cyber-and-careers

[magic ingot]

That's not my problem honestly they can do whatever they want with it

[undone shore]

And therein you become a problem to the moderation team whose job it is to stop that kinda shit from happening

[broken idol]

You're creating problems though, which is your problem, there isn't a need for the attitude.

You're also breaking a rule 🙂

[magic ingot]

I'm not breaking anything

[crude sphinx]

<#651923438524432404>

Rule 4 - No Illegal or Harmful Activity

We have a zero tolerance policy towards unethical hacking. Please don’t discuss illegal or unethical topics, post any intentionally harmful commands or distribute malware. [See More]

TryHackMe Rules · Nov 5, 2024, 8:16 AM

[broken idol]

You're aiding in the possibility of distribution of Malware 🙂

[magic ingot]

You're warning me and not him for asking that in first place, are you trolling or?

[broken idol]

They asked a question.

You choose to answer.

[broken idol]

I didn't warn you either, I pointed out the rule you're breaking.

[calm cliff]

@broken idol if: "you reach the current top level on the website, level 13 (0xD)" why I still don't see this "Advanced Rooms"?

[keen tundra]

Because you have "Cyber Crusader" title temporarily 😄

[calm cliff]

F*ck, Thanks for remembering, I really hate this title :)) Still don't know why I clicked "redeem" :)))

[serene umbra]

Gave +1 Rep to @keen tundra (current: #44 - 195)

[broken idol]

Should be gone soon.

[keen tundra]

Me too🤣

[untold vale]

Yeah I know. I mean, I don’t base my learning on THM. I know python very well, web-dev +/-, I have some projects in mind and also I started doing Blue Team labs designed for SOC. the problem is as you mentioned soft skills, and in order to improve those soft skills, any real-practice would be nice, just to know how it looks like in reality, not on some paper or prepared labs.

[fierce acorn]

which is why I always recommend getting your foot in the IT door with a help desk or similar entry-level job

or a referral

[hexed ice]

i followed exactly this advice 🙂

currently working as a help desk but they also have Security positions inside the company id be elligible for in future

[fierce acorn]

it’s how I did it too

I was promoted to SOC Analyst after a year in the help desk trenches

[tall niche]

hey guys, how can i get voucher prize?

[eager basalt]

you made it out of the hood

[vivid furnace]

Hey there. So, changing my computer's DNS server allows me to lookup dns addresses without my ISP knowing what I'm doing?

Because I wouldn't be using their default recursive DNS server, right?

[dense dagger]

They would still know

Think of the concept of “recursive DNS”

[upper panther]

Is software engineer a good entry level job for aspiring pentesters/red teamers

[dense dagger]

Yeah, I’d say so

Gives you strong grasp of the fundamentals of software, coding securely, etc.

If you also do roles such as dealing with code reviews, building unit tests, etc.

[upper panther]

Ohh sweet, they say help desk roles are even better but most help desk roles in my country deal with hardware more. Theres like few of that role that somewhat deals with AD and stuff. I also enjoy coding more than troubleshooting printers lol. Thanks for ur input.

[serene umbra]

Gave +1 Rep to @dense dagger (current: #19 - 433)

[upper panther]

Altho helpdesk rolewith access to AD is my ideal

[vivid furnace]

Wdym?

[dense dagger]

https://tryhackme.com/r/room/dnsindetail

[undone shore]

I mean, that depends. DoH to a server not controlled by the ISP should stop them seeing what you're looking up

Of course, it's slightly moot considering your next traffic will probably be to the IP address you just looked up...
Then again, half the internet is behind cloudflare now (slight hyperbole but 🤷‍♂️)

Or just use a VPN and be done with it

[sage mango]

What means by help desk

[warm hinge]

Hey all. Looking to get into IT security and not sure where to start. Any help or start points would be greatly appreciated. Looking to start a new career path.

[stoic cave]

Helpdesk is a job

[stoic cave]

#start-here

[small flint]

Is devsec ops a future proof role?

With ai and offshoring and all

[small flint]

How does one go from software dev to cyber, if you consider soft dev and entry lvl job

[cobalt reef]

software dev has different levels, cyber presumes alot of knowledge prior to entry

[warm hinge]

Thank you. 👊

[serene umbra]

Gave +1 Rep to @stoic cave (current: #17 - 471)

[dense dagger]

@broken idol

Looks like it spammed on other channels too

[flat sedge]

Please don't advertise without engaging with the community.

[mighty token]

Okay

[stuck arch]

Can we get a job by using try hack me certs??

[keen tundra]

They can help but they can't guarantee you a job 🙂

[undone shore]

Worth remembering that THM is not a certifying body. The things you get at the end of paths are certificates of completion, not certifications. At the end of the day they mean absolutely nothing when it comes to certifying your ability.

It all depends on the job you're after. If you're going for something very low level (e.g., internship, apprentice, junior role) with no other experience, then it might be worth including them as a way of demonstrating the kind of learning you are interested in (and that you go out and learn for yourself).
Otherwise it's a waste of space on the CV.

Good for your LinkedIn though 🤷‍♂️
... as long as you don't put them in the certifications section

[slim copper]

Why shouldn't I put TryHackMe certifications in certifications section?

[broken idol]

They're not really professional standard, or even a way to verify you done the work.

[dense dagger]

It’s in the first msg Muiri said, THM is not a certifying body.

[candid totem]

so, uhh...anyone have Network+ PBQ's? xD

[undone shore]

Because they're not certifications.

They prove that your account has completed training pathways. They do not prove that you completed them, nor do they prove that you completed them unaided (i.e., lack of proctoring).
There's also no real challenge there -- it's all just training materials, so no proof of achievement either.
On top of that, THM doesn't really have the weight behind it just now to stand up and guarantee that its certificate holders can perform to the same standard as entry-level certs do.

On a more social level, if I see a CV with those listed as certs (or top x% as an achievement), it's an instant indicator that you've misunderstood what the platform is for, and are out of touch with what actually counts as a proof of ability. i.e., it's a heavy red mark against your application.

[urban talon]

To anyone wanting to get into CyberSec, I am on my last year of computer engineering, I had 3 months experience in IT some years ago and I want to start my career in cybersecurity. From what I have been told and it makes sense is that I need more experience in IT because that is what most companies are looking forward. I followed @flat sedge advices and changed my CV, and today is going to be my second interview for a ServiceDesk IT position in a very well known company in my country that also provides Cybersecurity training, so I am hoping to grow inside the company and if I do land the job, whilst continuously learning about cybersecurity, and get some more certifications, hopefully one day just make the leap into a SOC analyst.

[keen tundra]

Good luck on your job interview 🙂

[bronze wedge]

I printed the certificate from my phone, and there was a formatting error. What can I do to correct this?

[fierce acorn]

don’t try to cheat your certification lol

[rugged lance]

Hello there, I’m curious what are some certifications you should get when looking for a job in the cyber security and IT field then?

[magic ingot]

Entry level, which includes CompTIA certifications, intermediate level(CEH) and advanced certifications (CISM, CISSP, etc...)

[rugged lance]

Thank you

I don’t know how to bump your thingy that I keep saying but thanks Tusk lol

[rugged lance]

I apologize but is there anyway to get certifications for cheaper? I was looking through them and saw they are a little bit expensive LMAO

[dense dagger]

I would not recommend CEH unless its a specific requirement for work or you live somewhere where it is highly sought after.

[dense dagger]

Certifications are often paid for by employers to upskill their employees.

I would not recommend any “cheap” certifications as there are a lot out there that are predatory in nature.

[rugged lance]

So how can you show your skills when trying to get into the field? I am currently looking for a internship and I have no previous experience in a field that is highly competitve with a bunch of smart people

[rugged lance]

That is fair, thank you

[serene umbra]

Gave +1 Rep to @dense dagger (current: #18 - 434)

[dense dagger]

There are different ways. Off the top of my head are the following:

• Home labs
• Open-source contribution
• Upskilling in different areas
• Helping out in local conferences and other non-profit orgs

Networking is also a big deal in landing a job/internship. Getting to know people in the field or your peers and getting them to vouch for you is something that works immensely.

[rugged lance]

Thank you so much, this info is stupidly helpful. I do have two more questions so I appologize for my ignorance LMAO

1. I'm guessing for the open-source contributions is to just look through GitHub and try to find things to work on?

2. What do you mean on "Upskilling" is that working on different projects I find or...?

[dense dagger]

Yeah, that can work or you publish your tools which you use and you feel like have value. I guess what I meant was being able to develop specific tooling and improving on your programming skills. You don’t necessarily have to contribute to open-source projects.

Honestly, anything that you develop by yourself (whether it be re-using code from other people) and publishing it in Github already is a big deal imo.

[dense dagger]

I meant upskilling in different areas and not just focusing on one thing. Cybersecurity is an added layer to existing IT. If you don’t know how certain technologies work, you won’t know how to secure it.

Right now, I’m studying up on email security like DKIM, DMARC, all that stuff so I can better understand it when I try to break or bypass it.

[rugged lance]

Ok so going into different skills got it

[rugged lance]

So anything from your own bash code or mods to certian tools would work as well? Again thank you for the information this helps a lot

[dense dagger]

Yeah and being able to understand the underlying technology. As an example, if you’re a SOC analyst; how are you able to detect Kerberoasting?

How can one understand what Kerberoasting is if they do not understand how Kerberos or for that matter, how AD Authentication works.

Let alone, how can you prevent it in the future or mitigate it (if the underlying issue cannot be fixed).

[rugged lance]

Lol as someone who ain't not know what that means thats a really good point! Thank you again cause now I got a pretty good idea where to go from here! Thats why you're the GOAT

[dense dagger]

I disagree, there are so many who are better than me here 🙂

[lusty haven]

anyone tell me can please tell me what skill set i should mention in resume for a entry level job

[acoustic nimbus]

Anyone has experience working as a Jr Cyber Hero for ThreatLocker? If so are you willing to share the pay range?

[dense dagger]

It should tailor fit to the job role you’re applying for

E.g., highlight your developer/programming experience if you are applying as a developer

[lusty haven]

yeah but still some skills that should be there.. im looking for entry level job roles

[dense dagger]

I don’t think you’re going to get a decent answer about that here.

[slim copper]

I have almost a year professional experience as an Information Security Specialist and I have Sec+. On top of that, I want to let recuiter know that I know about offensive security. How can I do it if listing TryHackMe certs are red flag?

[dense dagger]

Look at the job description, understand what they need, and tailor fit your resume for them.

If you’re going to apply and highlight Java but they want Python, you’re gonna have a hard time. ATS and initial HR screening may just stop you right there.

[lusty haven]

can you tell me some sites for resume making or ats checker trust ones ?

and which projects i do should or should include in my resume ?

[dense dagger]

If in your job, you currently practice some form of offensive security role, you can add that to your professional experience.

You should also tell the recruiter what your intentions are, moving up to a different role, and why you’re the best fit.

[dense dagger]

I’m not aware of any, sorry.

[dense dagger]

As I said, it should tailor fit to the job you’re applying for.

[lusty haven]

no worries

[lusty haven]

okay,thank you

[flat sedge]

I wouldn't include CEH on any good list of certifications, to be honest.

[flat sedge]

Entry level are priced to be affordable, as a way for people to get their foot in the door in industry. Higher level certs are intended to be paid for by the business because the real value in certs is that they prove expertise for client/customer/compliance reasons.

[flat sedge]

There are no tryhackme certifications. They are certificates of completion, which do not have any value in the workforce.

