bronze spire
# brittle pier You will keep trekking

Indeed. Wife is getting pissed though that I'm not making enough to pay the bills these days 😅
Slowly going further and further into debt... the depseration is setting in

#

600 applications deep

brittle pier
#

Sheesh

bronze spire
#

Actually, that's not true. I did get one job offer! Although it was a scammer trying to steal my info 😦

#

Sooo.....

brittle pier
#

What position are you trying for

bronze spire
#

Security Analyst

#

or anything i can qualify for

#

Literally anything I can get that is cybersec related and pays at least $80k/yr (to pay my mortgage)

flat sedge
#

That's usually a senior position. You can expect to take a paycut to get junior cybersecurity jobs, if that number is USD

bronze spire
flat sedge
bronze spire
#

currently

flat sedge
#

Do you do ops or engineering?

bronze spire
#

network setup/management

#

and troubleshooting

#

both on-site and remote

#

for 100 clients

#

i work for an MSP

flat sedge
#

Ok, that's a slightly different skillset. A big selling point to transition to a SOC is if you can get experience with the tooling your NOC uses

bronze spire
#

so we manage all their networks

#

we're a 8 employee company

#

including the owner heh

flat sedge
#

You must have network monitoring somewhere, but it sounds like that's not really what you touch on the daily

bronze spire
#

We have Datto RMM with automation doing the monitoring alerts through a system called Autotask

#

just up/down monitors

flat sedge
#

Datadog, Zabbix, Zeek are common tools

bronze spire
#

we outsource our Sec stuff though to an MSSP sadly

flat sedge
#

yeah, i'm not asking you to look at the security side of the monitoring

bronze spire
#

So im effed in that regard

flat sedge
#

Getting experience looking at some of the network side of the monitoring is huge; do you write the detection rules for events in your NOC?

bronze spire
#

No the owner does

flat sedge
#

Ask if you can be included in that.

#

Because that is a transferable process

bronze spire
#

He's very protective of that

#

doesnt want anyone to touch his duties

#

mainly the automation

flat sedge
#

You should be discussing with him the next stage in your career, since it sounds like you report to him

bronze spire
#

Already tried

flat sedge
#

If he's not willing to let you grow in terms of what you are trained and capable of doing, it's time to make at least a lateral move

bronze spire
#

He has no desire to grow the company and wants to keep everyone where they are

bronze spire
#

but into security

#

hence my 600 applications

flat sedge
#

You aren't making a lateral move, you are moving into a domain that your resume says you don't have experience in

bronze spire
#

How are all these people with literally zero experience getting soc analyst jobs then?

#

Even security engineer roles

flat sedge
#

your options are: take a huge paycut to do entry level security similar to what you do now, or make a lateral move to the same kind of position to a competitor

bronze spire
#

with zero professional experience

flat sedge
#

the biggest problem is that many companies don't want to grow junior security personnel, they just want to hire mid- to senior- level.

bronze spire
#

yeah i know thats a big problem in the market right now

flat sedge
#

So i'm telling you, if you want to make the jump at your current scale, you wil lmore than likely need to get some experience on the monitoring side of the network as well

bronze spire
#

I already monitor networks

#

literally 100+ of them

flat sedge
#

You can lab it up at home, and that's a good way to demonstrate you know what you're doing, and you are more likely to convince a company to take a chance on you with that as a project

#

But you aren't really writing the detection rules. Do you have experience with IR? I don't remember that being on your resume yesterday.

bronze spire
#

The incident response is me going on-site to check the cabling, confirm nothing has changed on the network, and go down a list of troubleshooting steps until the network is back up

#

95% of the time its the ISP's fault haha

hidden flare
#

I also work for an MSP and have been transitioning into a more security-focused role. Tasks have included security audits of our clients, rolling out org-wide MFA enforcement, handling phishing and malvertising incidents, managing phishing simulations, assisting with PCI compliance, and providing security training. Any of this something you can do at your MSP?

bronze spire
#

Any threat response/detection is handled by them

hidden flare
#

Your MSSP handles PCI compliance?

bronze spire
hidden flare
#

That's kind of crazy. How does a company that needs an MSP handle their own PCI compliance? lol

bronze spire
#

No clue. I'm not high enough up the totem pole to be privy to such info. Even though our company only has 8 members heh

#

I'm trying to jump ship though asap

#

Company is falling apart. Lost 3 employees in the past 2 months and the owner has been MIA since 2023

#

Its literally the CFO at the helm now

#

IT manager quit last week

#

And no plans for owner to replace him in the near future

#

SO we're currently rudderless haha

#

I tried to put my name in the hat for the position but they just blew me off

crystal coyote
#

Is it worth putting I failed the oscp twice on my resume?

#

Cuz I need a job lol idk that’s why I’m asking

modest geode
crystal coyote
#

I’m looking for experience I didn’t go to college and only had one tech job so my resume is a little barren

#

Good idea I still did the whole course thank you

serene umbraBOT
#

Gave +1 Rep to @thick dirge (current: #118 - 55)

modest geode
#

And if you mention the course you almost force them to ask why you don't have the exam. Given how expensive course access is.

crystal coyote
flat sedge
crystal coyote
bronze spire
#

That way ATS sees it and might get your resume in front of a hiring manager's eyes

echo fractal
#

I’ve been in app dev for a few years after college and am starting to realize I enjoy security related tech much more than making websites and mobile apps.

I really enjoy understanding vulnerabilities and my personal projects tend to be more automation and scripting than “apps”

I’m almost done with my google cybersecurity professional cert and want to get my sec+ after that. I’m willing to lose some salary to work entry level in cyber, do I have a shot now or do I need to finish sec+ first?

proper gorge
#

Hey guys so I’m as new as a newbie can get, so I’m looking for a mentor if anyone is willing to help a bro out. I’ll do apprenticeships anything I just want to learn

stoic cave
brisk orchid
#

Are there any transferable attributes/experiences if you transfer from a NOC transfer to a SOC?

modest geode
#

Working under high stress, triage, investigating root causes, reading logs

#

Not sure if that's what you want.

dawn ruin
#

Let him decide what he wants to do bro

#

I’m also in the same boat where I may be doing a position at a NOC

#

I know that a leading CISSP instructor, who is a network security engineer now, said that he went straight into a SOC. But looking back, he said he would have joined a NOC then work in a SOC

brisk orchid
brisk orchid
modest geode
dawn ruin
#

@modest geode That wasn’t what he asked

modest geode
dawn ruin
brisk orchid
#

That's just friendly conversation, no worries

dawn ruin
#

The ego

modest geode
# dawn ruin This.

