cyber-and-careers

[stark flint]

can anyone share me where i can find a cyber job? like an entry level where i can start at the bottom? know any compaies that i can go and apply

[outer meteor]

Is anyone on here in the military? I’m going army for cyber and trying to find the best resources to give me a good base knowledge before I leave. I already know a bunch of coding but less about cyber or networking

[merry axle]

Not from the military but you should study up professor messers videos on YouTube. Theres the A+, Network+ and Security+ that I would recommend

Also if you haven’t already. Start working out and get used to carrying a backpack full of weight while hiking so you’re set for basic training

Good luck

[stoic cave]

The school house will teach you the way they want you taught. Assuming you've already done your ASVAB and such, assumption is US Military, so you're going to want to make sure your body and mind are squared away instead.

Having a high level of fitness will allow you to exclusively focus on your schooling, versus having to worry about both fitness and learning.

[outer meteor]

Yah I already took the asvab and cyber test and signed. I’ve also been lifting and running for years so physically I’m confident

[grand obsidian]

I didn't do cyber in the military but I knew some guys who did. If you already know some stuff going in and you have an interest, you'll already be above some of your peers. You should be confident! 🙂

Wish I did Cyber though...Would've been mid-career right now instead of trying to get in

[pulsar fern]

i know theres some specific certs that are recognized by the military/government

[keen tundra]

Check out #jobs-board 🙂

[paper loom]

Yup. Also I wanna ask did you solved some questions on picoctf or any other platform

If you don't mind can we be friends on TryHackMe

[fleet breach]

If you don’t mind me asking, did you put like THM on your resume somehow ?

[stoic cave]

You can put it on the resume under an extracurricular section

[orchid fractal]

is there a website to apply jobs on outside the country?

wanna apply for some basic SOC analyst role or a IT role of anything hehehe

[warm hinge]

Getting a job internationally isn't easy. I don't think many, or any, companies are willing to go through the hassle of hiring internationally for a junior role

[keen tundra]

LinkedIn 🙂 ?

[orchid fractal]

yep Im trying hahaha

[keen tundra]

Check out #jobs-board also 🙂

[steel elbow]

It's happening. I'm one year from my military retirement and I'm finally starting to get some serious moves in the direction of getting a cybersecurity field (complete career field shift). I've been steadily chugging through stuff over the past couple years, like a CS degree, a Network+ cert, Sec+ actively in work, and self-paced education through THM and others, and now that I'm close to retirement I'm seeing all kinds of new openings and training opportunities, and it's been a long time since I've been this excited about something.

My only concern is that a lot of jobs and training opportunities come with a prereq of career field experience, which I don't have. I'm trying to make up for it by aggressively pursuing education and certification on my own time that I can bring to the table, and I am working with my bosses to try to get some shadowing opportunities at the local comms units over the next 4-6 months, but does anyone have any other ideas or past experiences on how to bridge that key experience element over the next 6 - 8 months?

[dense dagger]

Projects are a nice touch but is not a big substitute for experience.

[red cosmos]

I'm on my journey to give OSCP exam and I need some guidance in that

[snow basalt]

Your retirement from the military will have tons of open doors for you. Look into sans.org for a cert through them using your military discount or Google your zip code with veteran and a key phrase of the role you’re looking for

[split pumice]

Hello can anyone advice the best career in Cyber security.

[plain vector]

start as a it helpdesk its an entry job

but if u mean strictly CS based job they r not really beginner friendly but If u have certificates/projects/degree, yea u can try to get some inerviews

[merry axle]

Just look for something that aligns with your interests. Personally for me that’s Penetration Testing

[split pumice]

I just have completed schooling and what could be best to do earning in a short time period with less effort

[merry axle]

I like listening to audiobooks, THM and messing around

I don’t find that’s work so there’s not much effort there

Just feels like fun

[split pumice]

I mean a work which is easy to get am ready to give full effort.

[merry axle]

Oh a job?

Maybe you could do something entry level like Best Buy geek squad or help desk/ it support

[surreal elbow]

Sure. My username is Mr.Scratch. Anyone can feel free to add. And no I only used THM (:

[paper loom]

Ah cool thanks :))

[serene umbra]

Gave +1 Rep to @surreal elbow (current: #2656 - 1)

[dense dagger]

Remember that what the OSCP teaches you is methodology, not techniques. Hone your methodology in the labs.

[undone shore]

Other way around

PWK teaches technique, but not methodology.
Exam tests methodology and takes technique as a given.
Use the labs to practice both.

[dense dagger]

I wouldn’t agree on that. You can say that PWK teaches technique but it doesn’t necessarily hammer down on it. Even in the first few modules, it was specifically working on the point that a pentester’s methodology needs to be refined.

Even the last module teaches someone on a walkthrough pentest and what to “eye for”.

The technique modules also give you necessary methodology on what you should look at when trying out things. They also put a different spin on the end labs for each module.

[undone shore]

Really? Must have changed drastically since I did it then.
It used to walk you through techniques and specific scenarios, but do absolutely nothing for time management and actual end-to-end pentest methodology. The last module touches on that but still gives one very specific example.

One very specific and not very realistic example at that, iirc.
Close-ish to a CTF, or maybe a simplified red team op, but nothing like your typical pentest

[dense dagger]

I can’t really say if the last module felt CTF-y but I guess it did had a lot of “educated guesses” or maybe at that time my methodology wasn’t as good so I had a hard time grasping it lol

[undone shore]

I mean, that and the chances of someone just saying to you "yeah, hack our public website then pivot right through the network" are... slim

Educated guesses happen all the time

[raw pelican]

Is anyone here from Europe and has information on how to get into entry-level? I believe it's much harder here to get accepted because you want to gain experience. On top of that I need to retake my SY0-701 exam since i didnt pass after missing only 6 points.. but even with the certificate I believe it still would be hard since most people look for those who at least went to university and havent really acknowledged those with just online certificates. Hope someone can give me some advice, thanks 🙂. I just had to ask since thm had posted about not needing the certifications necessarily..👇 https://tryhackme.com/resources/blog/entry-level-cyber-security?ref=blog.tryhackme.com

[red cosmos]

Can you explain more

[stoic cave]

US Military? If so, what was your MOS/Rate? Also, in what context are you using CS? Computer Science?