[lusty haven]

it is good to do ISC2 Certified Cybersecurity? currently it is free

[stoic cave]

Security+ is the baseline cybersecurity certification

Certified in Cyber i think was labeled as "prep" for it?

[dense dagger]

It’s not “free”

You pay the $50 annual fee

That’s how they get ya

[lusty haven]

yes but ig it is cheaper than others

[flat sedge]

the $50 fee is basically neglible, and employer should be paying/reimbursing for that

if they don't reimburse for it, re-evaluate your reasons for getting and maintaining it

[lusty haven]

does it has good value ?

[dense dagger]

No, I wouldn’t say so myself

[flat sedge]

Good value in what context? My advice is always the same for certs: Does this open a door to a job, or is it otherwise required by an employer?

[dense dagger]

Their curriculum was OK, not much but the industry is also saturated with so many beginner courses that you can pretty much learn what they have for free.

[flat sedge]

If so, get it, but the employer should be paying for certs and annual fees to maintain the cert status.

[dense dagger]

I haven’t seen it in any job postings, Sec+, CISSP, and CEH still seems to be the top dogs where I come from

[flat sedge]

If you are just getting started out, look for the jobs posting that has the role you want. Then start working towards those requirements. Dont' get a cert just because someone says it's good or bad, look at what you actually need to get your foot in the door.

CEH is garbage, and I devalue any organization that lists it as a req

[dense dagger]

I can just feel the copy-pasta HRs do

[flat sedge]

I get that in India it's still highly valued.... But it's a trash cert and EC Council is s a garbage company.

If HR can determine the reqs for a job without manager or expert input, I don't want to work for that company

[dense dagger]

Here where I am, its still honored and people seem to think its a good cert

[flat sedge]

It's a huge red flag

I've worked for some real garbage companies, HR should not determine what the needs are for hiring manager to fill a role

[lusty haven]

same here as well. people are after cert like CEH n all

[flat sedge]

again, if you aren't in India CEH is absolutely not worth it.

And if you are in India, your employer should pay for it because it is no longer cheap.

have you looked at the Irish immigration rules, and the Irish remote work rules? If you don't know what the eligibility requirements for Ireland is, you are doomed to failure from the start.

[lusty haven]

can please help with it bit.. because i have gathered info from YT

are you from there ?

[flat sedge]

Maybe you should look for the Irish laws

And not use YouTube as a primary resource for immigration.

[lusty haven]

i need offer letter from employer

[flat sedge]

@lusty haven Please do not DM nor send friend requests without asking first. It is against server rules.

[lusty haven]

really sorry for that

[undone shore]

As Juun said, TryHackMe doesn't do "certs".
Putting THM in as an extra curricular activity (and listing how it helps) is not a bad thing, especially if you don't have prior experience in offensive security. That said, your existing experience is likely to be a reasonable basis in and of itself.
As a general rule though, you use either experience (e.g., anything professional which is tangential to offensive security) or project work to demonstrate knowledge of offensive security.

The issue comes when you conflate a certificate of completion with an industry certification. They are very much not the same thing, and messing that up on a job application is just going to make you look like an idiot

[coarse drum]

i heard that theres websites that pay you to find vulnerabilities in other sites would that stand out to employers on a resume?

[undone shore]

Are you talking about bug bounty?
It's not exactly uncommon, but it's definitely a good thing, especially if you're after an appsec job

[coarse drum]

what about if you wanna be on the red team?

[undone shore]

That's generally an experience and certs thing.

[coarse drum]

so if i rack up certs and get my foot through the door with help desk then red team would be a challenge to obtain?

[undone shore]

I mean, racking up certs only to go into help desk isn't necessarily the way to do it. An entry level cyber role should be obtainable at that point (caveat being, check your local area).
Red team is usually a specialism from pentesting though, so you'd generally go that route into it

[slim copper]

I see, thank you for explanation

[serene umbra]

Gave +1 Rep to @undone shore (current: #9 - 795)

[faint abyss]

Guys how can i make my accounts super safe? Is it by only adding a step 2 verification and a complicated password that you wrote on your notebook?

Give me some tips

[coarse drum]

ok thanks for the tip 👍

[serene umbra]

Gave +1 Rep to @undone shore (current: #9 - 796)

[fierce acorn]

for your personal accounts? (1) very lengthy and complex password and (2) MFA enabled

if you want even better security, try passwordless authentication through biometrics or hardware keys

[faint abyss]

whats MFA

[fierce acorn]

multi-factor authentication

you already mentioned it when you said “two-step verification”

[faint abyss]

btw is phone sign in a good authentic log in?

[fierce acorn]

what do you mean by “phone sign-in”?

[faint abyss]

or.. if you sign up with another device lets say with a PC and as soon as you log in your phone says someone is trying to log in your account. "Accept" or "not"

[faint abyss]

i meant number one

where you put your personal number

when you try to sign up in your account

[fierce acorn]

that has nothing to do with MFA

unless you mean receiving a verification code

[faint abyss]

yes

[fierce acorn]

that’s MFA through text message, but it’s vulnerable to SIM card swapping by a very persistent attacker

[stoic cave]

It's better than nothing, but it's not the best

[left heron]

Can I turn my TryHackMe learning into a career? or would I still need a degree? Like obviously I would if I wanted to work for the FBI or something but just like in general. Can I?

Aaaahhh I see. So if take my learning and apply it to be shown some companies could be interested, because I already have the knowledge etc..

Thanks for the link too

Indeed, thank you for the advice

[dim rune]

bro that link is just

[wise island]

I know for a fact that Google does hire the most Phd's than any other company and boasts about it. They had one guy there program simple games like tic-tac-toe to minecraft servers.

[stoic cave]

Paywall and I'm willing to bet that the companies listed in said article are FAANG, which aren't really representative of the actual job market.

With a degree, you get paid more than your non-degree peers, you have more opportunities open to you from a contract requirement perspective, and you get an Alumni network

[zealous bay]

anyone ever pentested pharmacies?

whats the best military gig to get w cyber?

[stoic cave]

Kind of an odd question to specifically call out pharmacies. I'm sure some have.

[stoic cave]

If you're talking about the US, you have to test high enough for the MOS or Rate on your ASVAB, they have to have slots, you have to be physically fit, and you have to pass the school before you get your assignment. You're assigned based on the needs of that branch.

*for simplification I excluded the Order Of Merit list in my response

[zealous bay]

To the person who didn't ask the question, I can see how it could come across as odd. However just because you don't obtain the meaning of the mystery, doesn't mean it is absurd or suspicious of nature. Hmm...

[stoic cave]

Do you have an actual question?

[candid totem]

its oddly specific xD

[candid totem]

what branch were you, if I may ask?

[stoic cave]

None, my life path is just unique in that I've had a lot of exposure to how it works without actually being in or being a child of a military person.

[candid totem]

Interesting! If I could have avoided enlisting, I would have, but life is just so tough. Do I regret enlisting? hell no. I do believe I couldve done something more with it, but I wasnt doing what I wanted to be doing, and I wasnt good at what I was doing. Ive been doing aircraft hydraulics systems for (going) 8 years, and got tired of it, i quite literally was squirming to get out. That's where I applied and got approved for skillbridge, where I can change my career path to cyber security. and here I am. sorry bout the long post.

[stoic cave]

No worries, that's good that you have a path forward

I'd keep an eye out on USAJobs for veteran preference postings and if you have/had a clearance, sign up for ClearanceJobs

[tawny pelican]

im on linux fundamentals. im resuming work and my terminal(machine) isnt up and the button to open isnt there???

on tryhackme

scratch.. found it

[magic badger]

Hi Everyone, I am currently pursuing Security Analyst path but in this path only a few courses are free and other require subscription, can anyone please guide me on how I can learn those skills for free from some other platform or any youtube channel?

[dense dagger]

Professor Messer’s Youtube channel. TCM Academy has recently released free resources like Linux 101, PortSwigger Web Academy has free web application courses, OpenSecurity Training has multiple courses on OS internals, debugging, etc.

[magic badger]

Thanks for your response

[serene umbra]

Gave +1 Rep to @dense dagger (current: #18 - 435)

[magic badger]

Surely will check Microsoft Learn and other link you provided

[rotund valley]

can anyone give me idea of cyber security project , just a simple one, cause the deadline in 3 days

[broken idol]

Sorry, won't help with acedemic or work, I wish you luck!

[inner flint]

How do I install a qradar software in windows 11

[dense dagger]

Have you checked Google?

[inner flint]

Ya but there older versions

[dense dagger]

I just did a quick search and it seems doable. You just need to deploy it as a VM.

[sinful compass]

where did you learn bug bounty

[keen tundra]

Burp's Web Security Academy is a great resource for that imo 🙂

[knotty condor]

I wrote my first official CTF write-up and pretty stoked with the solution. Who else does write-ups to demonstrate their capabilities to new or exist employers?

https://github.com/webbie003/BSides-Gold-Coast-2024

[cunning shadow]

:hammer: twitch_swify2008#0 has been banned.

[neon needle]

wish i could not struggle to find a job in cyber without a degree in this world

[north garnet]

Yooo, I’m trying to find some decent websites for free pentesting experiments to get more familiar with bug hunting and exploring, I’d do hackerone but im not looking to get paid at the moment and competition for the small gigs is fierce, not really the best practice environment. Any suggestions?

[eager basalt]

this is pretty cool bro i hope you get alot of views on it

[brittle pier]

Google has tons

Use your resources

[keen tundra]

There's no such video , don't waste your time

[brittle pier]

@cobalt escarp

[mint harbor]

Hey i want to find a team who can hack commercial websites without getting caught...

[keen tundra]

You won't find it here, we don't do that, btw that's illegal

[mint harbor]

okayhh i was just testing this chat , i am safe now...wink...wink

r u guys into compititive hacking

[keen tundra]

https://tryhackme.com/games/koth

[mint harbor]

woah thanks

[visual drum]

Wow so cool bro

[broken idol]

If people are asking illegal topics, can you please ping a moderator, and don't mini-mod. 🙂

[broken idol]

This is illegal anywhere, not just in here, but it's agasint our community rules

[warm hinge]

study then tell us how to do it

[warm hinge]

but i can tell you this, after you connected to the website you want to hack open the terminal and imput this "#IP rm /root" it should do a scan of all root directories of the target

[keen tundra]

What's mini-mod 🙂 ?

[broken idol]

Imposing rules and not alerting a moderator to an illegal question.

[keen tundra]

Which rules am I imposing ?

[broken idol]

You won't find it here, we don't do that, btw that's illegal

[keen tundra]

What is a rule in this sentence ?

[broken idol]

It's now what is said, it's the manner it's handled.

[keen tundra]

And how am I imposing anything ?

That was just regular answer

[blissful eagle]

is cyber security the same as penetration testing
or the penetration tester can do the same stuff in cyber security but in a different way

[cursive meadow]

Hey guys, I want to purchase a small (13-14”) budget laptop for SOC (I have just starting learning but need a machine that will last me long; I want to start my career with it). so I was thinking what to purchase: Mac or Windows? My budget is about $700, and I already have an iPhone and iPad so being in Apple ecosystem would be cool. I also have windows desktop but I want to use my laptop primarily for study and work.

[keen tundra]

Cyber security is broader term than pentesting. Pentesting is like a sub-category of cyber security 🙂

[rustic frost]

Yooo peeps, a simple question that I hope to get everyone's perspectives:

Is 3 months internship sufficient to really understand and master the fundamentals of information gathering techniques? (Eg. OSINT, Digital Forensics, Recon etc) Or would 6 months be better?