I was referring to my own reply, not the job.
It's generally a good idea in life to not automatically assume the worst interpretation of what other people say and then jump on it.

dawn ruin
#

Your own reply was about the context of the job

#

I mean the assumption is correct anyway

modest geode
# dawn ruin Your own reply was about the context of the job

Correct. And I wasn't sure if the answer I gave was the kind of answer the user had been hoping for. Hence the sentence.

Another good idea in life: don't double down if you barked at somebody for no reason. Maybe just say sorry and move one.

fluid trench
#

Y'all should just knock it off. This channel is for professional purposes. Would be best to take your beef elsewhere

dawn ruin
#

If you’re saying “not sure if that’s what you want” referring to your answer to his question, it’s still an egotistical response to turn him away. Nothing to apologize for, “cyberterms”. Maybe you should stick to reddit. But please tell me more about answers you think people are hoping for from you. cue self righteous life lesson

broken idol
dawn ruin
#

Sure, just thought it was unprofessional

quaint barn
#

I was generally wondering, as I see conflicting opinions on this topic, is there any point in adding a summary/career summary to a resume

rugged delta
# quaint barn I was generally wondering, as I see conflicting opinions on this topic, is there...

Generally the objective of your resume should be to highlight the main things you can do for an organisation, for the specific role they're filling. Nobody wants to read through a summary that might just come across as jargon. They want to see bullet points of the important and relevant things, the big things and a list of skills you're going to bring.

What you should do is run your resume through an ATS checker along with every role you apply to so it checks how closely your resume maps to the particular role and keep sentimental language for the interview

flat sedge
quaint barn
#

Thanks, pretty much clarified what I thought myself

#

I just look through some resumes and see Summaries at the top with things that should either be in a cover letter, in skills, or is reiterated in skills for a second time

flat sedge
#

i personally prefer to not see it when i'm screen resumes for my department

#

i also think skills is pretty meaningless for entry level, if that's what you're going for

#

skills doesn't mean much until you are a SME in at least 1 thing

quaint barn
#

I've never heard about leaving that out

flat sedge
#

That's from least to most important

#

with education and certs being basically interchangable

quaint barn
flat sedge
#

Education

#

Because Internships, at least in the US, are typically reserved for current students

quaint barn
#

I'm incoming junior next semester

flat sedge
#

So you just finished your Sophomore year? Remember that summer internhips basically fill up by end of january

quaint barn
#

That's why I had these questions about resumes

#

New to this, only had a Tech writing class on writing a resume for like 2 weeks

carmine garnet
#

Hey

#

Anyone who specializes in block chain tech?

#

Or blockchain security ?

fickle grove
jaunty needle
#

44422183422184621

round gust
#

Hello there! Is there any chance someone from france and working in cyber would like to chat? Just looking for some story and tips from pro to learn a bit more about careers possibility 🙏

rare maple
#

Is it ok to post recruitment ads here?

sleek sedge
#

Need to contact a discord admin

rare maple
#

Aight

rare maple
serene umbraBOT
#

Gave +1 Rep to @sleek sedge (current: #14 - 531)

teal folio
#

whatsup

#

hey im new to tryhackme how long of doing this would be reasonable to get an entry level job in information security of cyber security of some sort. i got a bachelors degree in information security and i need a job so bad i been working at mcdonalds and it sucks, and nobody is hiring me and i apply like 10 jobs a day

#

or cybersecurity

modest geode
teal folio
#

i apply to helpdesk but nobody hires me they 😦

modest geode
#

While there are rare exceptions you are competing for those with tons of people who are more qualified than you. Maybe they're in the top 1000 on tryhackme, maybe they did the OSCP in their free time, maybe they run a youtube channel.

teal folio
#

ah ok

dark dew
modest geode
#

It's really, really hard and the timing couldn't be worse. Companies are largely looking for experienced people.

torpid magnet
#

Hello

teal folio
#

michigan im from

rugged delta
torpid magnet
#

how can i get hired? I need a company where i can learn and share. I'm a proficient full stack developer

modest geode
# teal folio michigan im from

Do you have any certifications? If not that would improve your chances of getting into helpdesk. CompTIA A+, Net+, Sec+, CCNA

torpid magnet
#

This is my first time writing here

rare maple
#

problem in the US is a ton of devs been laid off and they are looking for cybersec jobs now

modest geode
teal folio
#

i tried studying for comptia sec+ and A+ but i stopped because i cant really remember things by the book which is why i decided to do tryhackme because this seems like a more fun way of learning

modest geode
wispy flax
#

Yeah, I'd stick to what cyberterms,and so_much_for_subtety mentioned.

I stopped persuing webapp or software dev career, got into cybersec with a more "centered" mind. Picking up skills along the way while I apply for other jobs that may pick me up due to my skillsets, while I work/study on the side. Thus, enhancing my knowledge, to maybe in a future, get a job in the field.

But still, you get a nice set of skills.

rugged delta
teal folio
#

so what do you guys recommend should i study tryhackme or comptia ??