Again, if US, there are pathways available to you, like the DOD SkillBridge program.

[stoic cave]

The western world is fairly similar when it comes to career advice, and I am sure someone more local from the mentors can correct this or provide additional context, but entry level cyber is not entry level career. If cyber is what you're referring to when you posed the "how to get into entry level" question. Entry cyber roles look for the applicant to either have a degree, and maybe a cert, or prior professional experience in the computer industry. Entry for the computer industry are roles like IT Helpdesk, as an example.

If you do not have, or cannot obtain, a four year accredited bachelors degree you're going to need to build that professional experience.

[raw pelican]

Yes that I know, but if you read under cybersecurity certifications it says something about not needing one necessarily?

[stoic cave]

Right I just covered that, if you're not going to go the degree path, you need to build your experience. Certifications without a degree or prior professional experience don't really do anything. The purpose of a certification is to quantify professional experience.

[steel elbow]

CS in this case is a Cybersecurity bachelor's. I am pushing into the Skillbridge program, but the program I'm hoping for (MSSA with Microsoft) requires a year of experience to even apply for that Skillbridge. The briefings I was in made it pretty clear that the most important thing to them was drive, so I'm pushing to make up for it with other advantages

[stoic cave]

So, as a note, CS is not Cybersecurity. It's Computer Science. On SkillBridge, that year more than likely comes from what you did in service given you have to enroll in SkillBridge less than 180 days after separation, iirc.

[mystic drum]

is there anyone who would be willing to look at my resume for a review?

[stoic cave]

Post a redacted copy as a PNG here

[mystic drum]

Feedback would be much appreciated. Thank you!

[ashen pulsar]

Hello! I'm graduating this Spring in cybersecurity and I have a particular interest in pentesting. I'm really worried about future employment. What would be a good first step?

[digital glade]

There is some good certificates? In thm?

[warm hinge]

Depends on your knowledge, have a look at Hack the Box's CPTS course and exam

[keen tundra]

THM current certs. aren't really valuable on job market 😦

[digital glade]

Do you know some goods?

[keen tundra]

Well some industry recognizable are OSCP,Sec+,etc. But it all depends on what you want to do and your local job market

[digital glade]

Ok thanks

[serene umbra]

Gave +1 Rep to @keen tundra (current: #2 - 2995)

[dense quiver]

this is fire

saving it for future reference

[dense dagger]

Personally, I would put Work Experience up top. This makes it so that recruiters will most likely read it first. Try to add in Education next then Certification. I’m personally not a fan of a summary so I would say you can remove it but honestly its different in other places.

Under your work experiences, its better to quantify the work you’ve done as much as possible. For e.g., you monitor and mitigate incidents. How much did you resolve, etc., another one is “enhancing cloud security posture”, by how much?

One example I can think of is like “overseeing patch management and SDLC process which in turn decreased overall attack surface by X% compared to previous blah blah”

or

“Enhanced cloud security posture by X% by driving blah blah policies, mitigating blah blah… hardening blah…”

[mystic drum]

thank you, I will get something added

[serene umbra]

Gave +1 Rep to @dense dagger (current: #22 - 444)

[dense quiver]

i also think the summary stands out and kinda pointless

but you put your certifications which is great, after should be degrees and educations then your work experiences

[keen lily]

Yo! Just finished some cybersecurity certs but got no experience. Any tips on getting my first job? Thanks!

[narrow blaze]

Excuse me if this is a silly question, but does it matter where you get a degree from in hiring? I am currently a community college student and plan to transfer to my local school as I don’t think I can afford to go anywhere else 😅

[copper wren]

No idts it matters as long as u get to show cast ur skills

[dense dagger]

It depends on where you ate but truthfully there is some bias. It may vary from country to country but from what I’ve seen, graduating at a top university does give a slight edge over others.

[flint lion]

Hello everyone?

can anyone give me advise on how can i start my journey to become a professional ethical hacker

i just cleared my 12th exams

what degree and what certificated are good and better for better job placements

[supple arrow]

Where are you from ?

[flint lion]

India

[supple arrow]

Yeah I knew it

Why do wanna pursue cyber sec

There are no jobs for cyber related in india , f it , go for software development

[flint lion]

nahh

m thinking to shift us

but i need to knwo about this so i can start making my career

if you can explain me it would be better for me

[supple arrow]

Pursue btech cse -> learn networking by forouzan -> learn basics of Linux -> go to pwn.college website and then practice there

If you have money, buy try hack me and start there

For certification, you got money? Then ccna , oscp, cissp

No money -> security+ , google cert

[flint lion]

Oh okay but is degree required for entry level jobs?

[flint lion]

like only certificates are required for porfessional jobs right?

[flint lion]

instead of Btech something else?

like ive not prepared for jee mains

[supple arrow]

Go for btech

[supple arrow]

Can try for private and semi private colleges

Should have a BTech degree if not then at least bca

In india it's bare minimum

[flint lion]

What if I change country?

@supple arrow

[candid steeple]

Hello im new here

[flint lion]

Hellw

[candid steeple]

What is the best carriers in cyber?

[flint lion]

💀ask @supple arrow ig he would know about it even I am finding best possibilities

@candid steeple

[flint lion]

But I would say that you can try penetration testing

Ethical hacking

Forensic science

Cryptography

And

Network security engineer

Depends on you:/

[candid steeple]

Penetration testing is the good choise for mr now

[flint lion]

Then go for ethical hacking and penetration testing

[candid steeple]

thank you for the info

[flint lion]

:)

[candid steeple]

Do I need to lean roadmap?