[fierce acorn]

cybersecurity is a broad subfield of IT, which is an even broader field

there are many different career paths in cybersecurity, including security operations, security engineering, threat intelligence, vulnerability management, incident response, digital forensics, penetration testing, auditing/compliance, application security, network security, cloud security, ICS/SCADA/IoT security, and physical security

and each of those career paths also have their own specialties as well

[keen tundra]

It's about the time that you spend, it's about what you learn 😉

[rustic frost]

dont get u

[warped blade]

Its not about how much time you spend learning it, its about the quality of what you learn... you could spend years trawling youtube for content and not learn very much but spend 3-6 months with a good mentor and you'll be set for life. Learn from a good source

[keen tundra]

You need to constantly learn new things 🙂

[warped blade]

also that

[rustic frost]

In that case, should I apply for an internship or entry-level roles in a company? Just graduated from pre-uni and hoping to land a role (either internship or full-time) asap

[hybrid tundra]

yes, go get one asap.

[tiny moon]

Hey all! I’m a senior Python backend dev with 4+ years of experience, plus 5 years of experience in security, but physical security.
If I want to move to cyber security, what should I consider? I can’t really afford starting from entry level or internship, but then again - 0 years of experience in cybersecurity.
Is there some experience I can get on a side in cyber sec, that would count? But at the same time keep my day job.

[tiny moon]

Windows for sure. There are many limitations that come with MacOS, particularly for M chips. Like you won’t be really able to start normal Kali Linux in VM.

[warped blade]

Thats not somethign i'm willing to advise on... its a life decision for you to make friend.

[upper panther]

is it ok to put pentesting related skills in my resume when applying for a helpdesk role/entry level sysad role

[mortal quartz]

Of course, it demonstrates a genuine interest in all things IT

[crude ridge]

guys i have a guestion

what is an salary of an ethical hacker with a cissp

[stoic cave]

Depends on the location

[crude ridge]

lets say uk

or netherlands

[stoic cave]

Utilize a tool like glassdoor or your preferred search engine to conduct a query.

There are a lot of factors

[crude ridge]

which sector of cyber security gets has the highest salary

on my way to become a cybersecurity

[ancient fossil]

as with most things I'd look at which aspects you enjoy more rather than which earns more. there's a point in which a little more money doesn't mean much, but hating your job does

[gleaming rivet]

Road is long

[fierce acorn]

you know this dude is serious when he has a “hacker” pfp

[loud marsh]

After 4 years of grinding, i finally landed a job as product security engineer with no certificate just cs degree. Best of luck yall 💪

[storm valve]

congrats !

[keen tundra]

Congrats bro 🥳

[twin thunder]

congrat bro can you please tell us what are the steps you take to land the job

[zenith otter]

Hi guys, I am a cybersecurity college student who is looking to interview someone who has worked in the field in any capacity for at least 2 years.

I would prefer to do it over a Discord call or Zoom but we could also talk in DMs. Any replies are greatly appreciated, would take no more than 30 minutes of your time

[maiden monolith]

Congratulations 🎉

[neon needle]

What is cs ? Congrats though

[loud marsh]

Computer science

[faint cape]

I’d like to add onto the other guy about VMs, because of the different architecture of MacOs (ARM) vs Normal windows (x86) you would be unable to use a lot of vulnerable VMs to test your skills. Eg. metasploitable

[crude ridge]

What is a red teamers average salary

[stiff oriole]

Is this a good message to send a recruiter that I have no previous conversation with:

Hey Kelly! Just wanted to reach out about a couple applications that I had submitted recently. One for "Cybersecurity Specialist" and the other for "Junior Penetration Tester". I was just wondering if the jobs were still open or if I might need to look for other positions that might still be hiring?

ChatGPT says this might be better:

` Hello Kelly,

I hope this message finds you well. I’m reaching out to inquire about the status of my applications for the Cybersecurity Specialist and Junior Penetration Tester roles. I’m very enthusiastic about the possibility of joining your team and would appreciate any updates on the hiring process.

Additionally, if these positions are no longer open, I’d be grateful if you could let me know about any similar roles that might align with my background and skills.

Thank you very much for your time and assistance. `

[vagrant cargo]

I think your message suits the question better, ChatGPT seems to be writing a storyline for a book with the "I hope this message finds you well" it's rarely used in asking questions like these and just seems funny 🤣
If you still want to use ChatGPTs message I'd remove the I hope this message finds you well and replace just keep "Hello Kelly," and if you agree that you want to apply for similar roles you can use GPTs message. The thank you message is good. It depends on the prompt you give ChatGPT and you can always ask them to enhance those messages to your liking or tell them to provide multiple variations.

[serene umbra]

Gave +1 Rep to @stiff oriole (current: #1170 - 3)

[stiff oriole]

That's pretty much what I was thinking too. I did remove the "I hop this message finds you well". I customized a couple other things and sent the message. Thank you for your thoughts and confirming that I wasn't being over the top

[serene umbra]

Gave +1 Rep to @vagrant cargo (current: #2347 - 1)

[vagrant cargo]

Yeah, no problem!

[loud marsh]

I have computer science degree, during my time in college I participated in cyber security competition, write security blog, build my own website, build software from scratch, learn how to write documentation, build my own vm and workstation, doing research as an assistant, etc. Basically learn shit ton, and mostly hand on. During the interview I'm trying to explain technical thing I did.

[tame marsh]

What happens next?

[loud marsh]

Wdym

[coral island]

What’s a good way to land a cyber security job. I’m looking for entry level of any sort. I graduated college in information systems and currently taking IT courses on top of THM

[elder spire]

Hi guys! I’m new the Cybersecurity and I was wondering what this server was abt? Would it be possible if someone could brief me abt the server? (Also I hope I’m texting in the correct channel)

[keen tundra]

#start-here message

[elder spire]

K! Thanks

[serene umbra]

Gave +1 Rep to @keen tundra (current: #33 - 252)

[stiff oriole]

Is it in bad taste to do a Zoom interview for a new job at my current place of work or should I plan to stay home for the interview?

[broken idol]

eh.

I'd have it home, or outside the current employers premises.

[stiff oriole]

That's what I was thinking but wanted to make sure

[faint abyss]

Hi mate, sorry for messaging you after few days but is this the one your talking about?
https://www.youtube.com/watch?v=e3Mph7kqE1E

OR this one

https://www.youtube.com/watch?v=q-e--04cfqU

[fervent drum]

hi there

does anyone know the scop of SecOps?

[dense dagger]

That depends where you live, skillset, their budget, etc.

[fierce acorn]

yeah, but you should be enabling MFA everywhere, not just Gmail

[left talon]

can anybody explain the basic difference between bug hunting and pentesting?

[gritty peak]

pentesting = getting payed no matter what. bughunting = payed when you find something. 😉

[left talon]

um, any other difference brother?

also, are these both ethical or are we considered grey hat hackers for doing so?

[gritty peak]

the main difference is in contract / employment

everyone can be a bug hunter, but you need a contract for being a pentester 😛

[left talon]

ohh thanks

so, to be a bug hunter, can you give me a guide or something how to be?

[gritty peak]

https://tenor.com/view/debug-debugging-bugs-kill-it-bug-gif-20336819

you are a bug hunter now xD

[mint bear]

https://tenor.com/view/cute-gif-4258015470609419345

[turbid swift]

I have done courses regarding penetration testing. Also the studies in cyber security in my university. I am looking for job in penetration testing.

I would appreciate any guidance in hunting to find the jobs/projects

[keen tundra]

LinkedIn could be your best friend for that 😄

[tawdry isle]

hii guys

[keen tundra]

Hi, welcome 😄

[tawdry isle]

i have a doubt

my qualification is 12th and im learning ceh right now . when get complete ceh can i get job in cyber security ?

[pliant ore]

you can get a job in Cyber Security without certifications . What matters is to like the job you want to do and to show them your skills , your knowledge . You can have an OSCP and still don't know how to proxy , spoof etc etc . What's the point , if you feel me .
Cheers !

[summer flint]

maybe thats dumb question

Linux or Windows for daily use ? (for a Cybersecurity learner)

[wise island]

both - Work on writing reports and emails on windows and read logs in linux.

[radiant lodge]

Both ... use some VM to have it all !^^

[stable spear]

dual booting is good or not ?

[loud marsh]

Too much work, just get a decent pc and do VM

i did this before so much hassle, get dual monitor

1 monitor for vm linux and other 1 for window

[merry axle]

Just start. If you want a platform look at bugcrowd

Register as a hacker

Just don’t fall out of scope. That will lead to bad things

[left musk]

Hey guys has anyone heard of this Ucertify prep exam website

[eager basalt]

seems legit to me

[left musk]

they arent on the authorized partner list though with comptia

So I thought I would ask for opinions

[solid sleet]

Hello guys I'm new here, I'm a 2nd year cybersecurity student with a big interest in pen testing. Any tips to improve my skills?

[keen tundra]

You can check out these resources 🙂

https://tryhackme.com/r/path/outline/jrpenetrationtester

https://tryhackme.com/r/path/outline/redteaming

[solid sleet]

Cheers!

[winged horizon]

anyone know of a company hiring a entry level soc analyst in San Diego, CA, USA , im in my 5th month of cybersecurity bootcamp at SDSU.

[keen tundra]

Check out on LinkedIn , I'm sure you'll find something, especially in CA 🙂

[winged horizon]

100 applications in linkedin and other sources so far xD

[keen tundra]

There's also jobs channel on Discord, check it out, maybe you'll find something there 😄

https://discord.com/channels/521382216299839518/775144008853749770

[winged horizon]

😮 thankyou

[thin cape]

Hello guysn for a recruitment I had to pass a CTF and I have to write a penetration report. I looked a little at what is done on the Internet but I admit that I do not know where to start... Could I just take a report that is already done and modify it accordingly?

[fringe spade]

Find a report template online, there’s plenty

[thin cape]

I just found some I'll check thanks !!

[serene umbra]

Gave +1 Rep to @fringe spade (current: #270 - 21)

[keen tundra]

You can check out TCM's resource on how write a pentest report 🙂

https://github.com/hmaverickadams/TCM-Security-Sample-Pentest-Report

[thin cape]

Awesome thanks a lot

[serene umbra]

Gave +1 Rep to @keen tundra (current: #32 - 282)

[karmic crown]

Hi

[hot creek]

Hi , You can refer this link where you can find out the great options. https://github.com/The-Art-of-Hacking/art-of-hacking/tree/master/pen_testing_reports

[thorny light]

Entry cyber is so fucking awful trying to break into 😦

[fierce acorn]

because “entry-level” cyber isn’t really entry-level

most jobs are mid-to-senior-level positions, and even if they don’t have experience requirements, you’re at a disadvantage to those who have had internships, certs, projects, etc.

[warped blade]

Theres a problem with the entire cyber industry, something that this server tends not to suffer from, and that is elitism. It's good that there is none of it in this learning environment tbh.

[fierce acorn]

yeah, but it’s also good to set expectations to those who are new to cyber

as much as pentesting sounds fun, the chances of your transitioning/obtaining such a role with very little to no security work experience is very slim

[fathom hawk]

Without looking specifically at career starting are there any rooms/pathways/other sites that u would recommend trying out to determine if pen testing is a potential interest for a career?