#

or both?

rare maple
#

whatever you think funner

torpid magnet
rare maple
#

gonna make it much easier getting anywhere

teal folio
#

i think tryhackme is more fun so far

#

but idk if im learning stuff lol

modest geode
rugged delta
rare maple
teal folio
#

not really

rare maple
#

then try comptia

teal folio
#

i mean i just started today lol

rare maple
#

lmaoo

wispy flax
#

You'll probably deal a lot with impostor syndrome. But, you'll see that once you get to work in something that requires some past knowledge, you'll probably won't remember the answer, but you will remember what/how to search for it.

rare maple
#

imposter syndrome is the worst

#

kinda cool thou when looking back at code that seemed complex and now its as natural as reading a book

wispy flax
rare maple
#

~I work as a dev in a primarily pentesting company (for perspective)

wispy flax
rare maple
#

my dreamjob 🙂

teal folio
#

I was told by some people skip A+ cert and go to sec+ is this true?

modest geode
rare maple
#

I wouldnt worry about that yet

#

in reality the certs is not really what matters

wispy flax
#

Also, surround yourself with people that might know more than you in other areas you probably don't know. E.g. This server (:

I like doing that. Just watching from a corner (:

teal folio
#

can you put tryhackme on your resume?

rare maple
rare maple
modest geode
wispy flax
teal folio
#

ok is there networking rooms i can do before i do the hacking stuff

rare maple
#

why not follow a career path then deepdive after?

teal folio
#

which rooms should i tackle first?

#

if i want to go into helpdesk then cybersecurity

wispy flax
rare maple
#

helpdesk is like sysadmin at a large company right?

rare maple
#

probably basic linux and win-server?

modest geode
rare maple
#

the most important by far "how to explain to an enduser how to restart their pc"

wispy flax
rare maple
#

used to tell people around me "no remote, no help"

teal folio
#

so whats the best way to search for rooms? Learn-search-active directory?

#

how do i know which room is the best room sorry im new to this website

wispy flax
rare maple
#

then I got more cynical, now its more like "no linux, no help"

rare maple
rare maple
wispy flax
rare maple
#

I just hopped on jr pentester - thats what I am hoping to be in the future

wispy flax
#

save a few rooms that might catch your attention. Like I'm now completing some flask & django rooms, just for fun. Because I was honestly somewhat burned out.

rare maple
#

...and what im expected to do tbh lmao

#

oh.. IF YOU CAN.. find a rl mentor that cares

teal folio
rare maple
#

talked to mine yesterday and OMG it does SOOOOO much

wispy flax
#

or, just do it alone, like me sadcooctus

teal folio
#

i just typed in active directory under search

rare maple
rare maple
#

but yea

#

the issue is the people you want as a mentor are usually the ones with no time

wispy flax
#

yeah, even though I don't consider myself "smart to that level" I try to encourage other people to continue, and offer them other ways to cope "burn-out" stages. So they don't abandon something that they feel passion about.

rare maple
#

same as with school teachers for IT - few if any people good at IT would put up with a school as an employer

rare maple
#

honestly few things teach you more than helping others

wispy flax
rough bloom
#

Please how can I join CTFs room of AD

#

Can someone help me to join room of AD

broken idol
stoic cave
#

@warm hinge here

warm hinge
#

got u

stoic cave
#

This is the better channel

warm hinge
#

so basically

#

What should i study in college to increase my chances of getting a better salary? Which degree's are more valuable in the ICS/SCADA industry?

stoic cave
#

I mean there's no one size fits all

warm hinge
#

Im trying to make a not so deep plan for my life so i'll understand what im doing and for what

stoic cave
#

ICS/OT is fairly small, so you have all sorts of backgrounds

#

A STEM degree is what you should aim for

#

Computer Science, Electrical Engineering, ECE, etc

warm hinge
#

those are the most important?

stoic cave
#

They're just examples

#

The thing with ICS is that you generally have experience in another part of the cybersecurity field beforehand

warm hinge
stoic cave
#

He is probably one of the most knowledgeable people in the field

#

I would look at what he has to say

warm hinge
#

these are all paid :(

image.png
#

though i might get some books he recommend

stoic cave
#

Again, that's professional training meant for people in industry. He has a ton of video links to free content as well.

#

You're trying to run before you can walk

#

You're primary objective is to finish high school with good grades

warm hinge
warm hinge
serene umbraBOT
#

Gave +1 Rep to @stoic cave (current: #19 - 407)

warm hinge
#

One last question, what do you think about OccupyTheWeb's industrial hacking courses?

spark junco
warm hinge
spark junco
#

Awh damn :(

#

I know that stuff can be difficult

polar aspen
#

doing SCADA can be challenging, but once you know a couple of things its very interesting to learn

warm hinge
stoic cave
warm hinge
stoic cave
#

Yeah that changes things, like a lot.

#

A lot of these roles, in the US, require you to be a US citizen and in some cases only born here.

warm hinge
stoic cave
#

A lot of ICS/OT is critical infrastructure or other government projects.

#

I suppose manufacturing would be a different story

spark junco
#

Getting a TS/SCI with a poly is pretty difficult if you're not a citizen. Lots of perceived risk, even if you'd never do anything malicious in a billion years

stoic cave
#

But we don't have a lot of that here anymore

warm hinge
spark junco
#

A top secret clearance with sensitive compartmented information

warm hinge
warm hinge
stoic cave
spark junco
warm hinge
#

i heard sweden has almost the same salaries compared to the US in this industry

polar aspen
#

Even getting a TS/SCI can be difficult for us citizen as well

stoic cave
#

Yep

spark junco
#

Especially with the poly pseudoscience bullshit

polar aspen
#

But I do agree if you want to work in infracstructure you will likely have to move. live here and be a US citizen, but even then it could be difficult

spark junco
#

Turns out, telling the poly examiner "I think this is fake pseudoscience and doesn't actually have any function besides psychological fear" when they ask you what you know about it is the wrong answer

flat sedge
warm hinge
#

:(

stoic cave
spark junco
stoic cave
flat sedge
stoic cave
polar aspen
#

oof

flat sedge
stoic cave
#

Here's a better source

warm hinge
#

i didnt even know its THAT complicated over there. Looks like im returning to 3D design 🥹

spark junco
#

At least secrets are down to 90 days or so. Eqip made it much easier to fill out, holy hell

polar aspen
#

I just hope to someday get a job in the gov and get a security clearance

flat sedge
#

yeah

#

i hope i never have to fill out another SF-86 though

stoic cave
#

They are miserable

flat sedge
#

I really, really hope my gov contracting days are over

spark junco
#

Dude I feel that. Even eqip took me a few days since I've moved so much

stoic cave
spark junco
#

I know the clearance process at my employer is still via SF-86 because they don't get access to eqip through the sponsor or something like that

stoic cave
#

eqip is just digital SF-86

#

It's the platform you fill it on

spark junco
#

Yeah

flat sedge
#

A couple of projects, I had to do both EQIP and the paper forms

spark junco
#

But I'm talking about the hard paper

stoic cave
#

I've only had to do digital

spark junco
#

And one homeboy made the mistake of doing it in pen and then messing it up pepelmfao

flat sedge
#

it was super awesome when the CEO of the subcontractor we were a vendor to sent back my forms in the clear. I loved having my PII exposed that way.