[flint lion]

Yeah you can get it

Search for it

[supple arrow]

It's still asked in other countries no sane man will employ you in his company unless you have decent undergrad degree

Technical one

Those without a degree that say that they have done it are really rare and are very skilled

Those guys too struggle at the start and are not able to earn enough for 3 meals a day

[flint lion]

What if I do an entry level job like it help desk

[supple arrow]

You will have to struggle a lot

[flint lion]

For 2 years

[supple arrow]

With less salary

[flint lion]

Then Apply for CEH

And get certified

[supple arrow]

If you have skills and are confident why not

But the thing is you haven't even started yet

And are assuming that you will be good

[flint lion]

I did

[supple arrow]

Guy you just passed your 12th grade trust me when i say this

Take the typical route

[flint lion]

Lol bro don't think if I just passed 12th means I don't know anything

I am already into it

But the think is I want clarification

[supple arrow]

Why you want to make things hard for yourself

[flint lion]

Thing*

[flint lion]

🫠idk bro m scared of life

[supple arrow]

?then go for a college

College is important

[flint lion]

Ik

[supple arrow]

Especially technical degrees like bca or btech

[flint lion]

M thinking for batchelors degree

Like they have their own entrance exam right?

[supple arrow]

Yes

Every uni does

[flint lion]

Yeah so if I did that could be better

[candid steeple]

So basically o hope for penetration testing?

[flint lion]

?

[supple arrow]

Yes

[flint lion]

Alr bro thanks

[serene umbra]

Gave +1 Rep to @supple arrow (current: #2659 - 1)

[supple arrow]

Who said?

Work hard and get a good degree

[candid steeple]

If I chose this path is difficult to find job?

[flint lion]

No

[supple arrow]

Earn some certs and skills and you are good to go

[flint lion]

Lol

You got it wrong

[candid steeple]

Ah hahahaha that is my fault

[supple arrow]

Let me tell you kids , the market is very tight and difficult to get into

[flint lion]

If you get better certification and degree and high education in this field

[supple arrow]

The jobs for freshers are non existent with good pay

[flint lion]

You are good to go

[supple arrow]

And It's everywhere

[flint lion]

Ig linked in can help him?

[flint lion]

(not sure)

[supple arrow]

No

[candid steeple]

Everything in the beginning is difficult. just hard work pay off

[supple arrow]

You at least have to apply for 200 different companies and you will only receive 4, 5 replies with rejection and only 1 recommendation

That's how it is everywhere

[flint lion]

You tried?

[supple arrow]

Cyber sec isn't a beginner friendly or fresher job

[supple arrow]

Yes I work in a South group company

In Delhi

[flint lion]

Damn

Nice

What are into?

[old rampart]

you guys are working or studying ??

[flint lion]

Discussing about career

[supple arrow]

Security analyst

[flint lion]

Damn

[old rampart]

ooo nice iam just studying bca

[flint lion]

What degree you have and certificates?

[supple arrow]

Btech cse

[flint lion]

Damn nice

[flint lion]

Best of luck

[flint lion]

mhm?

[candid steeple]

Me choosing carrier

[supple arrow]

Security+, oscp

Ccna

[flint lion]

That is why you recommend me that lol

[supple arrow]

I was a software developer at first

Then got into cyber

[old rampart]

there is specialization for this cource (cyber security,ethickal hacking,data analytics)nb

[old rampart]

is cyber have more opportunity in cyber security

[supple arrow]

No

[warm hinge]

So as i read here, its fine to start with as hobby. But hard to get a real job in ?

[candid steeple]

Knowledge is good to have and skills also but u need certificates to be employed

[warm hinge]

Yeah thats for sure. Right now i Finnish school in something totally different, but i want to continue on htb and thm after that. Got any tips? Or just say, go for it ?

[candid steeple]

To be honest u are in gd position than me. I'm new in IT in generals but something's that I learn in last 3week just Go for it and seek help.

[warm hinge]

Well, i am working as landscapist and green maintenance haha, and get my degree in that, i only have some n00b experience in IT and Hacking. But Yeah, maybe the best for people like us is just try things out and search some good tutorials and people we can ask questions to

[candid steeple]

https://tryhackme.com I'm using right now and is very helpful and good stuff to go thro. Already Help me to choose what path to go and so on. try to see if you already on it.

[warm hinge]

Yeah i almost finished the free basics. But i noticed it really needs to be studied a few times over. Will start again when i finish school along with HTB

[candid steeple]

Oh yeah that is great. Just keep pushing and you will be there one day hopefully

[warm hinge]

Thanks alot, and i hope the same for you man ✌🏻

[serene umbra]

Gave +1 Rep to @candid steeple (current: #2659 - 1)

[old rampart]

i think cyber have more opporunity...........

[jolly wyvern]

Im thinking the same, Im coming from software engineering as well.

[keen lily]

Year u pass out bro?

[outer meteor]

Sorry im just seeing this now! But yeah hopefully I should be set. They now have a cyber test separate to the asvab and honestly it wasn’t hard for me since I have some knowledge but it was harder than I thought. I’m assuming most people going in will know something

[pure ore]

Hi. Has anyone gotten a SOC analyst job or a junior/mid-level pentester job with only PJPT/PNPT?

[warm hinge]

Jobs in my country ask for PNPT so I wouldn't be surprised

[pure ore]

May I ask where u live?

[warm hinge]

Australia, Queensland, NSW and VIC all have posts regarding the PNPT. It seems to be held a bit lower than OSCP

[simple knot]

Hey guys

[old rampart]

Hi

[rugged delta]

Realistically you shouldn't worry about the PJPT, as all the content of that cert is part of PNPT anyway. Look at job roles in your area and see what certs and other skills they're looking for

[plain vector]

Im starting to hear that demand for Redteamers/Pentesters is getting decreasing really fast and the majoirty of the companies wants pentesters only from an external company they dont want them to work internal I would be grateful if an expertised and knowledgable person could answer my question broadly thanks 🙂

[candid steeple]

Go with Grey team in between

[rugged delta]

Competition is always going to be fiercely competitive, because everyone thinks hacking is cool and they want a job doing that without going to jail. In this space the skills you gain as a pentester are going to be applicable/transferable to lots of other roles anyway, so you shouldn't be limiting yourself just to pentesting/red teaming

[candid terrace]

I've been learning from thm and developing skills, prepping for master's as I'll be graduating my bachelor's soon, I had a question that I want to buy a new laptop and replace the current one as it's slowly dying, I currently don't have a time frame but if I had to say around 3 months, I wanted to ask how can I improve my CV and what should I post for LinkedIn? Also, I want to get an Internship or a part time job, and there's a high ceiling for entry level cybersec roles, what can I do currently? I'm planning to start learning python as it's currently in demand.