[stoic cave]

Do you have any examples? Things being labeled "elitism" could just be people being blunt/real.

People don't always have the best tact in the industry, just a byproduct of working in tech

[warped blade]

As someone yet to break into the scene, so technically an outside observer, i've seen good people demoralised and disincetivised by other communities refusing to assist learners, i've also attended lessons and been forced to teach lessons that are aimed at non programmers with the intent to introduce the basic fundamentals of programming.... The content i was contractually obliged to teach was nothing less than a brain dump from a very experienced programmer demonstrating... "Look how good i am i bet you can't do this"

So whilst my label "elitism" is strong and how i wish i'm wrong, i stick by what i said. There is too many people out there with the mindset of i did it the hard way so you can do it the hard way because i'm better than you... and like i said... definitely not an affliction that this community has!

[warped blade]

I see your point and perhaps my comment also lacks tact

[stoic cave]

I owe a response to the message you took the time to write, busy at work. Ping me in a few hours if I haven't responded to you

[warped blade]

I'll be firmly tucked in my bed snoring like a hibernating bear.

[stoic cave]

Lol ok

[fierce acorn]

I would recommend researching other specialties first, as sites like TryHackMe and Hack The Box already give you a taste of different pentesting tools (not necessarily a feel of the day-to-day job of a pentester though)

you can use sites like CyberSeek (https://www.cyberseek.org/) to explore different pathways for you, and I highly recommend Helen Patton’s book “Navigating the Cybersecurity Career Path” as an introduction to cyber careers and how to get the job you want

[fathom hawk]

My school mainly focused on defense/logs/infra so attack is a bit of an enigma for me that I wanted to dig into to either rule out or look into further

[fierce acorn]

you could do some of the red team pathways on THM or complete a certification like TCM Security’s PJPT

gives you a pentesting knowledge/skill baseline without committing too hard into a career path

[warped blade]

Knowing how to attack will make you a better defender and knowing how to defend will make you a better attacker... always good to know the methodologies of your "opposition"

[fathom hawk]

Ah well that's why I wanted to look further into it since it wasn't really covered beyond juice shop and metasploitable

[warped blade]

Thats a start, i'd follow the good advice @fierce acorn just gave and try out the red team pathways, something like Jr Pen Tester to start with. Shouldn't be too taxing to get through!

[distant pier]

Hopefully you'll meet humble individuals who are very willing to help you. 🙏

[warped blade]

I hope so... i pride myself on being a good teacher and helping others get good value from the lessons i teach... Unfortunately alot of people i come across don't share that mentality.

[icy hollow]

Hey, I just finished TCM’s 12-hour YouTube course on practical ethical hacking. I’ve heard mixed reviews about the second half, but I’m curious about where I should go next. I’m not very familiar with THM yet—I just signed up, and it’s recommending the Red Team path. Should I start that right away, or would it be better to take a networking class or something from FreeCodeCamp? Or maybe a more in-depth Linux course? Thanks, everyone.

[stoic cave]

#start-here

Start from the bottom on THM and use it as a refresher if you want

Work your way through the paths and hone your methodology

[icy hollow]

thank you will do

[left musk]

what site would you all recommend for learning programming and more pentesting courses?

[left talon]

can anybody guide me to learn cybersecurity, networking, linux, bit of programming, etc to become a bug hunter and finding my first bug?

[stoic cave]

You can go to #start-here to learn more about the TryHackMe learning platform and potentially learn some of the materials you mentioned

[wraith sail]

hi

[hearty tree]

Do you recommend that a college student (like me) takes a part-time IT job while studying? Or should I prioritize trying to land a cybersecurity role directly? I have to work either way, regardless of whether it's this job or another one.

I am absolutely bored of my (non-IT) job (here in the United States) after 3 years, but my part-time schedule (3 shifts per week) will align perfectly with my classes, and the money is adequate for my simple needs. My job already told me that there are no opportunities for students, and they don't hire for cybersecurity positions.

I have few bills, live at home too, and I am wondering if I should:
A) Just ride it out at my current job until I am competitive enough to apply for internships (probably until at least the beginning of 2026)
or
B) Try to land a relevant, part-time job, working helpdesk/any entry-level IT jobs ASAP to become a stronger candidate by the time I shoot for internships

I am (very slowly) going to start learning on my own on the side using TryHackMe + other resources. Realistically, I am hoping to look for something like a security analyst role once I am close to graduating/recently graduated (in at least 2.5 years), although I do enjoy programming. University is going to be one of my highest priorities right now. I have lost all motivation to even try at work, but I just go through the motions anyways lol. It just feel like my job isn't helping me get any closer to working in cybersecurity at all.

Any and all opinions are welcome, and are very much appreciated. I take every bit of advice I can get! :}

[next swift]

Do you like really love it kinda stuff?

Like programing, hack (Ethical), Etc.

Then if I was you I would choose B

What I mean basically I would do what I love doing I don't want to die doing something that I have

I want to live life and do the things I love doing

[hearty tree]

I was trying to land a straight up programming job (full-stack dev) before going back to school, but that didn't work out
(I stopped the search shortly after only 150ish applications)

I'm pretty honed in trying to work in cybersecurity instead, idk if I can actually program 40/h week,
but I would love to incorporate programming skills somehow

[hearty tree]

I completely agree with this sentiment,
and I hate working my current job, although it was kind of interesting for the first 2 years 😪

[next swift]

What is the job your in?

[hearty tree]

I work in a security alarm company (which ironically doesn't have any opportunities here for students, and doesn't hire for cyber at all)

we get alarms on our computer screen, and call to see if everything is okay,
then oftentimes call police/fire/ems to go check

[next swift]

You would produce products, services, anything basically
If you're doing it with your love like inside your heart you love doing that

[next swift]

Kinda boring

[hearty tree]

what do you mean?

I am volunteering for an open-source community right now that focuses on programming (as a moderator for them),
but I haven't contributed to their codebase (yet)

[next swift]

I would fake my age and work as a freelancer 🙏

Haha

[hearty tree]

I don't have to fake my age lol,
but regardless

really appreciate your advice :}

[next swift]

Hope everything works out for you

Cya

[hearty tree]

Thank you, I hope everything goes as you plan as well 😇

[serene umbra]

Gave +1 Rep to @next swift (current: #2352 - 1)

[deep mantle]

Heyy

Is there any opening in anyones company for 1 yr of exp?

In red or blue team

[loud elk]

Hii

[keen tundra]

Hi, welcome 🙂

[loud elk]

Thanks

[karmic crown]

Did you guys help me because my attackbox/kali eror,im take patch on windows cmd..

[keen tundra]

What's the problem ?

[karmic crown]

Cant conect to the server

My virtual machine says "failed to connect to server"

[keen tundra]

If you aren't premium user , your AttackBox don't have Internet Access

[karmic crown]

Im premium user

Since im play on the windows AD,my attack box and kali little eror😭

[keen tundra]

verify and provide a screenshot of what's going on 🙂

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[warm hinge]

I am going to do some research on this later but does anyone know a path on how to approach cryptography? I did a short search yesterday and all I saw was someone recommending getting a PhD in mathematcis and computer science before getting a job in the field but that's pretty far out from where I'm at now. Things like certifications that may be related would be helpful too.

[keen tundra]

Check out this resource if you're interested in crypto

https://tryhackme.com/r/room/publickeycrypto

[warm hinge]

oh ya i saw this room in part of my search yesterday! Thanks for the link.

[keen tundra]

Check this one also 🙂

https://tryhackme.com/r/room/cryptographybasics

[warm hinge]

sweet, thanks for the quick response

[warm hinge]

Hello everyone!

I had query regarding my resume. I'd appreciate of someone who hires cybersecurity engineering roles could give me some answers.

I am a fresher in my final year of uni. I have done 63 professional certifications. How many certificates should I showcase on my resume?

[fringe spade]

Certifications or certificates?

[warm hinge]

I have both but certificates are more in number.

Certifications are mostly from coursera.

[undone shore]

I'm gonna go out on a limb and suggest probably not many of them.
Feel free to post a redacted version of your CV and happy to take a look though 🙂

[proud flint]

Does anyone have links to some internship opportunities

[stoic cave]

Take a look through #jobs-board

[proud flint]

Thanks

[serene umbra]

Gave +1 Rep to @stoic cave (current: #17 - 473)

[solemn lichen]

i am planning to take exam in entry level in cyber security.

I don't have any knowledge in this area just have a few knowledge in operating a pc and laptop.

[keen tundra]

You can start learning here 🙂

https://tryhackme.com/r/path/outline/cybersecurity101

[solemn lichen]

thank you. yes i am starting to learn here.

[serene umbra]

Gave +1 Rep to @keen tundra (current: #28 - 329)

[abstract fjord]

hello, would like to ask a question regarding career choices, im conflicted between taking security+ or taking a certification with proof of practical skills such as PJPT/PJSA or BTL1. Im currently an IT Assistant and would like to land a cybersec position as my next job. any tips?

[undone shore]

Check your local job postings, see what people are looking for

[fierce acorn]

I would recommend going for a well-known HR bypasser like the Security+ first, but yes, check your local job postings

I highly doubt U.S. positions will be asking for a PJPT/PJSA/BTL1 more than a Security+ though

[undone shore]

Worth going and speaking to people in your area as well. Network. Go to conferences. Get your face out, etc.
Ask them what they're looking for.

Although yes, I agree, as a general rule Sec+ is likely to be a stronger choice.

[abstract fjord]

so the ideal route right now is to study for sec+, then maybe learn the practical skills from thm/htb/homelabs and just include it in my skillset. im from the ph and lots of job postings either asks for CEH sec+. was just conflicted by the fact that these certs are purely theoretical

[undone shore]

I mean, screw CEH if you can get away with it.

EC Council suck.

Yes though, that's a way of doing it, but you'd be better speaking to people locally about what they expect to see.

[abstract fjord]

yea ive seen lots of negative feedback regarding ec council

and their pricing to their exams

costs more than what the cert can give :v thats why im thinking of investing more in other certs

might take sec+ for now and get monthly subscription to thm

[mild rampart]

Hello world!!!

[keen tundra]

Hi, welcome, nice to meet you 🙂

[austere vigil]

What would be the best alternative for CEH. I don't know why, however, ceh is quite a requirement to get a job in security field.

[keen tundra]

Maybe Pentest+

[chrome dagger]

Hi !
I'm in my 4th year of studies in cybersecurity (France).
I've 2 years before having my Master (so 5 years after highschool).

I really want to work on SOC, being network analyst, or other similar cyber job.
I'm working on the SOC(1) on THM and learn few things that changed my mind.

What may i try after this room to complete my path ?
I don't necessarly want to work in France, but maybe Finland, Sweden, or Canada.

I want, later, to pass CCNA, CEH and BTL (https://www.securityblue.team/certifications/blue-team-level-1). The least one enjoy me.

If someone does work in this domain, i'd like to talk to know a bit more about how it is in real life, which certifications are good, or not, and what do I have to focus on.

Thank you very much, and sorry if my english is not perfect, i'm working on that too.

[keen tundra]

Hi , welcome , nice to meet you 🙂 . Those 3 certificates are all oriented towards different fields . CCNA is oriented towards networking, CEH is oriented to general cyber security and BTL is oriented towards blue teaming. I have a CCNA so I can help you if you have any further questions for it 😄 .

[undone shore]

Stay away from CEH unless you absolutely need it to meet the specifications on job postings (unlikely for France afaik).