stoic cave
flat sedge
#

yeah

spark junco
stoic cave
#

It may of changed but Gov security would not be pleased now

flat sedge
stoic cave
#

That would count as a leak afaik

#

Or "spillage." whatever word they're using now

flat sedge
warm hinge
#

guys, do you have any tips for me (newbie) that you wish you knew back when you started your career?

flat sedge
#

Don't be afraid to be wrong..... And don't overstate what you know.

stoic cave
spark junco
#

Repetition repetition repetition. Listen to others and learn from their mistakes

stoic cave
#

It's OK to say "I don't know"

flat sedge
#

Being wrong, and knowing you could be wrong, is very forgivable. Being adamant or arrogant about something you are wrong about is not a good way to maintain a career.

spark junco
#

Much more respect for "I don't know, but this is how I'd find out" than some clearly bullshit answer

polar aspen
spark junco
#

Hell, 80% of IT is googling 🤣

flat sedge
#

even when I know I'm right, I amost always caveat with "this is just my understanding, if someone knows or thinks differently please speak up, and lets have a conversation about this"

polar aspen
#

Get passionate about it, learn, ask, network, and do projects. But most importantly don't burn or stress yourself out

spark junco
#

And be prepared for the plethora of egos in this field. I saw this in an article and it's so real.

image.png
warm hinge
#

Thank you so much guys, appreciate your help!

spark junco
#

I'd also add, don't let others deter you and at every level, there is someone you look up to and go "holy shit". Doesn't mean you're any less talented or that you're not good enough

warm hinge
#

Im thinking about installing a VM and creating a couple systems in it with one having a FactoryIO system which i can pentest, i dont really remember who recommended me this but i think it was @stoic cave

stoic cave
#

Maybe? I do recommend it to people who ask

#

It's pretty heavy though, just be aware

warm hinge
warm hinge
stoic cave
#

Resource usage

warm hinge
#

got u

flat sedge
spark junco
flat sedge
#

Biggest problem I see is that many of the 'too much ego' types don't bring evidence when they make a claim.
If something is a vulnerability, show the evidence of how the exploit works, and what the kill chain is for it to be effective.
If a security person can't, or won't, understand the significance of the alert, it's not quite useless but it's not helpful.

spark junco
#

Yeah, asking questions isn't an attack lol

warm hinge
#

btw, what do you guys think about NATO's cyberwarfare centre?

flat sedge
#

no opinion, i don't know anything about it

stoic cave
#

I don't either

#

You're going to need a NATO clearance more than likely though, which is it's own thing

west pier
#

on the topic of clearences it helps if your parents have worked in a related industry

#

/ have clearences

#

I will also tell you now that applying for a ts will require to disclose lots of information

#

including people you know online

#

and where they're from etc

#

in other words don't be talking to foreign nationals lol

stoic cave
west pier
#

The people I've talked to about it all had it questioned

#

but that was also for aerospace and defense

#

although I don't see how it would change industry to industry if the clearence is the same

stoic cave
#

It wouldn't, the questions are really all the same

west pier
#

ok so im not going crazy lol

#

that's good

stoic cave
#

Once you get to in person evals it changes a bit

west pier
#

Well yea

#

I just know for the people in my family who've had it done/ some other people similar to my age

#

anyone that they speak to online had to be mentioned

#

and if they knew them everything they knew about said person

#

age, country, sex, occupation

stoic cave
#

Again, it's investigator dependent

#

It's not a hard rule

west pier
#

fair

#

I would still just be prepared for that though

stoic cave
#

Or at least it wasn't as of last year

west pier
#

as in starting the process last year or going through it last year

stoic cave
#

Both

west pier
#

they could've changed it

#

although I would imagine if anything the online associates would be more prevalent in today

stoic cave
#

Yeah, I specifically asked and got indifference from multiple levels

west pier
#

That's pretty interesting tbh

#

a little concerning even

stoic cave
#

I've heard a bunch of conflicting information though from all sorts of people. If you ask the investigator, and follow what they say, you're in the clear

west pier
#

Yeah that's true

#

I would hope that they would look into it reguardless though

#

I imagine that they already look over your socials anyways

stoic cave
#

It depends, most of it at the lower levels is automated credit/debt checks

#

A human only gets involved if things don't line up

west pier
#

Fair enough

#

part of that doesnt sit right though

stoic cave
#

Going on easter egg hunts is a waste of funds and resources

#

You have to think at scale

west pier
#

Yeah

#

but some stuff on a ts is worth the potential egg hunt

#

especially in aerospace

stoic cave
#

That's why you have SCI and SAP, they have different requirements

#

They aren't clearance levels, but they add additional requirements

west pier
#

I'm aware

#

Still just a bit silly

coral vault
#

Although this can widely differ depending on which country you're in. Some agencies have more access to personal info than others

#

Then staffing, resources and general quality can be different for each country

warm hinge
#

Does anyone know if the A+ is enough to land a help desk job?

wild flume
warm hinge
#

Do you think I got a chance to find a remote Helpdesk position?

wild flume
#

Yeah if you've already put in the time and effort then for sure, go for it.

wild flume
#

at least where I've worked they've wanted new personel and entry level positions to be in office and then you eventually "earn" remote work.