[dense dagger]

It depends where you live but I generally don’t recommend getting a masters.

What’s valuable is getting real-world experience. You can get those by working in IT Support, Developer, Software Engineering, NOC, etc.

These types of roles usually have a Junior level

In my opinion, you should have structured projects on what you want to learn and showcase recruiters/employers, that way you can focus your time improving in that specific area. I don’t recommend learning X thing because it’s the “trend”.

Let’s say you go ahead with Python: you need to find a way to correlate Python to what jobs you want to apply to.

In regards to improving your CV and having no experience, projects are a great way to beef it up while also providing actual skills (provided these projects have meaning).

[candid terrace]

Masters is required for the degree I've chosen, not because it's compulsory but because of the degree's reputation here, let's say X is similar to Y but is less credible than Y so you have to do MS of X to reach a level similar to Y

[candid terrace]

There's usually a high competition because people think "Hacking" is cool but they don't see the depth of the iceberg and that only have the employers take the ones who're not even interested in the position in the first place

[candid terrace]

For the full context, I've been learning python but sometimes I can't focus on it because I've been doing a lot of THM lately to improve my skills, I practice it and I have a home lab so there is a plan because most internships require you to have knowledge of atleast one language even tho the internship is focused on cybersecurity

[candid terrace]

DevOps in Cloud is my current goal so I think python is needed, I still need to properly research it so that I can see what direction I'm going in, I have to complete the whole of THM as my long term goal but DevOps is just the starting for it currently and I have some ways python can be integrated in cybersec

[undone shore]

The fuck is a grey team lmfao

[undone shore]

Where are you hearing that?

[candid terrace]

Except a home lab, what else can I work on?

[candid steeple]

grey hat

[undone shore]

Yeah, that's generally not very legal. Let's not encourage grey hat hacking pls and ty

[serene umbra]

Gave +1 Rep to @candid steeple (current: #1743 - 2)

[undone shore]

That bot...

[dense dagger]

I get where you’re coming from but I think its better to add context here. People are also competing against other people and for employers, that means getting the best bang for your buck. If someone with better credentials come by, an employer would most likely lean towards them.

[dense dagger]

I can’t comment on that, sorry as I’m not in DevOps. My general observation among DevOps is having an understanding infrastructure and using IaC. I don’t think Python would be used much in this case but I may be wrong.

[dense dagger]

I did see an article by SANS Offensive Ops talking about Offensive SOC i.e., having a SOC layout tool to correlate pentest/vuln/tool findings and whatnot

[candid terrace]

Well I get your point, I'd counter it with "People who are getting jobs don't even have better credentials" but self criticism says "They might have better communication skills, connections or visibility" so there goes my point. So yes, I get what you're saying.

[candid steeple]

I didn't encourage that just idea to do his research

[candid terrace]

I don't remember why I was learning python in the first place, I was confused for the last three months as I was following random advices but then I decided to make my own path from those and it helped a ton, so as I'm doing THM all in, I hope I'll have better skills in the next three months from now, was thinking of going for network+ but now thinking of going directly for sec+, let's see how it unfolds, I first have to maintain consistency.

[undone shore]

You literally said "Go with Grey team"
Which aside from making zero sense without clarification, also explicitly encourages it

[drifting tinsel]

Connections will 100% help you land a role in any industry. Most of the jobs I've gotten have been because I know someone in the company or I got recruited. It's hard to land something when you consider your competing against people that potentially have ins with the company. I'd say beef up your linkedin on top of doing some projects.

[narrow blaze]

oooh grey team so mysterious 😈😈

[low spindle]

hey guys how are you? i have maybe stupid question but thats question too. does anyone got job from THM , you start from zero to full path, and get a job? thank for everyone. i am new here 😄

[clear osprey]

@drifting tinsel give u the answer few messages before, u can have a job after THM but connections are obligated

[candid terrace]

Had a question, doing CTFs and hackathons, getting good ranks in it and doing HTBs machines are counted in proof of skill, yes? That is another way to get jobs?

[candid terrace]

How do I beef up my LinkedIn? That's a question. Which has been bugging me for quite some time and people don't seem to know when I ask them.

[low spindle]

thanks. i send to you big binary love 😄 i am so motivated and i must to share with you guys. i know a little bit of java, android-java/kotlin. Also I am interested in hardware and i work as PC builder. After job i have 2 clients where i setup all hardware and devices in lan network. I am not professional but i think my motivation will push my brain to learn max. Also one more question... I am interested in Penetration testing, must I finish Security Analyst and Security Engineer for starting in penetration testing. sorry for english mistakes 😄 thanks again 😄 thats my last question today <3333

[tight dew]

you can start off with profilo

proflio*

and just add any progress

[candid terrace]

Profile? I've done that already. Portfolio? What do i write in it when everything i know can be summarized in THM

[tight dew]

Portfolio

[tight dew]

achievements

rooms, coding projects, topics learned, etc

[candid terrace]

Coding projects? None done

[tight dew]

You don't have to have none

but it does help you in the long run

because your able to analysis code and spot malicious code or vulnerabilities and make tool

[candid terrace]

I feel like i need to do python but I'm never able to go above small chunks of code

Something always comes up or i get too distracted

[tight dew]

how much time do you normally dedicate

https://tryhackme.com/room/pythonbasics

[candid terrace]

On paper in my routine, there's 2 hours to be dedicated but sometimes my college has extra classes and it ruins the whole schedule and I'm kinda getting addicted to THM

Most of the time is taken out by distractions otherwise I'd have done python weeks ago

[tight dew]

I think you should be able to put enough time (2 hours) in to learn how to code

[tight dew]

what distracts you

[candid terrace]

Yes, if I do that everyday, i would complete python under 2 weeks

[candid terrace]

There are games and series, whenever I leave one, I can't find something in time to replace it and go back to it, no problems with discord tho, I only come here after I've completed my stuff

[tight dew]

you have to lower your dopamine

wait hold on

let me fact check that

im right

but basically you have more fun on games/series(which release highd dopamine) , instead of your brain wanted to study (which release low dopamine

there are video on how you can lower dopamine

https://www.youtube.com/watch?v=l6BoSORXCUg

[candid terrace]