[chrome dagger]

Hi, thank you 🙂
Is CCNA worthly for a SOC job ?
I mean, isn't there other certifications, maybe with lower prices, to begin ?
As i'm student, i really don't have the money to pass CCNA for now...

[serene umbra]

Gave +1 Rep to @keen tundra (current: #27 - 334)

[chrome dagger]

Ok, thank you
But why do I need to stay away ?
It's hard ? or maybe not worth ?

[undone shore]

It's outdated, outright wrong in places, and comes from a company with an abysmal reputation (plagiarism and a few scandals in the last few years come to mind).
The reputation of CEH is down the drain for that reason, so many employers don't care about it these days either. The ones that do tend to be... Backwards... To say the least

[keen tundra]

CCNA is oriented towards networking ( how networks function, routers,switches,firewalls,routing protocols,etc. ) . If you're interested in SOC positions , BTL can be a good choice 🙂 .

[undone shore]

@abstract fjord cc/ ^^^

[chrome dagger]

Ok, i never seen anything about that, thank you !
U save me a huge pack of money xD

[chrome dagger]

Ok, i'll stay on BTL !
I knew it last week, but never seen anyone with.
Maybe i'll try after completing both path of SOC in THM, to give me some experience with the common tools and mindset

[undone shore]

For SOC stuff you'd be better off with BTL and vendor specific stuff afaik. Some of the Splunk certs, for example.

Although general certs like CCNA for networking will never go down badly. A solid technical foundation is super important.

Knowledge of cloud security will benefit you a lot these days as well

[chrome dagger]

So I have to focus on BTL and explore specific stuff.
Seems right.
Is there a list somewhere with recomanded certs ?

And are THM paths for SOC good for a job ?
I know that it's better than nothing, but do my future manager know it and know what i worked with it ?

[chrome dagger]

Yes, I had somme certificates with LinkedIn Learning on cloud security

[keen tundra]

SOC paths on THM are a great starting point 🙂

[chrome dagger]

Perfect, some exercices are hard ^^'

[undone shore]

Heh, you're getting to my limits for blue team hiring knowledge there.
From a pentest perspective, putting THM down as an extra curricular activity on your CV -- especially as a junior -- can be helpful, as long as you don't put too much stock in it. I'm not sure about the blue team side of that though.

[chrome dagger]

Ok, is should be the same... I hope.
Thank you very much

[serene umbra]

Gave +1 Rep to @undone shore (current: #9 - 800)

[native surge]

guys i was creating a tool using python, very basic tool in which i would send arp request and catch arp reply but in that i can change the content of the arp packet such as changing my mac address and ip address now the problem i'm facing is that if i change the ip address obviously the arp reply would go to the changed ip address so what should i do in this situation, i was recommended that i should learn about port forwarding but i don't understand even after read some topics about it. Do you know what i should do in order to get arp reply from ip address that i am not connected to

[eager basalt]

got that mofoing security+ feeling like a god damn duke dennis

i look at everybody as a bum now

im the shit

[keen tundra]

Congrats 🥳

[eager basalt]

hey i think OSCP is next and then OSXXX

[keen tundra]

Good luck in your journey 😄

[thin comet]

What is OSXXX? 😮

[eager basalt]

he is the final boss ,,,

EXP-401

this mofo is the last dude u wanna mess with

[crystal cradle]

BTL is great for entry level SOC. I would also suggest splunk certs if you don't already have them, maybe pick up one of the AZ security certs when they're on discount, and would suggest to participate in some blue team oriented ctfs like belkasoft or cellebrite and have a blog for your writeups to live in that you can reference in your resume

[chrome dagger]

Hi
AZ for Azure ? just seen the prices, and I understand why u say "wait for discount" xD
But ok, thank's i'll check it 🙂

[crystal cradle]

howdy hey :)

[chrome dagger]

I found this site : https://cyberdefenders.org/starting-point/?next=/online-labs/6133c324-7aef-4a75-b1ad-91f92e799ac3/
Do u know it ? It seems to be great for a start

[crystal cradle]

I've not used it myself but have heard some good feedback about it from buddies of mine

[chrome dagger]

And for the blog, should I write my THM exercices too ?
I don't really know how it's supposed to work

[chrome dagger]

perfect, I will try after THM's SOC paths

[crystal cradle]

I usually recommend https://letsdefend.io/ alongside the BTL1 course, very good supplemental material and it gives you something to talk about during interviews as far as experience / projects you've worked on.

And for the blog, should I write my THM exercices too ?
I would say writeup practice is good regardless, but if you're focusing on SOC, writeups for SOC-based thm rooms, as well as keeping track of letsdefend / BTL1 labs, will be more important to focus on rather than non-SOC related rooms

[chrome dagger]

thank you very much for all of this !
are you a soc expert ?

[serene umbra]

Gave +1 Rep to @crystal cradle (current: #715 - 6)

[crystal cradle]

Nope I'm in forensics, but I work closely with our SOC team and have a bunch of buddies in SOC / detection engineering :)

[chrome dagger]

great !
I don't really know about forensic for now, but it must be exciting and a bit stressfull xD

[green python]

Anyone here in canada ? Im graduating cybersec in June and i have an internship to do in April … Is there any place good for looking at opportunities, ive tried so many things from the government to linkedin and indeed but i always get turn away … is it because i dont have my diploma or am i too early ? Km stressing because i really love the field and we were promised jobs but its hard to find

[tranquil cosmos]

Hi

[winged horizon]

I'd say comptia Security+ is a good one to get if youre new and want to jump into SOC.

[chrome dagger]

Is it correct with my focus ?
I really want to work in SOC, and i'll try to focus on networks

[winged horizon]

I'm also a student and I also want to get into SOC and most jobs I see ask for security+ and in general is a good cert to have. I'm going to be getting it as most of my teachers have recommended it and its cheap too, but I get a voucher from my school so I'll be saving a bit of money:D.

[chrome dagger]

Oh Nice !
I hope that you could have it without any problem ^^
I'll keep it in mind, thanks student mate 🙂

[serene umbra]

Gave +1 Rep to @winged horizon (current: #2357 - 1)

[winged horizon]

No problem, goodluck to you too, we're all gonna make it🥹

[keen tundra]

Good luck guys 😄

[chrome dagger]

Ofc we will !
So maybe let's see you in a meeting or smth😉

[weary crow]

hi,i want using rust in cyber path,what i msut choice my cyber path/roadmap,plz recommended! thx

[stoic cave]

Not sure I understand, you want to use the programming language rust in a TryHackMe pathway?

[weary crow]

is not good?

i new in here sorry for stupid questions

[stoic cave]

No worries, just trying to understand what you are asking

[weary crow]

i want learn cyber security,i understand exsisting many path(offensive,defensive,redteam,blueteam,penetration testing) and i want using maybe for script rust language

[stoic cave]

Try going to #start-here to get a better idea of the path forward

[tame marsh]

Don't focus on all path at the same time. Try to filter out our specific goals and figure out your dream job path.

[pale scaffold]

Does anyone have any reference for VAPT job or internships?... if have please dm me

[eager basalt]

Idk

[tacit belfry]

Hi everyone I was hoping for some advice regarding how to look for internships I'm based in south africa however we dont have many internship opportunity's here and started thinking I should probably start looking for international companies. Mainly interested in pentesting and red teaming.

[keen tundra]

Try to use LinkedIn 😄

You can also check job board on the server

https://discord.com/channels/521382216299839518/775144008853749770

🙂

[tacit belfry]

Thank you very much @keen tundra

[serene umbra]

Gave +1 Rep to @keen tundra (current: #24 - 371)

[dense blaze]

Hello, guys! I am currently enrolled in a cybersecurity program at my university, but I have a problem: I don't know which path in cybersecurity I should pursue. Do you have any opinions or tips that could help me with this? I would love to specialize in something more specific.

[keen tundra]

Check out this article and see what fits you the best 😄

https://tryhackme.com/r/room/careersincyber

[somber epoch]

well what would be a good road map for some one who wants to get into pentesting, i'm 29 and got into try hack me because i always had a love for computers but felt my family didn't have the money for me to go to college so i decieded to just work in the automotive field

[stoic cave]

You're going to need to make a transition to the industry, your entry point is more than likely going to be Helpdesk roles, which may mean a paycut. You need to decide if you have the ability to take that paycut.

[somber epoch]

well i absolutely can since most of what i've done so far has be 18 to 16 and hour jobs

pay not hours sorry

[stoic cave]

I would also say don't base your expectations of the career field off of TryHackMe. A lot of pentesting, and cybersecurity in general, is report writing, as in 80-90% of the job.

If you're looking to transition, I would review Professor Messer's A+ course until you have a good grasp on that material

[somber epoch]

makes sesense, i only got into try hack so i can try learning some stuff i didn't already know

[somber epoch]

Well my goal was to get my comptia A+ first then to maybe try to do some projects.

[stoic cave]

I would just study, don't get it necessarily, and start applying

[winged horizon]

I'm currently trying to get into the SOC analyst role, and I find that it's a good pathway into other strains of cybersecurity, especially if you're new in the industry.

[blazing stream]

@somber epoch don't like the automotive field? I'd think that has similar income, and less competition?

[somber epoch]

i know but it was never a passion for me

[blazing stream]

Ok. I understand.

[winged horizon]

I have a teacher that currently works in the Cybersecurity field for mitsubishi, maybe just get a few certs and transfer from your current position.

[somber epoch]

@winged horizon well at the moment the place i am working at is shutting down due to the owner selling the place, so i am in the middle of studying and trying to find another job as i do so.

[blazing stream]

@winged horizon Thats a smart idea.

[winged horizon]

Got it, well maybe in your new application you should add your new tech experience and you might land something more in the tech world that youll enjoy!

[eager basalt]

hey guys i got my Sec+ which certification is good to get ? any suggestions i usually dont like MCQs but yeah

[winged horizon]

Sec+ is a really good start that will even land you a job, ISC2 Cert [CC] is free and has good weight for the cybersecurity industry.

[somber epoch]

true I've been technically a jack of all trades. I've done warehouse work, shipping an receiving, preventive maintenace on both jocky trucks and box trucks and i'm currently at a scrapyard.

[eager basalt]

is that CC one going to impress the HR ? i really cant sit and not learn i need to get me a well recognized certification after Sec+

[stoic cave]

No, ISC² has been on a downward trend

Since they're going to be applying for Helpdesk, there are typically no requirements for professional certifications. More often than not it's do you know the components of a computer and do you have the willingness to learn.

[winged horizon]

I just saw a post today on linkedin from a hiring manager that showed a list of 5 highly recommended certs for entry level cybersecurity, sec+ and ISC2 [CC] was on the list as well.

[eager basalt]

To be honest ive seen Sec+ everywhere

i havent seen CC in many job descriptions

[winged horizon]

yeah sec+ is more known, but if you just want to add experience and certs to your name I recommend CC, otherwise hands on experience like projects, will be the better add on to your resume.

[stoic cave]

Cool, is it in their job descriptions for the roles they're hiring for? LinkedIn rewards people for posts like that because they generate impressions. They can put that post together, but do they actually live by it is the question

[stoic cave]

Certifications are not experience, personal projects are also not experience.

Experience, when on a resume, is specific to professional experience.

[eager basalt]

bro i know experience beats everything but we talking about a post graduate who wants to put his foot in the door so recuiters would know he so eager to learn and certs are the best way to demonstrate that also blogs THM walkthroughs perhaps projects

[stoic cave]

It's best to look at the roles you'd like to apply for and not necessarily rely on overly broad certification tier lists

[winged horizon]

In my resume I include project experience, not necessarily relating to job experience, if I haven't worked in the industry there is no other way of referencing experience.