I'd say it highly depends on where you are and what jobs are around though

warm hinge
serene umbraBOT
#

Gave +1 Rep to @wild flume (current: #2096 - 1)

warm hinge
#

My dream is traveling and working remotely and I'll do anything to achieve that

wild flume
#

For sure you can get there.
Im sure someone else in this channel has gotten to that point and could give some advice

west sonnet
#

That is 100% achievable, take it from someone who got to that point and started from little to no experience

polar aspen
#

Yup definitely achievable, probably hybrid is what you be doing most of the time starting out in help desk, unless company requires you to be on-site. But if you show value and potential, they can work with you and tailor your schedule a bit

#

I never obtained my A+, but you can get a IT help desk without it. But may be difficult

west sonnet
#

Not sure what the market is like for the A+, but from my experience I went straight for the sec+. Looking back, would have been good to get the net+ before the sec+

modest geode
polar aspen
#

I still have not acquired my net+ or ccna

#

but I learn networking by getting thrown into the fire

#

When I got hired to be a network admin

#

It was a literal nightmare

brittle pier
lapis osprey
#

Okay

quaint bay
#

Got a phone interview for a soc position Monday.

#

Any tips?

modest geode
# quaint bay Got a phone interview for a soc position Monday.

Have the incident response phases and what they mean memorized. Be able to list some indicators of compromise. Be able to explain by which criteria you would prioritize incidents.

That's some basic questions that could be asked, but depends on the position.

brittle pier
#

Yeah TryHackMe soc 1 has a list of potential technical interview questions too

warm hinge
#

Are there any Cyber Security positions that can be fully remote?

stoic cave
#

Yes

warm hinge
stoic cave
#

I'm basically full remote but I choose to go to a location once a week to meet people on other teams in person

stoic cave
#

There are all sorts of rules too, such as being in the country you're working remote

warm hinge
#

I'm looking for an IT job that is most likely to have a fully remote job for entry level

#

Doesnt really matter which one because i like everything related to tech

pseudo creek
#

Also lots of employers are requiring hybrid at least

#

But I'd say cloud jobs in general have a higher chance of remote than any

warm hinge
pseudo creek
warm hinge
pseudo creek
#

But again no guarantee of a remote position

pseudo creek
#

And I'm in the US, if you are in another country, you should see what cloud vendor is a leader

warm hinge
#

I'm scheduled for the A+ Core 1 in 10 days

#

do you think i should get the Network+ too before getting the AWS?

pseudo creek
#

Networking knowledge helps with cloud

warm hinge
#

And i dont really care which job it is, i did Harvard's CS50 so I enjoy coding as well

pseudo creek
warm hinge
pseudo creek
#

There are a variety of labor laws and hoops with employing someone outside of the country

west sonnet
# warm hinge Okay, ill do as many certs as needed, Im dreaming of living in Thailand and work...

I admire your drive to achieve this goal, and I was certainly in your shoes before. Don't wanna throw hot takes out there and in my opinion knowing how to learn is important and a skill on its own. From my experience, something that hit me in the face was, that certs aren't everything. It's when you absorb that knowledge and know what to do in theoretical or practical situations that you can call on that knowledge to assist

#

Also, yeah the job market dictates what type of positions are more in demand. 4 years ago is different than today, most companies want hybrid, some want fully remote, and others want in-person, it depends

west sonnet
warm hinge
west sonnet
#

It's a marathon not a sprint

warm hinge
#

Idk i dont wanna listen to the naysayers but I guess they're right

modest geode
warm hinge
#

Yeah well i dont have any diplomas and any experience so if certs are not gonna help me then there is no hope for me

modest geode
#

You'd be lucky to get ANY cloud job with just certs and no experience. You want full remote from anywhere in the world on top of that. You're almost certainly gonna be disappointed. It's not gonna happen.

warm hinge
#

Youre right

west sonnet
warm hinge
modest geode
# warm hinge I guess I can find a job in my city and travel on the weekends, visit Thailand o...

Sorry to burst a bubble but that's how it is. I have a bunch of advanced ("expert level") cloud certs, thousands of hours building stuff in the cloud as a hobby, ive been programming for longer than some user here are old, and reality is nobody's queueing up to hire me.

Understandibly when there's (tens of) thousands of ex-AWS, ex-Google, ex-Azure cloud folks on the market.
But I never had about illusions about that so I'm not disappointed.

#

And to be clear that doesn't mean you shouldn't learn and practice and get those certs. Just with realistic expectations.
As was mentioned before who knows how the market is gonna look in 3-4 years. It's just gonna be a (years-long) marathon no sprint.

warm hinge
modest geode
#

I assume you have a couple of decades of life expectancy ahead of you. All you can do is your best, try and hope it works out.

west sonnet
wild flume
warm hinge
#

Congrats

wild flume
#

I think the key might just be continuing to learn, getting your foot through the door with any helpdesk job and then communicating with your workplace about your hopes for the future.
Getting that first job and accumulating experience is going to be key though

warm hinge
wild flume
#

Yeah for sure. In my current situation I wouldn't go for a remote job then.
I'm trying to learn a ton more in the hopes of eventually getting something that's local and cybersec related

warm hinge
brittle pier
#

Don’t think that you can’t do anything

#

Try your hardest

warm hinge
brittle pier
#

W

#

You got it

#

You can even get a job that’s not exactly a it job to still get money and study on the side and send out job applications

warm hinge
final roost
#

Hello friends, I am looking to make a career switch from Aviation to Cyber would anyone give any pointers on where to start without going to college?