Thanks bro! I'll check it out

[serene umbra]

Gave +1 Rep to @tight dew (current: #799 - 6)

[tight dew]

yw

[candid terrace]

I dunno if you're a guy or gal, I call my friends bro either way

[tight dew]

im a guy

[candid terrace]

Still bro

[tight dew]

ik

btw do you have time to take a 15/5 min walk

[candid terrace]

I walk an hour or two everyday

[tight dew]

without any devices

[candid terrace]

Yes, phone in pocket to keep track of time, thinking of switching to a smart watch

[tight dew]

hm

do you take time to look around and listen

[candid terrace]

I look around, yes, but I walk in circles on one street

[tight dew]

around the block

[candid terrace]

Yep

[tight dew]

https://tenor.com/view/bocchi-pacing-bocchi-the-glitter-bocchi-the-rock-glitter-anime-gif-8803487262770106704

alright

[candid terrace]

Nah lmfao

[tight dew]

that should kinda help

[candid terrace]

I get it, my bad

[tight dew]

no you're good

also try limited how much you watch series and play games

i was like this at first, i used to do like 30 mins of tryhackme and the rest games and movies

[candid terrace]

I've been trying to cut off time, do games and series at night, studying and stuff at daytime, fixed my sleep cycle from 3am to 11am for sleep

Was thinking of watching series right now but I'm not doing that

[tight dew]

thats a good start

[candid terrace]

Final task is bringing screen time to 2 hours which seems impossible

For phone

[tight dew]

hm

there are apps to force you to get off your phone parental controls

[candid terrace]

I think I'll have to see where my time goes that it seems impossible to achieve 2 hours, I was an avid novel reader, I'll be an avid novel reader once again

[tight dew]

do you use soical media

or watch short videos

[candid terrace]

I'm really conscious and mindful about short videos, as someone who used to hate them to hate them again, I don't give it more than 10 minutes

Even trying to curb it off completely

[tight dew]

nice

I completely cut it off

also no phone

and i bike

[candid terrace]

Damn that's nice

[candid terrace]

Well I'm trying, I've got a backlog of novels i have to finish anyhow

[tight dew]

ah

[drifting tinsel]

connect w/ people from uni/highschool, cold outreach to recruiters, add people in this discord, family/friends, ect... The point is to get as many people in your network. Take it a step further by keeping in contact with the people you connect with.

This is still something I'm working on and if done right it's something you will always be working on

[glossy dock]

I have a friend who’s interested in getting into cybersecurity. I’m not sure if he’s part of this discord, but I told him about it. He’s worried whether or not he should major in cybersecurity because it’s typically not entry level. I told him I would personally major in computer science to get a solid foundation on programming, which can be very beneficial for cyber jobs, especially since you can learn cyber defense and offense on sites like tryhackme, hackthebox, blueteamlabs, and LetsDefend probably better than from a college degree. Not to mention the hands on certs from TCM and OffSec.

Would you guys recommend otherwise? I think he’s starting from no IT experience and he’s aware that help desk is probably the first move.

[lethal cloud]

Comp Sci degree is the way to go. You can’t beat low level knowledge. I did an IT degree because I wasn’t committed enough to school, cyber degrees didn’t exist yet. I made it work over time but my CS friends had more opportunities, and a much easier life after graduation

[supple arrow]

Yes !! Tell these kids 😂

These kids are overly confident about themselves. They assume they will be the best in the future and that every company will be begging to hire them. Lol. They don’t want to earn a decent degree and think that just taking some unknown course and watching YouTube videos will get them there.

GET A CS DEGREE—IT WILL OPEN THE DOOR TO COUNTLESS OPPORTUNITIES.

College is important

[mystic drum]

Reposting for visibility. If anyone can give a feedback to my resume, I would much appreciate it! @flat sedge, sir, you have a moment to look at it. Thank you all!

[serene umbra]

Gave +1 Rep to @flat sedge (current: #11 - 802)

[deft solstice]

I would add expected completion time of the bachelors degree instead of In Progress (if thats not in the redacted part 😀).

Also if possible I always recommend actually showing some work you did, so in this case if you have written a blog post about malware analysis and reverse engineering already, I would include it (and if not I suggest creating one).
Doesn't have to be a perfect one or for a malware that was never analysed before, but it should show your thinking process and any interviewer will ask for more details about it anyway later 😉

[warm hinge]

From my experience, degrees get overlooked the second you have work experience

I've seen stats saying people with degrees get paid more than their degree-less colleagues but that's not true (in my country atleast) after 5+ years of work experience

[vapid kiln]

this legit?

got an email

[proper warren]

It really depends, I am a Sys Admin making 75K in US with No Degree 4 YOE, while my colleague has a degree in Information Systems with 2 YOE making 15K less than me, same job. I think it comes down to experience, and it gets to a point where employers stop giving a crap about schooling.

[warm hinge]

Yeah I agree. My points more there's pathways around the painful debt of degrees and most workplaces won't care about one after you have 5 years under your belt

[proper warren]

True, but I also feel for those that decide to chase the degree knowing well they don't need it (in tech), because of how bad the market is. 4-5 years ago, you could attend a coding bootcamp or just have a couple certs and land a job ez pz.

[fiery ruin]

Heys guys, i have IT+, A+, net+ sec+ google it support, and doing Google Profferional Cybersecurity certificate rn, and i can't get any it jobs rn

Do you guys think those are enough i applied a lot but no response

[tardy lance]

Make your choice that where you want a job in Red or Blue team then push your efforts to either of it. However all of Certs you have achieved and you are up to will not go unnoticed so keep it up also make this learning curve a habit because it is must in Cyber Sec.

What country do you reside? @fiery ruin

[fiery ruin]

Ohh will not get noticed? Why?

I want to work in blue team cybersecurity analyst, soc analyst, it support, sys administrator

Any of those are ok

I live in Canada 🇨🇦

Wbu?

[warm hinge]

It support or sys admin roles will probably be interested in you.
I don't know got cyber sec analysts

[tardy lance]

I'm in UK

[fiery ruin]

Thanx bro but I am getting no attention when I apply still

[fiery ruin]

Oh u work as a cyber security analyst?