[eager basalt]

facts

but here is the thing even the entry levels ones be like " CISSP , CISM , SEC+ , OSCP "

[stoic cave]

It can go in an extracurricular/projects section, but it doesn't belong in the experience section. Your experience section is also any professional experience you may have, not just computer/tech

[winged horizon]

haha foreals

[eager basalt]

like bruh how the hell am i suppose to get the CISSP when i never worked more then 3 years in IT

[stoic cave]

You have to remember, entry cybersecurity is not entering the workforce entry. Pentesting is also not entering cybersecurity entry

[eager basalt]

good point

[winged horizon]

you really do have to start from the bottom almost not relating to cybersecurity like IT support or helpdesk, to just get hands on experience with anything relating to tech

[stoic cave]

If you're a postgraduate, apply

The problem with being a postgraduate is that you're likely going to be priced out of entry level roles. Companies don't want to take the risk of you leaving so soon as well.

[eager basalt]

i had some offers for cyber and help desk but they like 40k or 50k

horrible

[winged horizon]

gotta start somewhere

[stoic cave]

Depends on where you are living

But entry level salaries aren't typically 6 figures. FAANG and high COL areas skew the data

[eager basalt]

i guess imma find me a internship or something i havent tried that bad i only applied to 10 jobs and heard back from 6 of them

i gotta apply like 1000 a day

[stoic cave]

Shotgunning your resume isn't a good thing

[winged horizon]

work at that 50k job for a year and then apply to something better

[eager basalt]

yeah thats why i dont do it

[stoic cave]

Internships are also typically reserved for people in school

[eager basalt]

i mean we could use internship as professional experience

[stoic cave]

Yes, but if you're not in school you more than likely won't be considered

[neon needle]

What's the good plan for someone with no prior diplomas and certs ? 🤓

[stoic cave]

Without a degree or prior professional experience, you're best bet is likely going to be something like IT Helpdesk

[neon needle]

Jesus, i have to find a 0day on hackerOne now

😏

[stoic cave]

Why?

[neon needle]

Well, idk if in France it's the same, but they start to take you seriously with a Master

[stoic cave]

I am not familiar with France, but I think @tacit bobcat is?

Sorry Hydra if you're Portugal, I can never remember

[tacit bobcat]

yeah but not super familiar with French degrees

[neon needle]

I mean, unless if you are very talented which is somehow acquired in time

Your french Hydragyrum ?

[eager basalt]

Let’s just be honest none of here could do no 0day exploit

[neon needle]

my take is that you need to be on very specifics technical domain to start exploiting specifics 0days

[tacit bobcat]

I'm a lost Canadian

[neon needle]

Why lost ^^ ? I mean, Canada is freaking cool

[leaden basalt]

For those who studied for sec +, is it better to go through some thm rooms while also doing prof messer videos + study guide?

[keen tundra]

Why not 😄 ? You have this pathway oriented to people who're interested in Comptia certs 😄

https://tryhackme.com/r/path/outline/pentestplus

[onyx herald]

Hi

[distant monolith]

Hi

[keen tundra]

Hi , welcome 😄

[keen tundra]

Hi , welcome 🙂

[broken idol]

You've already been asked not to do this.

[tall nimbus]

i love CISSP

[gleaming remnant]

I don't

[mortal quartz]

Its due to HR writing those ads, the hiring manager is not expecting that

[warm hinge]

from where do You start learning step by step

[mortal quartz]

?

[keen tundra]

You can start with this pathway step-by-step 😄

https://tryhackme.com/r/path/outline/cybersecurity101

[wild bramble]

What about Microsoft cyber security analyst certification? Is it good start in Cyber security?

[keen tundra]

That's pretty basic 😦 . Coursea courses don't really have any value .

[wild bramble]

I really need help to start 😭. I tried Microsoft cert but it s feel bored

[keen tundra]

Free certificates like those on Coursea don't really have any value 😦 .

[wild bramble]

CompTIA security+ is a good start then

[keen tundra]

Yeah , that's kind of industry standard 😄

[green harness]

I started with google cybersecurity course

Then I moved to the htb and thm

They provide great value 👏

[wild bramble]

I see som YouTube video they toled that Microsoft sc-900 is a good start ...

[wild bramble]

I'm confused

[keen tundra]

You can start learning with it , but don't expect to get a job after finishing that couse 🙂

[green harness]

Try things out if you don't like then don't do it

Surely It won't land you a job but it can improve your skills

[wild bramble]

Ok thank you for those advices i will go with security+

Other question please! Did security+ have labs and practice exam?

[keen tundra]

I think that it has PBQs 😄

[wild bramble]

😆

[stark flint]

hey, i would like to find a low entry cybersecurity job.... how do i find one in my area?

anyone here today

[stoic cave]

You can look at your country's job board of choice

LinkedIn, Indeed, etc

[eager basalt]

🩷

[brittle blade]

Is trying to get a job as a SOC Analyst out of 2nd year as a Cyber Security student unrealistic if I get CC, Google Cybersecurity course, CompTia Security+ and the tryhackme SOC Analyst path? I've heard you usually need helpdesk experience but I've also heard a very few number of people were able to skip it. I'm also documenting my learning journey on LinkedIn and figured maybe networking events from ISC2 could be a gateway to that entry level analyst job. Any advice?

[stoic cave]

Just trying to parse your question, are you saying you're currently in school as a second year undergraduate?

[brittle blade]

Yes

I've already done a lot of research but I would like the opinions of some real people in the field if that makes sense, and thank you for taking the time

[stoic cave]

You should work towards finishing your degree. If you need to work, you're going to need to look at part time jobs in the area around campus. You can also look to see if your school has student work opportunities.

Internships applications for summer 2025 are currently open at a lot of organizations, I would make sure your resume is on point and start applying for those

[brittle blade]

Will I not be able to get a job in the field before finishing my degree you reckon? I thought the earlier I started getting experience the better. I already have 2 part time unrelated jobs but I wanna get my foot in the door in the industry early

[stoic cave]

You're a student, you can't commit to a normal work schedule.

Your experience will come from internships and or student work opportunities at your school or coops in the area.

[brittle blade]

I mean I only got 9 hours of uni a week (although I'm a full time student)really so I reckon I probably could commit to a part time at least, I'm just wondering if they'd even consider me as I haven't finished my degree

[eager basalt]

whos keen to finish hard rooms together ? on tryhackme ?

[mortal quartz]

@wild bramble you can 100% get a job as a SOC analyst with a SC-900 certificate

Its an entry-level certification for an entry-level role

I have seen people get a SOC analyst role with no technical commercial experience or certifications it all boils down to the hiring manager at the end of the day.

I wouldn't advise on banking on that, obviously you do what you can to increase your odds via on-topic personal projects, certifications and naturally some commercial technical experience in a role like on the helpdesk but the idea that an SC-900 certification is not valued is hogwash

[dense dagger]

I would digress. Its not an entry-level certification. Its more of a foundational certification. Kind of like the Cloud Fundamentals cert from AWS.

[mortal quartz]

fundamentals is an entry-level certification

as its the fundamentals...

Literally the first thing you do when learning something new

is learn the fundamentals and yes that can be enough for a SOC analyst role as a SOC analyst role is not that technical of a role. Obviously it varies from one organization to another but for the most party, CSOC/SOC analyst roles are entry level and require no experience in cyber security

[dense dagger]

No its not. Entry-level is different. Take a look at SC-300 and SC-200 which are associate certifications.

[mortal quartz]

Most people who are hired into a SOC role is either a recent graduate or someone from the service desk with a year or two experience.

[mortal quartz]

You're focusing too much on Microsoft's classifications rather than real-world usage.

If you have a SC-900 certificate it demonstrates you A. have the fundamental knowledge and B. interested in cyber security.

This is enough for most organizations to be hired as a SOC analyst

[mortal quartz]

I have seen people with neither of these but a few personal projects and a certificate such as SC-900 be hired too because of this reason

[dense dagger]

Yes but you’re trying to say that SC-900 is an entry-level certification when in fact its not. Plus the SC-900 focuses on the Microsoft suite of security tech.

[mortal quartz]

I am saying SC-900 can get you an entry-level job like a CSOC/SOC analyst

Yes a lot of CSOC/SOC analyst roles are within MSPs which work primarily on a Microsoft tech stack

SC-900 is also a very high-level certification, its not just focusing on the MS suite, it covers the fundamentals of security, compliance, and identity concepts as a whole not just within the context of Microsoft so its a great cert to get if they're just starting out on their career

[dense dagger]

You probably could but I’d argue its not more on the cert itself but your skillset/willingness to learn.

[mortal quartz]

Agreed, the cert demonstrates that easily to the hiring manager or recruiter on your CV amongst a sea of other applicants

Fucked up but you got to play the game

[dense dagger]

I wouldn’t say that. SC-900 relates itself to its Microsoft suite of products rather than in general which the Sec+ does.

[mortal quartz]

Have a look at the curriculum its high-level

[dense dagger]

I know, I have the SC-900

[mortal quartz]

Then you know the knowledge learnt is not exclusive to the Microsoft eco system

Its applicable elsewhere

and transferrable

[dense dagger]

You could say it that way but in the end, its really not.

Even the training is directed towards how to use Microsoft products

https://learn.microsoft.com/en-us/training/courses/sc-900t00

Sure, it teaches you best practices and whatnot, and I agree that’s transferrable across different domains but in the end, its a vendor certification. Vendors gottsa push their products.

[mortal quartz]

So you think learning the SC-900 ultimately only teaches you about the Microsoft suite at a fundamental level and does not teach you the fundamentals of security, compliance, and identity concepts?

[dense dagger]

In hindsight, yes. In the training path curated by Microsoft, only 1 module focuses on the general concepts and then having 3 other modules that focuses on Microsoft products.

[mortal quartz]

That's just incorrect 😄

[dense dagger]

We can agree to disagree but that’s how vendor certifications work.

[mortal quartz]

No one is saying it is not geared towards the MS suite, but it is not exclusively useful to an MS tech stack for an entry-level role

[mortal quartz]

That suggests they're operating under muscle memory rather than understanding the subject matter and technology they're using

[dense dagger]

I mean yes, that’s what I said earlier, it will teach you generic concepts but in the end its a vendor certification. Its full value is realized if you work with their products.

[mortal quartz]

No one is saying the opposite?

[dense dagger]

But you’re marketing it as an entry-level certification when its not, its a foundational certification aimed at teaching the user the Microsoft security tech stack and its capabilities.

[mortal quartz]

I never said that

I said you can get an entry-level job with an SC-900 such as a SOC Analyst because you can

as a SOC Analyst role is an entry-level role

It can and does directly help you in doing so

[dense dagger]

This is what you said: #cyber-and-careers message

[mortal quartz]

You're playing on semantics

Whether its foundational or entry-level is irrelevant it can help someone get an entry-level role and it is valued by hiring managers

[stoic cave]

Certifications are used to quantify professional experience and they don't really stand on their own when it comes to job hunting.