#

I am really new to all this but have been looking into get security+ certs but not really sure where else to start on getting an entry level job with little experience

maiden oar
#

guys is tryhackme a good way to get into cybersecurity, im 16, is it too late to start

fickle grove
maiden oar
#

cool, i just think that since i have very little knowledge in coding and the IT field in general, it might be too late to step into this field

#

considering the competitive high school scene in america

fickle grove
maiden oar
#

got it

sick sigil
#

Hi, I am 26, trying to transition from IT to Cybersecurity. I have been learning about this field for past two months. What do you guys think, should I prepare for certifications or target the bug bounties to get a job or internship? Thanks

ripe stratus
#

16

#

what too late are we talking about ???

fickle grove
warm hinge
ripe stratus
warm hinge
ripe stratus
#

like you actually get to experience xss sqli and so much more rather than just blindly mermorizing the theory

#

but ya its not realistic to get a full fledged carreer in it

warm hinge
#

if you are bad at bug bounties sure, you can make millions doing bug bounties if you ACTUALLY know what you are doing

stoic cave
warm hinge
#

but try not to lump everyone in with the skids

stoic cave
#

I'm not.

warm hinge
#

some of us have consistently been making over $400k/year for the past decade via bug bounties, with some years as high as $800k

#

i consider that pretty stable.

stoic cave
#

I'm assuming you have first hand experience, currently making those amounts?

warm hinge
#

Yes.

dark dew
#

It's kinda like when you are a pretty good musician but should not be putting all your eggs in that basket in the hopes you make it big.

warm hinge
warm hinge
warm hinge
#

but you can get it lower for sure if you have really good program selection/automation skills

warm hinge
#

so basically a noob

#

but not a noob noob

warm hinge
#

normally once you get rce, privilege escalation is a no go

warm hinge
#

So I started learning IT to get a regular help desk job and im gonna work my way up

warm hinge
broken idol
#

Bug Bounties is not a viable income.

warm hinge
broken idol
warm hinge
broken idol
# warm hinge for you*

With bug bounties, you don't get paid right away, you could be reporting dupes and not get paid.

warm hinge
warm hinge
broken idol
warm hinge
#

that doesn't ring true for everybody though.

broken idol
warm hinge
broken idol
warm hinge
#

so why are you trying to tell our friend Rixon here, that they don't? You just want less competition or what? 😉

broken idol
#

I had to wait 6-8 months for payout.

warm hinge
broken idol
#

That won't pay monthly bills.

warm hinge
#

do you not understand what is wrong with your thought process here?

#

I was making Trap Beats for 2 years until i started selling them so I have the patience for bounties too

#

Ill just try it

broken idol
warm hinge
#

Im at home all the time anyways

warm hinge
broken idol
warm hinge
#

i find that quite rude. especially when you have 0 evidence other than a half-baked anecdote about the 1 bug you reported taking a while to pay out

broken idol
warm hinge
broken idol
#

Your personally attacking is civil? Lol

warm hinge
warm hinge
spark rivet
#

I've just joined and it's funny how even here discord mods are threatening to mute someone because they don't agree with them

broken idol
broken idol
warm hinge
broken idol
warm hinge
#

but you are giving this man the wrong message. instead of manually looking for low hanging fruit, like many people do, you should be focusing on good automation

warm hinge
warm hinge
warm hinge
#

using a language like python you can easily automate searching for xss, sqli, ssti, etc. Then all you have to look in depth at a few small cases instead of an entire site

warm hinge
#

I know Python and C

#

if there are automation tools being sold to people online, there will be thousands if not millions of people using them. you won't find anything that hasn't already been found that way

#

also the basics of html, css, js

warm hinge
serene umbraBOT
#

Gave +1 Rep to @karmic sequoia (current: #2098 - 1)

warm hinge
# warm hinge good to know thanks

no problem, bug bounties is quite a densely populated field, but you can certainly etch out a living if you can build good enough automation

warm hinge
warm hinge
#

oh okay so all the web app boxes

#

learn how http works in its entirety, requests, responses, how files are served and downloaded

warm hinge
broken idol
#

Also if you're now talking about bug bounty in general now, please move over to #bug-bounty

warm hinge
warm hinge
rugged delta
warm hinge
#

+1 ^

rugged delta
#

But yes, further discussion of bug bounty in general should go in #bug-bounty

warm hinge
broken idol
warm hinge
broken idol
warm hinge
#

im about to head off anyways though, im sorry you got upset with my messages scrubz, there was no ill will intended

stoic cave
warm hinge
warm hinge
#

is it hard to get a security clearence?

stoic cave
warm hinge
stoic cave
#

It doesn't work that way

#

So, next to impossible more than likely

warm hinge
warm hinge
stoic cave
#

I mean that's an easy one, you aren't a US citizen

#

The country isn't going to give foreigners access to secrets

warm hinge
#

but for example, what if i get a us citizenship?

#

also i'll publicly kiss the american flag

stoic cave
#

You'll go through a very lengthy process, have to expose your entire family to interviews and investigations by the US government, and then be under a microscope the rest of your life.

warm hinge
stoic cave
#

It's not a guarantee, you can get rejected

#

On both citizenship and then also the clearance

warm hinge
#

so complicated...

#

alright, thanks!

modest geode
#

There's also the question of why would a company go for the extra effort and risk when they can just hire a natural born US citizen

warm hinge
#

I would understand if they'd do this process only to people who have a citizenship in a non-friendly (to america) country

modest geode
modest geode
stoic cave
warm hinge
warm hinge
distant pier
#

This process would start with sponsorship of a US company, which is also lengthy, to obtain a work visa, with job requirements proving it can't be filled by a US citizen.

stoic cave
modest geode
stoic cave
#

Yes, immigration/work visas do take a while

#

Afaik, we're less strict than EU Countries and Canada though

warm hinge
#

thats crazy

stoic cave
brittle pier
stoic cave
#

To a lesser degree, but yes

#

You sign a lifelong commitment to the protection of information

coarse shell
#

With strides in AI development, is it worth it going through a CS degree only to be replaced by chat gpt 5? I am seeing videos on youtube of artists who are out of jobs because their work was used to train models that later replaced them. I want to pay to bill and I want to have enough to have a family with a stable income and by the time I finish who know what jobs will be lost, AI models could potential train other models (judging by how quickly it learned to write code in the past 5 years).

pseudo creek
coarse shell
pseudo creek
# coarse shell What about the artists who were fired, they were told the same thing, what makes...