[tardy lance]

You are on right path. Tailor your CV, Cover letter and Supporting statement according to job specs. Eventually you will achieve a job. After Google Cybersecurity professional, Consider about SOC Level 1 and 2 in THM

[fiery ruin]

How is the job market there?

[tardy lance]

I would say competitive.

[fiery ruin]

What is job specs?

[fiery ruin]

U mean their soc 1 or 2 course or a job there?

[tardy lance]

Job Specifications

[warm hinge]

Nah sys admin. Meant to type i don't know about cyber*

[fiery ruin]

Same here

[tardy lance]

SOC Level 1 and 2 pathways in TryHackme

[fiery ruin]

Ah I see but what if I don't have those job skills that they require those ai can just lie and I submit

[fiery ruin]

Nice, how is the job?

[fiery ruin]

Ya i am doing soc 1 at 3% only

[warm hinge]

For IT support the only real skill needed is interpersonal skills. So any job experience working with customers should cover that

[fiery ruin]

Ya i have that because I run some freelance buisnesses

[warm hinge]

Good, I've been pen tested so many times and failed im looking to move into the security so I can have a win against red team

[fiery ruin]

U mean u got pen test interviews?

[warm hinge]

Nah nah, my company's been through pen tests

[tardy lance]

What are your qualifications? @fiery ruin

[fiery ruin]

Ah I see but ur a sys admin not cybersecurity stuff

[warm hinge]

We don't have a cyber security team, just an external SOC. So utilmately securing our servers and users falls onto me and 1 other

[fiery ruin]

A+,it+, sec+, net+, Google It support and doing Google Profferional Cybersecurity cert rn with tryhackme soc level1, job experience Coding instructor and Electronics repair as a freelancer

Wbu?

[warm hinge]

You have job experience as a coding instructor but no companies are replying back for it support?

[fiery ruin]

Ah I see

[fiery ruin]

Yes😂 they probably don't see my resume

An it support get posted 2 hours later 100+ have applied

[warm hinge]

Probably need to adjust your resume to suite the jobs you're applying for. You're welcome to post it here just remember to remove any PII

[tardy lance]

I have MSc in Cyber Security, Plenty of Certs. In Microsoft such as AZ,AI,SC - 900 and I am in Top 1% in TryHackMe with Cyber Security 101 and Security Engineer pathway. Plus I have industry experience in Technical Support, NOC and SOC. I think still this is not all I'm forgetting something but it's fine.

[fiery ruin]

Adust my resume how? Like with AI?

[fiery ruin]

Oh wow that is already so fine lol, so when u apply for a job u probably get accepted immediately before u apply😂, right?

[tardy lance]

While my experience seemed to align well with their job requirements, I suspect they opted for someone more experienced who was willing to accept an associate-level salary, likely offering them better value.

[tardy lance]

What is your experience so far. Have you been through any job interviews?

[candid terrace]

Contacting them everyday? That's something I've always felt is harder to do because of the lack of topics to talk about, like even if I contact them, then what do i say? And if i say nothing then how are they gonna even remember me in the first place?

[warm hinge]

I mean you can but I'd just ask for help from people

[undone shore]

That and if the recruiter notices or suspects, they're unlikely to be best pleased...

[fiery ruin]

No I have not got any since I started applying last month, just ppl apologizing that they found someone more suitable and they can't accept me

The ones I got two months ago was a job but not even part time occasionally when they get IT issues the company call me and I go fix for them

But that is like less then 4 hours per month usually

And they contacted me because I had an ad on fb marketplace for electronics repair

[fiery ruin]

Wdym l am not sure if understand the tailording my resume thing

U mean I ask help from ppl ik everytime I want to apply?

[late anchor]

its better to adjust your resume to the specific position/company ur applying for, thats what it means to tailor your resume

[fiery ruin]

So by editing or through ai?

[late anchor]

Its better to edit it yourself

Ai would put a bad look to recruiters

[warm hinge]

If you're applying for a job as a manager at a deli you're not going to talk about IT/Security experience you're going to talk about people managing experience within the same jobs.
You mentioned you're applying to it, sys admin and cyber security. They all look for different strengths

[heady bronze]

anyone knows prenetration testing here?

[merry axle]

Yes

[plain vector]

thanks for the answer

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 456)

[torn horizon]

Chyatttt what all do I need to study about Vulnerability Management

What are some tools that are used in corporations

[keen tundra]

Check out these rooms to learn some 🙂
https://tryhackme.com/room/vulnerabilitymanagementkj
https://tryhackme.com/room/vulnerabilityscanneroverview
https://tryhackme.com/room/openvas
https://tryhackme.com/room/wazuhct
https://tryhackme.com/room/snykopensource

[candid terrace]

@tight dew it's the evening and only 3 hours for screen time today

50% reduction

[torn horizon]

Awesome!!!!

[tight dew]

👍

[candid terrace]

https://tenor.com/view/once-again-asking-gif-1292400885017069090

In what to do about my LinkedIn? What content should I write there?

[fiery ruin]

That will take a lot of time 😭

[fiery ruin]

Ah I see, I have multiple resumes for each job role but I don't edit it each time before applying

[drifting tinsel]

It doesn't have to be every day, just keep up with people so they remember who you are. It doesn't have to be everyone either, just the important people that can be a mentor or help you get a job. Don't just start spamming the same person everyday bc you're sure to get ignored like that.

[fiery ruin]

@warm hinge So what certs did u gain to land a job in sys administration?

[vapid kiln]

300 applications and no response, im about to crash out

[fiery ruin]

That is my resume can you guys please check it and give me a second opinion?

[undone shore]

If anyone clicks that link in here I would be amazed...

Take screenshots of the PDF, redact anything personal, then post them in here

[warm hinge]

Hi there guys is anybody in UK I need advice for my future career and just what to do

[undone shore]

You after an apprenticeship by any chance?

[warm hinge]

No IM after a anwser for what to do

IM lost

So confused

[undone shore]

Okay, if you're after an answer, what's the question?