[mortal quartz]

Its not just quantifying professional experience

[stoic cave]

That is literally what they are for

[mortal quartz]

Its not how they're used exclusively

When I am looking for someone for my team, if I see they have done independent studying an example being industry certifications. It not only indicates their technical expertise but also shows whether they have a genuine interest for IT

It says a lot if someone goes out their way to acquire a industry certification on their own accord

This goes hand-in-hand with things like personal projects, I would also make the argument certifications are primarily used to show technical expertise rather than professional experience, which is mainly shown via their commercial experience listed on their CV

Though certifications can also do that to an extent too

[stoic cave]

A bunch of certifications and no experience does not tell me anything other than that you are cert hunting and can memorize take a test. Which has a negative connotation. It does not tell me how you interact with others, if you can write a report, if you can make deadlines, etc.

[mortal quartz]

Correct, I don't think anyone here is making that argument

[stoic cave]

It's the counter argument to "all you need are certifications" which I believe was stated in part above

[mortal quartz]

What we are discussing here is whether an SC-900 can get you a job as a SOC analyst which I am arguing that it can

[mortal quartz]

I never said that ;D

[stoic cave]

Alone? Probably not

That's cool if it can at your employer though

[mortal quartz]

See

Alone you can get a role as a SOC analyst with an SC-900

But its not guaranteed and I wouldn't suggest that approach

SOC analyst is not really a technical role

Its entry-level

Most of the time organizations will train you on the job if you have an interested and foundational knowledge

[stoic cave]

The way that is written, and the message above the one you linked, is inferring that's all you need. It's also why I said "in part" because you didn't directly attribute

[mortal quartz]

best way to get into it would be do everything you can to be competitive, such as picking up a relevant certification or two, undertaking personal projects and formal education

[mortal quartz]

No its not

I literally said "I wouldn't bank on it"

"I wouldn't advise on banking on that, obviously you do what you can to increase your odds via on-topic personal projects, certifications and naturally some commercial technical experience in a role like on the helpdesk but the idea that an SC-900 certification is not valued is hogwash"

[stoic cave]

This is what I am talking about

[mortal quartz]

Then read the messages

Missing the context of the discussion...

People are acting as if a SOC analyst is not an entry-level role around here

[stoic cave]

I see you responding to KGB, who said it can't be relied upon, and they were replying to someone who asked for good starts in Cybersecurity. You have to remember, a lot of people asking those types of questions in this server have zero professional experience or a degree.

[mortal quartz]

Its what most people in cyber security start off in

[stoic cave]

In the grand scheme, it's not

[mortal quartz]

It literally is

[stoic cave]

Cybersecurity is not workforce entry level

[mortal quartz]

No but SOC is

SOC falls under cyber security yes

but its not the same calibre as other professions within cyber

[mortal quartz]

Which is fine, its a SOC analyst role

You can get a SOC analyst role without commercial experience

If you have certifications, personal projects and formal education it is possible

Its like working on the helpdesk, you learn on the job

Would they prefer someone with technical experience? obviously? Do I recommend they don't get technical experience? No but is it still possible and does it happene regularly? yes it does

But perhaps this is a regional thing who knows

My only experience is within the UK

[glossy vortex]

is tryhack me paths enough to land an try level IT job, or do you need need a further qualifcation?

[fathom hawk]

What do you mean by work force entry level? Like with no schooling or no prior industry experience?

[glossy vortex]

sort of, mean like helpdesk to start

thought cyber secrutiy was very diffricult without formal education

not sure what entry level roles in cyber secrutiy are, but would you be looking at CCNA and other certificates, without a degree?

[stoic cave]

As in you're entering the computer industry, your first job

Entry for cybersecurity is typically 3-5 years of professional experience, without a degree, in something like IT or another STEM field

[glossy vortex]

just finished my first year of a 4 year degree in civil

[fathom hawk]

Ah ok, I think it's getting a bit better with coop jobs but I get that those aren't "real" to same degrees as a full time

[glossy vortex]

toying with the idea of dropping out if i can get a helpdesk role

then trying to study from there

[stoic cave]

If you're in a degree program, don't drop unless you absolutely have to

[glossy vortex]

still 3 years to go tho, so haven't invested too much. salaries aren't too great in civil, especailly for the first 5 years

[stoic cave]

Degrees allow you to meet contract requirements, you earn more than your non-degree peers, and more

[fathom hawk]

What have you done cyber security wise? Is it something you're doing hobby wise that u want to make into a career/switch degree majors or just something you have a general interest in/like the salary range of?

[stoic cave]

Civil what? Engineering?

[glossy vortex]

General interst, software and IT is interesting, but current job markets scares me off studying it. If i could get work experience in the industry, then go from there, I'd give it a go

[glossy vortex]

yes sir, don't mind it, but not much of a passion for it.

[stoic cave]

Can you switch to something like EE?

[fathom hawk]

I wouldn't drop your current degree altogether even having a degree at all would make certain factors easier

[stoic cave]

Dropping your degree is not recommended

[glossy vortex]

I've done some intro units, and looking at later 3rd to 4th year content, bit afraid. Uni offers network engineering, sharing 2nd year content with EE

[fathom hawk]

What made u consider this change?

[glossy vortex]

Civil is alright, long hours and onsite often. Pay isn't very good though. Of course 10+ years of experience it'll start to get good

[stoic cave]

Personally, if you don't like civil, I would look at transitioning to EE or ECE. You could also change your degree entirely to Computer Science

[glossy vortex]

live in Australia too, so civil has a bit of overlap with mining eng

our main indsutry

[stoic cave]

I will say, you can get into some interesting places in Cyber with an industrial engineering background

[fathom hawk]

If u like cyber perhaps a shift to cs completely would be better

Or engineering

[glossy vortex]

thing about Australia, civil and electrical are the only safe eng options

we've offhsored or automation, so you're risking it with mechanical

[eager basalt]

How is cyber jobs in Australia?

[glossy vortex]

EE's not bad, but I'd find it hard to justify studying eletroncis side, instead of core electrical (which is required for more grid/power generation job i think)

[glossy vortex]

can't say I'm too knowledgeable, alright mid - senior, but we have a surplus of grads

lots of interional students, so trying to land a grad job is pretty hard

[eager basalt]

Oh yall got a lot of international students there ?

[glossy vortex]

Canada level amounts

Cs and software have been swamped pretty hard too

[fathom hawk]

Do u want a grid/power generation job? I think u should look into potential crossover jobs like did you google? suggested

[stoic cave]

Goes back to what I was saying, having an engineering background in Cyber can be important. Critical infrastructure needs protection

[eager basalt]

Do certs matter in Australia too ?

[stoic cave]

Electric, Water, Gas, etc etc

[glossy vortex]

was thinking this, but the units that share content with cs and software, are found in the electronics major

defence is one of the bigger indsustries for that, not much is designed here

[glossy vortex]

we have a pretty diffirent market to USA here, from what I understand you can get away with less qualifcations

but you need some experience to start from somewhere

[eager basalt]

Might need to move to Melbourne then

Us ain’t it for me

[glossy vortex]

majoring in that area of EE, would proabbly limit your ability to switch into network, software and cs related stuff

[glossy vortex]

you in Melbolunre too?

[eager basalt]

Yeah bro 🤣🤣

[glossy vortex]

nice, me too

[eager basalt]

Nice bro we should connect

[stoic cave]

Look up ICS/SCADA Security

[fathom hawk]

I think that right now with your uncertainty of where you want to go you should continue a degree potentially switching majors if u have 0 passion for what you are doing rn and try picking up a job on the side in help desk to beef up ur resume but dropping out should not be on the table

[glossy vortex]

I'd be keen to

[fathom hawk]

Does Australia have any programs with coop? Those could also help you define what you want out of cyber

[eager basalt]

What you studying and what uni ?

[glossy vortex]

I'll give them a look, thanks for the advice

[glossy vortex]

eng RMIT, previously 1 sem commerce Monash

[eager basalt]

Amazing

[glossy vortex]

haven't heard of them, I'll give them a look

[glossy vortex]

wbu?

[daring hinge]

Should I get Net+ or CCNA?

[keen tundra]

I would recommend CCNA 😄

[small flint]

is cyber a good role to pivot to for web dev? in terms of job security, also do jobs exist in cyber where you can train on th job? i've been seeing so many ads

[eager basalt]

Do certs really matters though KGB >?

[stoic cave]

Depends on the context

[keen tundra]

Knowledge is what really matters 😄

[eager basalt]

Cyber security

[stoic cave]

?

For the industry as a whole?

[eager basalt]

obv they dont matter if u doing civil engineering

but they matter in cyber security and IT

[stoic cave]

I'm confused

Did you just answer your own question?

[daring hinge]

Any reason why/

[keen tundra]

Cisco is the industry leader in the networking field , CCNA is just more recognizable . Also it will get you familiar with Cisco's iOS , and since Cisco is an industry leader and has a majority of market share in the networking field , you are most likely to work with their equipment. I don't know if that offer is still active today but few years ago Juniper offer free exam for JNCIA-Junos for everybody who has CCNA already , so you could basically get those 2 certs for the price of one 😄 . Also I think that CCNA will teach you more than Net+ anyway 😄 .

[daring hinge]

"Cisco's iOS"?

[keen tundra]

Yes , Cisco IOS ( Internetworking Operating System ) 😄

[stoic cave]

It's the operating system their switches run

It's now IOS XE, NX-OS, or ACI depending on devices and applications

Other networking appliances, non-Cisco, will run some form of SONiC or a few other alternatives

[daring hinge]

Oh, for a moment I thought Cisco made their own iPhone OS (iOS).
I'll have to take a look at the CCNA material, Any recommended resources?

[keen tundra]

You can learn more about the exam here 😄

https://www.cisco.com/site/us/en/learn/training-certifications/certifications/enterprise/ccna/index.html

[runic olive]

I took the career quiz and I got Incident Response. Is there anybody here who has any experience working in this capacity? It sounds interesting.

[green harness]

It's part of cyber defense

Blue teaming stuff 💙

[runic olive]

Blue team, got it! I've started the path and am just learning the fundamentals.

[thorny light]

question: If i'm listing experience with a piece of technology; say kali linux, can I only list professional exp or can I list personal exp as well? I've been using linux for 6+ years at this point but only have a few years of professional exp.

[keen tundra]

I would personally rather put what I actually know about some particular tool/OS and what can I actually do with it rather than years of experience number 🙂

[thorny light]

yeah I see some people just list skills/tech/tools but I've seen a few list years exp and was curious if there was a "best practices"

[keen tundra]

You can list both , why not , it won't hurt probably 😄

[thorny light]

I'll see how I do on space

[sacred island]

what sector is good for remote work? Blue Team or Red Team. Can anyone give me suggestions?

[thorny light]

Blue team and red team are missions statements. A lot of teams work on site.

In my recent and ongoing job search I would say the most common cyber jobs I've seen remote are Cybersecurity Engineers.

[fringe spade]

Depends on the company tbh

[thorny light]

A lot of cyber can't work off site. Especially if you work for any government.

[sacred island]

isn't Cybersecurity Engineers part of Purple? I mean then i need both defensive and offensive knowledge right!!

[fringe spade]

I found hybrid the most popular option suggested by companies

[thorny light]

^

3 days in, 2 days out.

[fringe spade]

For this type of role, you most likely need some development experience

Also the more experience you get, the more likely it is for you to get a remote role

[thorny light]

just about any junior role they want to mentor you and ensure you do your job

[sacred island]

got it

[thorny light]

Yeah, you'll get more "away" time as you get better

[sacred island]

about the labs. any suggestion which labs should i solve for vendor certs like, eJPT, OSCP. i want to prepare first

i need a guideline

[fringe spade]

Research your local job market, see what certs are required for these roles and find some online resources for example the TJ Null’s list

[thorny light]

Do you have your Sec+ yet?