Art is a bit different and honestly it's horrible and not entirely ethical but creating art is much easier than replacing tech workers. For coding for example, you need to know what good code looks like to utilize AI tools. For art, people are able to tell if it is what they want. Artists will still exist for various reasons though.

I mean if you are concerned, you can look into careers that require manual labor

#

I will just say I'm personally not concerned with being replaced

coarse shell
serene umbraBOT
#

Gave +1 Rep to @pseudo creek (current: #15 - 481)

sleek sedge
# coarse shell What about the artists who were fired, they were told the same thing, what makes...

https://www.youtube.com/watch?v=HCEoUkeoDOY
Checkout the #1096897654962786434 thread if you want, got some interesting sources like the above

YouTube
The Art Mentor
In 1-2 years AI Art will be dead and here's why

There are the signs that AI Art is dying. In this video, you'll hear how AI art is doomed to fail, and won't make it much longer. It's flawed, unethical, legally ambiguous, and that means it's time is almost up. Artists: don't worry about AI art, just persist. I believe in you!

Download Glaze to protect your art uploads:
https://glaze.cs.uchica...

▶ Play video
modest geode
#

Can someone explain to me how my certifications are suddenly valid 6 years instead of the usual 3?

image.png
#

I know CySa+ renews the other two, but I assumed it would be 3 years from the day I passed CySa+. The expiration day for all 3 is set to the day I passed CySa+, just in 2029 oO

stoic cave
#

It just moves you're expiration date 3 years every time you fill the renewal requirements for that period.

modest geode
viscid haven
#

Hi guys. Could someone help me shorten this? It's too long. I brainstormed a bit more and included more information about my Sky Media job:

        "job": [
          "Led comprehensive cybersecurity strategy and operations as CTO, safeguarding digital assets for high-profile clients including Symantec Norton Inc., Panasonic, USOC, and Men's Wearhouse. Responsibilities included hosting and securing social media applications, managing servers, ensuring SSL certificates were up-to-date, hardening servers, developing full-stack applications, and conducting thorough testing using SAST/DAST and tools like Cenzic and Qualys.",
          "Directed deployment and optimization of advanced security technologies, including SIEM solutions, remote logging, log aggregation, and system hardening, ensuring robust defenses against evolving cyber threats.",
          "Conducted penetration testing and vulnerability scanning, managing security audits and assessments to ensure compliance and promptly address vulnerabilities.",
          "Established strategic partnerships with leading cybersecurity firms like Symantec Norton, leveraging cutting-edge solutions to enhance security for high-profile clients such as Snoop Dogg.",
          "Ensured the availability, integrity, and confidentiality of critical systems and data through proactive security measures.",
          "Served as the primary liaison for all cybersecurity matters, interfacing with executive leadership and key stakeholders to communicate security posture and strategies.",
# 
          "Developed secure in-house research and analytic tools, ensuring data integrity and confidentiality through encryption and secure data storage practices. Designed responsive, secure web, mobile, and email marketing campaigns with embedded security measures.",
          "Managed and secured a range of Symantec Inc. social and web applications, including facebook.com/Norton, by implementing access controls, encryption, and regular security patches, ensuring 99% uptime through diligent system administration and monitoring.",
          "Prototyped and deployed secure e-commerce solutions (Zencart, CS-Cart, Magento), YouTube-like video-sharing sites, Facebook, mobile, and web applications, focusing on secure payment processing, data encryption, and protection against common web vulnerabilities such as SQL injection and XSS.",
          "Engineered secure cloud solutions by custom-tailoring RackSpace Cloud Infrastructure and using their Python API to automate and secure unique hosting solutions for clients, including setting up firewalls, intrusion detection systems, and automated security updates.",
          "Configured, secured, and administered Exim4 and Dovecot email servers for in-house email hosting solutions for clients, implementing SSL/TLS encryption, spam filtering, DKIM, SPF, and DMARC to ensure robust email security, and conducted regular security audits.",
          "Set up and maintained secure servers by implementing SSL certificates, configuring firewalls, conducting regular security audits, and applying security patches promptly to ensure compliance with industry standards and protect against vulnerabilities."

        ]
#

I feel like this should all be in there, but it's too long.

#

Renders like this on PDF/DOCX

Screenshot_20240617_081445.png
#

So what do you think I could take off/reword/ use brevity, etc to make it shorter so it doesn't take up so much room, and has all the info for a cybersecurity resume.

#

Cleaned up some more.

        "job": [
          "Led comprehensive cybersecurity strategy and operations as CTO, safeguarding digital assets for high-profile clients including Symantec Norton Inc., Panasonic, USOC, and Men's Wearhouse. Responsibilities included hosting and securing social media applications, managing servers, ensuring SSL certificates were up-to-date, hardening servers, developing full-stack applications, and conducting thorough testing using SAST/DAST and tools like Cenzic and Qualys.",
          "Directed deployment and optimization of advanced security technologies, including SIEM solutions, remote logging, log aggregation, and system hardening, ensuring robust defenses against evolving cyber threats.",
          "Conducted penetration testing and vulnerability scanning, managing security audits and assessments to ensure compliance and promptly address vulnerabilities.",
          "Established strategic partnerships with leading cybersecurity firms like Symantec Norton, leveraging cutting-edge solutions to enhance security for high-profile clients such as Snoop Dogg.",
          "Ensured the availability, integrity, and confidentiality of critical systems and data through proactive security measures.",
          "Set up and maintained secure servers by implementing SSL certificates, configuring firewalls, conducting regular security audits, and applying security patches promptly to ensure compliance with industry standards."
        ]
# 
          "Served as the primary liaison for all cybersecurity matters, interfacing with executive leadership and key stakeholders to communicate security posture and strategies.",
          "Managed and secured a range of Symantec Inc. social and web applications, including facebook.com/Norton, by implementing access controls, encryption, and regular security patches, ensuring 99% uptime of through diligent system monitoring.",
          "Deployed secure e-commerce solutions focusing on secure payment processing, PCI DSS Compliance.",
          "Configured, secured, and administered Exim4 and Dovecot email servers for in-house email hosting solutions for clients, implementing SSL/TLS encryption, spam filtering, DKIM, SPF, and DMARC to ensure robust email security, and conducted regular security audits.",
viscid haven
#

🤷‍♂️

viscid haven
#

What the F is the point of making a resume when job applications manually make you fill out forms about job experience, dates, locations... it's like you have to re make your resume from scratch and type everything in every single time for every single job. What the fsck, man. I'm annoyed right now.