[warm hinge]

Ok let me just coppy and paste what I said to others

basically i failed all my GCSES including gcse ocr computer science and other subjects i really want to prusue a career in IT/cyber security i have been trying for exactly 3+ years now coming up to 4 and im still not understand i have asked hundreds of people throughout the years i have been trying to learn this stuff however nothing works at all im still not understanding the very basics its extremely hard for me i have tried every way of learning possible and i still for some reason just dont get it now im not sure whether to continue to prusue cyber security/IT as i am moving to a new school and i have a option to take a level 3 cyber security and digital forensics course

And im just not sure whether to pursue It anymore because I am on the verge of giving up even tho it's a passion and what I want to do in the futurs

[undone shore]

Any particular aspects of cyber?

[warm hinge]

That I want to pursue?

Or that I don't understand

[undone shore]

That you want to work in

[warm hinge]

Honestly in not 100% cloud seems fun so does networks and vulnerability researcher seems cool to but I think a network engineer is cool or just something but yeah IM not sure

Just something

In cyber

That I can work my way up in

I don't need a high paying good job straight Away

[sleek sedge]

What methods have you tried in terms of learning? Is learning something you struggle with in general, by the sounds of it?

[warm hinge]

God litterally everything to much to even say but yeah I struggle with learning I guess

[sleek sedge]

What support has your current school offered you, if any? I'm guessing you're around ~17? With this new school, is it a college that offers courses?

[warm hinge]

Yeah just a normal college it's btec IT level 3 just the cyber security and digital forensics pathway and yeah in 17 soon and I don't get much support but they help yes as they have it in place for 3, years I have worked with my school to try help me but nothings helping

So if you got any advice that I haven't already heard from everyone I'd be happy to know @sleek sedge @undone shore

[sleek sedge]

The thing with cyber is that it's a constantly evolving field, and to keep up, you will continually have to learn new things. Being "good" in this field isn't about what you know, but how you learn. I'm saying this not to discourage you, but to make you aware if you wish to continue down this path.

The other thing that important is having the genuine drive and passion for the area. You won't get far without it. I'd highly recommend reading this https://phrack.org/issues/71/17 to give you some insight into what being a hacker is about.

Finally, returning back to the learning issue. Please, please, please go out of your way at the new college to get help and advice on how to learn & study better. (Although it seems like you're doing this already, which is great to hear) It is **their **responsibility to give you the education and help that you're owed, and most colleges will offer an incredible amount of resources to help you, but you need to be pro-active about it. (To add on: it may be the case you potentially have a disability that impacts your ability to learn, like ADHD. I'd speak to your GP about it, while you're still legally a child - it seems to be a lot harder to get referrals as an adult in our NHS)

I hope that helps, if you have any specific questions then ask away

[warm hinge]

I have EHCP to support so I will get support anyway I know what a hacker is and what there intentions are and the different kinds I don't want to be one I guess but I could do I try to keep up yes with the latest news and stuff and trying to do it on tryhackme to when I tried learning it not long ago it was so confusing I didn't know where to start because even on the easy sections it was so confusing it I couldn't understand what it was saying it wasn't even like basic stuff and all I just don't know where to start with tryhackme to

I tried the easy ones but it's all still a bit advanced nothing actually beginner that tells you the stuff

[sleek sedge]

That's great to hear. And understandable on feeling a bit lost on where to start, it is definitely overwhelming

https://tryhackme.com/hacktivities

Start at this roadmap with the pre-security

Can you try your best to articulate what you couldn't understand?

There are also plenty different career opportunities in cyber, apart from being a hacker, which you'll find out about in the rooms ^^ - Check if any of those stand out to you as "heck yeah I'd love to do this". And if not, that's perfectly fine - it's not for everyone. Best of luck with it

[warm hinge]

Yeah don't really want to be a hacker to be honest but I'll have a look now

[prime scarab]

hello everyone I'm Manindhar and i am new to cyber security domain, completed certification like google cybersecurity and currently enrolled in tryhackme pen testing path looking for entry level jobs in future, so i want to know what are the skills required for to get entry level job and does the certification like CompTIA matters in entry level can you help me or guide me on how to land entry level job. Thankyou in advance.

[proper warren]

I recommend focusing on creating some labs and applying for Helpdesk jobs to build experience. It's unlikely you'll jump straight into Cybersecurity, but stay motivated with your studies as you begin your first role. Keep your interest in your specialized path while working on getting your foot in the door.

[keen tundra]

There're even a few challenge rooms related to this 🙂

[stoic cave]

Responding to this one, still scrolling up, but degrees come into play with not only salary but also progression and contract requirements. For me personally, I make more than my degree-less peers. I have also had trouble bringing people onto contracts because they don't have degrees and we were at our non-degree maximum. That's not to say degrees are 100% required, nothing is absolute, but it can absolutely open doors.

Sorry, forgot progression, degrees are often required for managerial roles

[stoic cave]

Is that your first job? If so, was that your salary day 1? Imo, that difference comes down to negotiation.

Not clicking this. Post it as a PNG

[fiery ruin]

Lmao why? I will hack yall? The link is 100% clean u can double check via any reliable link checkers

This time u didn't Google lol😂

[stoic cave]

If you want help, you should post a redacted copy via PNG or other discord accepted image format. People do not want to click links or download files on a hacking discord.

[fiery ruin]

What is ping? I tried sending the text only discord didn't accept it, it said it is too big for a free user or something like that, the file wasn't appearing in my files folder on linix when I was trying to send it

So I copied it from the chrome copy file in the download after u press control j ect

[cinder orbit]

.PNG is a really standard image format. More than likely the easiest workflow will be to save it as a PDF From Google docs or word, then export it as a PNG or JPG

[fiery ruin]

Ok I will tell chatgbt to convert it, I don't know how to convert it

[candid terrace]

I do not mean like that, I just meant if I should start posting a series about that not dm the same person everyday lol, I know it's bad which is why I'm not planning to do it

[warm hinge]

That's quite interesting, I haven't bumped into contract work requiring degrees. Is this in the US?

Then again i am quite young into my career

[undone shore]

Put simply: because we shouldn't have to go and check whether the sketchy link you're posting is clean.