Sec+ is a really good entry point

[sacred island]

not yet. just complete the study material. like the books and video playlist

plan to take that this month

[fringe spade]

Also, these are not vendor certs, as they do not refer to a specific product. A vendor cert is something like a Microsoft Azure certification (AZ-900 for example), that refers a specific product

[thorny light]

I did my Sec+ recently. If I could go back and do it over I would do something slightly differently: I would do a small project for each concept in the book.

What I mean by that: I'd do a small project for Vulnerability Assessment, another for Cloud Infrastructure

I didn't have the time

I wish I would've done a few more projects based on it.

[sacred island]

i see. thanks @thorny light

[serene umbra]

Gave +1 Rep to @thorny light (current: #1564 - 2)

[thorny light]

😄

Good luck

[keen tundra]

I would say Red team , for example, bug bounty in particular 🙂

[wild bramble]

The CompTIA security + I’m looking for recommendations for good courses or study materials . If you have any suggestions or tips, please share them

[keen tundra]

Check out this THM path , although it is geared towards PenTest+ it has some overlap Sec+ 🙂

https://tryhackme.com/r/path/outline/pentestplus

[wild bramble]

Many question 👀 ! Do you recommend starting with any specific modules or topics for someone focusing on Security+? I appreciate your help!

[keen tundra]

Start with Planning and Scoping then move on to Information Gathering and Vulnerability Scanning for beginning 😄

[fierce acorn]

I highly recommend Professor Messer’s YouTube video course for the Security+ SY0-701

and his paid training materials as well > https://professormesser.com

[keen tundra]

I would definately agree with this 😄 . Messer is a great teacher . Thanks for advice 🙂

[serene umbra]

Gave +1 Rep to @fierce acorn (current: #439 - 12)

[half marten]

any recommendations for CCNA ?

[keen tundra]

Jeremy's IT labs and David Bombal 😄

[half marten]

Thanks

[fierce acorn]

I concur

Jeremy’s IT Lab + Cisco Press’s Official Cert Guide are usually the duo for video course + textbook

[half marten]

s that enough to pass the exam and get everything about networking, I just got my compTIA A+ and now want to get my CCNA but don't want to get into tutorial hell and following so many sources

[keen tundra]

It should be 🙂

[half marten]

alright will start then thank you

[fierce acorn]

you won’t learn everything about networking lol, the CCNA barely covers 10% of Cisco’s products even though it’s a decently in-depth exam complete with networking fundamentals and Cisco IOS configuration

but yes, those two resources should be enough for the CCNA

[half marten]

alright thank you for your insight

I'm just nervous cz networking was really hard to grasp when I was doing compTIA A+

[fierce acorn]

that wasn’t even networking tbh lol

[half marten]

omg 😄

[fierce acorn]

the A+ doesn’t even go into routing tables or even the OSI model

[half marten]

I don’t know what a routing table is, but I can describe what the OSI model is

we have more on the OSI model 🙆‍♀️

@fierce acorn for the book what edition or version should I look at to make sure it's the latest one

man that is expensive 😄

[eager basalt]

CCNA is like having a sec+ basic but broad

[woven mirage]

Net+

[half marten]

omg more than 2000 pages T_T

I'm cooked

[keen tundra]

There are lot of images in schemes there 😄 , it isn't all text 😄

[keen tundra]

Also with that book , you get access to free exam practice website 😄

[fierce acorn]

you don’t have to read it all

you use a textbook as a reference if you need clarification on a topic

and, yes, that is the depth the CCNA expects you to be at

the CCNA is the minimum baseline standard for the networking industry, so it’s literally the source for foundational knowledge of networking implementation/configuration

[fierce acorn]

those are two completely different certifications with completely different topics and subject matter, and the difficulty of the Security+ is nowhere near close to the CCNA

you can’t compare them at all

[pale scaffold]

Does anyone have any ref for internship in vapt ??

[half marten]

it feels like I'm preparing for masters in networking with this book, I'm so overwhelmed really and excited at the same time

[wild bramble]

Hi it's me again 😄 ! Professor Messer's Security+ course on YouTube sufficient to pass the certification exam?

[wild bramble]

The question is for you to 😅

[fierce acorn]

I recommend that you grab his practice exams and/or notes as well

but there is a group of people who have passed solely with only his videos

I've used his videos for the A+, Network+, and Security+, and I passed all of those exams on the first attempt

[wild bramble]

Great! Did you use any dumps or similar resources?

[fierce acorn]

using exam dumps is cheating...

[wild bramble]

It’s not a method of practicing or becoming familiar with the question types...
?

[fierce acorn]

how is it fair to those who studied and passed the exam legitimately if you know the questions beforehand? that is exactly like knowing the questions/answers before you take a quiz or test in high school

[stoic cave]

No, it's unethical and against ethics codes of exams

[fierce acorn]

using exam dumps is a spit in the face of anyone who has taken the exam legitimately, and it devalues the certification as (1) you didn't obtain the certification legitimately and (2) employers will devalue the certification as rife with cheating

[wild bramble]

Sorry 😐!
Based on my knowledge and what I’ve heard from a friend who passed the CCNA Routing and Switching exam, he encountered over 300 practice questions, and I thought some of them appeared in the actual exam. He mentioned that this method was part of his preparation strategy.

[eager basalt]

i will report anyone here who mentioned exam dumps its totally forbidden and your certification should be revoked im not gonna hesitate either

[wild bramble]

Sorry 😔 ! I didn't know i m just asking

[eager basalt]

if you want to be successful and get a job dont do examdumps please its very simple <--

[wild bramble]

I will! And thank you all, I really got help here in the group

[serene umbra]

Gave +1 Rep to @eager basalt (current: #1564 - 2)

[fierce acorn]

if he was telling the truth, then he's a certification cheater lol (assuming, of course, he actually used an exam dump)

completing practice exams are fine, but using dumps that contain questions that are the same or substantially similar to the ones found on the actual exam is both illegal and unethical

[eager basalt]

like alot of people pass Sec+ in few days but i have studied about 2 months non stop for it ,, when i ask them questions they just clueless this is why u need to study and keep the integrity high

[wild bramble]

I will study and get the certification as fast as I can, without using any cheating

Thanks

[mortal quartz]

It's not about passing its about understanding the subject material, once you do the latter, the former will come naturally

In other words, your goal should be to understand the subject matter rather than simply getting a certification

[keen tundra]

Well , I heard that many people passed the exam using only his material but I would personally always complement my learning with some other sources as well 😄

[wild bramble]

Like what ?

[keen tundra]

Watching other creator too , reading official documentation and path material, maybe some book,etc. 🙂

[wild bramble]

I wasted more than two months on the Microsoft Cybersecurity Analyst program! Actually, it wasn't a waste of time because I learned new things, but I want to earn a certification that will help me enter the field of cybersecurity. For that reason, I want to gather as much information as possible about Security+ to avoid making the same mistakes

[keen tundra]

I wouldn't call that a waste because you learned something new and the knowledge is the most important thing after all 😄 . Good luck on your certification journey 🙂 .

[eager basalt]

Usually, when you see YouTube videos advising you to pursue Google Cyber Security courses through Coursera, it's likely that those videos have been sponsored by Coursera. As a result, the recommendations may not be entirely genuine

[wild bramble]

That's exactly what happened to me. I saw some videos saying that it’s the best entry-level course because it covers networking, AI, cybersecurity, and everything you need to build a strong foundation. But later, I realized that there were so many things I probably wouldn’t need.

[green harness]

You see I have finished that course

If you are looking for to clear your fundamentals it's great

You won't get job on basics of that certificate

[eager basalt]

Yeah but the YouTube vids be saying it gets you a job like wtf

[eager basalt]

Exactly

[green harness]

Every youtuber has different options do what you like

[eager basalt]

its not about liking something its about choosing something good for your future

[green harness]

You see that this field has different domains look into it

[eager basalt]

Why we even talking about this rn haha

[serene laurel]

I couldn’t find any major jobs quite yet but I got an opportunity for a field technician and am going to schedule the interview for tomorrow it’s a start tbh lol

[velvet torrent]

How important are certifications?

[fierce acorn]

not worth as much as actual work experience, but they are good way to advance one's career as a nontraditional student/learner

you will probably have to obtain one or more for an entry-level position

[velvet torrent]

Understood 🫡

[fierce acorn]

later on, you will obtain certifications according to your specialty and your employer

[stoic cave]

Security+ is the only one I would recommend people pay for out of pocket and only if they have a degree or prior professional experience in the computer industry. It should be said, that is for entry level cybersecurity, not pentesting or red team. Pentesting is a niche field and not entry level.

[golden imp]

What about OSCP? Would that help in landing an entry level pentester job, if i have prior experience as a web dev?

[stoic cave]

OSCP is at a price point now that doesn't make sense for the individual to pay for

I personally don't have experience transitioning from one field to another, so I can't exactly give you accurate advice in this situation.

[golden imp]

i c, thx

[fathom hawk]

are there any certificates that should be considered for pen testing for the individual to pay for?

[stoic cave]

Once you're in industry, you'll find organizations will have training and education budgets. So I don't know that I can recommend paying for anything individually

Security+ is just to get that "foot in the door" so to speak and show you have a baseline level of knowledge. The real drivers are professional experience or a degree.

[worldly whale]

Yes it will help, and yes I’d recommend paying out of pocket

It’s the golden standard

If you don’t have an employer who pays for it, I’d pay myself

[fierce acorn]

if you have $1,649 USD lying around in your pockets, then sure lmao

[eager basalt]

Oscp is the only time I pay outta of my pocket

[stoic cave]

Some people do, and it made more sense a couple of years ago, but it's too expensive now. Not recommended.

[cursive depot]

Is there a career FAQ for THM? Got some really basic questions on mid-career transitioning into a new field.

[brittle pier]

This?

[cursive depot]

just noticed there are quite some useful pinned posts!

[eager basalt]

u trippin go save up and do it

[fading mica]

Hi, I recently completed a cybersecurity bootcamp and am seeking advice on which positions would be best suited for someone new to the field.

[silk laurel]

Depends on your definition of 'new' and it really depends on what you learned in bootcamp. With some IT experience and depending on what you covered in your courses, SOC responsibilities may be within your grasp. New to IT as a whole, it may be helpdesk for a bit to cut your teeth and get you used to tickets.

It does depend on what jobs are available in your immediate area. Don't be afraid to go into general IT jobs, not just security jobs.

[orchid fractal]

I got same question as his, Im a computer engineering graduate and almmost done with the Google Cybersecurity Cert. do you think I can take up SOC responsibilties?

[orchid fractal]

also Im gonna take the advent of cyber too, I hope my skills are enough for that event. The cert is kinda nice for my resume in the future

[silk laurel]

Without seeing a resume, I can't say. Without knowing the SOC environments in your area, I can't definitively say. Not all SOCs are created equal, but honestly shoot your shot.

For example: An MSP may have a SOC and they may have high turnover. They may give more opportunities for newer folks in the field than perhaps Bank of America would.

I can only say what would work/would've worked for the teams I've been on interview panels for.

[orchid fractal]

my resume is not nice, Im trying to fix it up and make two resume for IT in general and a resume with Cybersecurity on focus hehe

Im lookng for a template too

[stoic cave]

If you have a full bachelors, start applying to cybersecurity roles