#

The reason I have a resume, so I don't have to manually fill in that information for every job application. And these are jobs off Indeed.com... WTF

modest geode
#

It's because corporations are lazy behemoths that don't give a damn about your experience as long as they have power. Which in the current market they do.
I've had an onboarding where I had to enter the same information three times. First on a scanned paper form via email, then the real form at the office then again in their online HR system.

viscid haven
#

Breathe! I got this. Gooosfraba.

viscid haven
#

I updated my indeed, linked in, added my certs, education, updated, job dates, descriptions, etc. etc. and applied for 3 jobs total today.

viscid haven
#

I'm missing keywords, softskills, resume length too long, hmmm.

pseudo creek
# viscid haven

personally I skip soft skills because anyone can say they have soft skills. Basically soft skills are evaluated during an interview

viscid haven
#

Ok

prisma jewel
#

HELLO

hoary sequoia
#

Hi

lucid fern
#

What are the different terminology that positions use for helpdesk and it support (besides helpdesk and it support)? I want to make a linkedin search for this
and to get experience for a future security job it would be a helpdesk job at a security company right? Can it be helpdesk at any kind of IT company too?
and if I already have 1 year of cyber experience from an internship, it will help me get a helpdesk or IT support job more easily right?
I am a US citizen if that helps with the answer
I also have a bachelors degree in computer science

Also if anyone has applied to the talent pool at USAJobs and heard back, how long did it take until you were contacted for a position?

pseudo creek
lucid fern
serene umbraBOT
#

Gave +1 Rep to @pseudo creek (current: #15 - 482)

pseudo creek
lucid fern
unique seal
#

decided i’m going for my BS in cybersecurity
not really looking for a job in the field just interested in it
and wanting to get back into my area of IT due to the program offering the security certs i need to get back in

stoic cave
#

Cybersecurity degrees can also be a hit or miss. It's more than likely safer to obtain a Computer Science degree.

unique seal
#

meh, i was doing a cs degree before a gov contractor picked me up,
but i’m going for a cybersecurity degree for the certs the school offers and the degree is to just get past HR,

i’m looking to get into more sys admin than cybersecurity

#

i already have a AS in Network Administration and Security . need a bachelors in a related field for the jobs i want

stoic cave
brittle pier
#

Isn’t sys admin part of cybersecurity?

brittle pier
#

Let me reword it

stoic cave
brittle pier
#

How does a government job utilize math classes more then just a regular corporate one

brittle pier
stoic cave
brittle pier
#

Ah I see

stoic cave
brittle pier
#

Also do you know what a vulnerability analyst be?

stoic cave
#

What do you mean?

brittle pier
#

I mean, it seems like that job title would be sort of a pentester job but also not so much because you are analyzing vulnerability’s

#

I’ll get a example job I found

#

Eh job titles are weird to begin with, every company has a different name for the same stuff

sly zenith
late sparrow
#

Guys i am not able to find cybersecurity jobs here in India and even if i find a listing the chance for getting an interview call are slim. I am not sure what to do. Plus i need to find a way to earn as i am currently not earning money since past 6 months

#

If there is anyone who can refer me even with technical support job that be great as i can continue earning and learning until i find a better job

viscid haven
#

Hello. What resume format do you guys submit resume in? PDF or DOCX?

stoic cave
#

PDF

#

It prevents editing

viscid haven
#

For sites who parse your resume, docx works better than PDF to auto detect and auto fill sections.

#

Gladly I generate both copies of my resume

#

One resume per job, targeted. I need to sort them in their own named directories after the job/company I applied to, and update a CSV file automatically that I generated and applied for that company. Keep track of how many and where I applied, and with which version/copy of resume.

Screenshot_20240619_053734.png
sleek sedge
cobalt escarp
#

Pdf can also be converted to docx if they really need to

viscid haven
#

True, I send PDF to people.

#

But if they require me to upload a resume to autofill their form, I use docx as that works better

# 
    public function convertToPdf($htmlFile) {
        $pdfFile = pathinfo($this->jsonFile, PATHINFO_FILENAME) . '.pdf';
        exec('pandoc ' . $htmlFile . ' --pdf-engine=weasyprint -o ' . $pdfFile . ' --metadata title="" --css=style.css');
        return $pdfFile;
    }

    public function convertToDocx($htmlFile) {
        $docFileTmp = pathinfo($this->jsonFile, PATHINFO_FILENAME) . '_tmp.docx';
        $docFile = pathinfo($this->jsonFile, PATHINFO_FILENAME) . '.docx';
        exec("pandoc $htmlFile -o $docFileTmp --variable geometry:\"margin=0.25in\"");
        exec("pandoc $docFileTmp -o $docFile --reference-doc=custom-reference.docx");
        unlink($docFileTmp);
        return $docFile;
    }

First, I build my JSON per the screenshot.
Second, build the HTML with proper CSS styling
Third, convert the HTML to PDF and DOCX while preserving CSS styles for PDF (not for DOCX yet. Haven't worked that out completely)

Screenshot_20240619_070638.png
#

I can't stand design software or word processors.

#

Got it to render a lot better than last time. Easier to read and now it also all fits on one page in PDF.

Screenshot_20240619_071035.png
viscid haven
#

Applied to 3 jobs this morning, with targeted resumes

#

And also signed up for Uber Eats Deliver Driver. Sigh. Gotta do something to earn a living. Hopefully my car can survive delivery.

oblique wind
#

i am gonna finish up the jr penetration teseter path