You are asking us for help with your CV, not the other way around. Considering we're doing you a favour by voluntarily giving advice which would be billable in other contexts, the courteous thing to do would be to make an effort to make that easy for us 🤷‍♂️
Of course, the flip side of that is that you simply won't get help if you don't

[drifting tinsel]

Whatever works for you. It doesn't hurt to post about cyber security on LinkedIn as long as you're posting valuable content. A recruiter or connection will probably look through your account and they'll be able to see what you've done yk

I don't think it's necessary to post everyday just do what works for you. Post your projects, achievements, career stuff etc... It doesn't have to be influencer status posting, but enough to show you're still actively progressing with your life.

[fallen bluff]

Hi everyone

Someone know this Job : "Secure Infrastructure Administrator" ?

or what would u recommand to "learn" when, as me, u would like to work in "system administrator"

(i am already learning with tryhackme)

[sweet sundial]

hi guys, who has an awesome profile-readme (github) template for cybersecurity with thm badge pls ?

[stoic cave]

When I say contract, I am talking about contracts between Orgs and not individuals. So X company needs help with Y, so they hire Z company to fill their needs. In the contract, there may or may not be language indicating a certain number or percentage of the performers have degrees. Organizations also like having performers with degrees because they can charge more.

[exotic thistle]

I'm planning to get the COMP TIA+ certification this month. Is it worth it?

[stoic cave]

Which CompTIA certification? It depends on what roles in your area are looking for. Do you have a degree or prior professional experience?

[warm hinge]

@sleek sedge @undone shore I tried this however it's extremely confusing and it's just not going in my brain remembering it it's extremely wordy and not simples down and not short text

[exotic thistle]

No work experience yet but I have a bachelor's in IT

[warm hinge]

Ah gotcha, ill look into that. Cheers

[fiery ruin]

worth it if u want solid foundations before cybersecurity, Not worth it if u want a job quickly

in cyber

[stoic cave]

So, I would begin applying to positions then. Security+ is the baseline cybersecurity certification and the only certification I would recommend someone paying for themselves.

What is this

[fiery ruin]

Hey guys the resume sorry I had to send it like that

because chatgbt didin't want to convert it to png

[stoic cave]

But you didn't.... Post it as an image

[fiery ruin]

and u guys didin't want to click the link

[fiery ruin]

ah too much work I am lazy bro😂

rn

[stoic cave]

Then you won't get help, easy as that

[fiery ruin]

bro if u don't to help u don't have to ok?

[stoic cave]

Not your bro, for the umpteenth time

[proper warren]

Not my first job, my progression is below:

Tier 1 Helpdesk: $21/hr

Tier 2 Helpdesk: $24/hour

DevOps Specialist I: $65,000 per year (certs and networking internally helped alot)

IT Analyst II: $62k (took paycut after affected by early 2023 layoffs)

IT Systems Administrator: $75k

[cobalt escarp]

Hey @fiery ruin walls of text are disruptive to the channel, as per our community rules.

Would you mind coming back when you have some more time and uploading it as a file, please? :) 🙏

[fiery ruin]

Ok bro no issues

[cobalt escarp]

Much appreciated

[stoic cave]

OK, so their salary should probably be compared to your first salary as it's likely their first position out of school. With a degree, they started a bit further "up the chain" and are making more than where you started. This isn't a knock, it just shows the difference in starting points when it comes to degree vs non-degree.

[cobalt escarp]

Just following up here, would you like me to suggest something CV/ Resume builders?

You only need to copy and paste what you have already written into their templates. It will get you half of the way at least

[proper warren]

Definitely agree

[fiery ruin]

Ya sure, ty

[serene umbra]

Gave +1 Rep to @cobalt escarp (current: #6 - 1475)

[cobalt escarp]

Awesome! Here are a few I have used in the past, hopefully they can be of help:

https://resume.io/uk/cv-builder

https://www.canva.com/create/cv/

https://europass.europa.eu/en/create-europass-cv

[modest cloud]

@granite quest pm pls

[tiny aspen]

were should i start if i want to do a career in it
ive done about 30 labs so far on tryhackme
doing coursera google it
doing python lessons
studying for comptia

[rose crater]

No prior experience 3 weeks into a sec+ bootcamp should I look for a helpdesk job?

[merry axle]

Yeah get your feet wet with an entry level job. Try a computer store

Help desk is very saturated

[rose crater]

👍

gotta leave the restaurant😂 😂

[fiery ruin]

ty so much bro

[serene umbra]

Gave +1 Rep to @cobalt escarp (current: #6 - 1476)

[rustic cedar]

Hhh it’s time to upgrade

[fiery ruin]

https://www.linkedin.com/in/magued-r-0b49ab319/

[rustic cedar]

How can I find the sec+ boot camp?

[rustic cedar]

Which link is this?

[fiery ruin]

while I update the resume u guys feel free to check my linkedin,suggest improvments and add me ect

[rose crater]

I'm going to a local technical college

[fiery ruin]

I haven't updated it but I will hire a proffetional expert soon to optomize it for seo ect

[fiery ruin]

My linkedin profile

[keen tundra]

You have a free course from Professor Messer on YT, a lot of people recommend it 🙂

[rustic cedar]

How can I find it please?

[keen tundra]

You can check it out on the link below 🙂
https://www.youtube.com/playlist?list=PLG49S3nxzAnl4QDVqK-hOnoqcSKEIDDuv

[rustic cedar]

Advisable From complete beginner?

[keen tundra]

Yes 🙂

[rustic cedar]

Ok thanks 🙏

[serene umbra]

Gave +1 Rep to @keen tundra (current: #2 - 3148)

[cinder orbit]

It’s not a walkthrough per say. The content is there, you’ll want to supplement with notes or other resources. But he hits all the specific points of the test requirements, but it’s direct and to the point

[gray swift]

👌

[bright verge]

Hey everyone,

I'm setting up a secure hacking environment on my Mac (Apple Silicon) and ran into a networking question. Since VirtualBox isn't an option due to my Mac's ARM-based CPU, I'm using UTM as an alternative to run my Kali Linux & Mr. Robot VMs.

The issue is that UTM only offers "Host-Only" networking as an isolation method. This means:

Kali Linux can't ping my Mac, which is good.
My Mac can ping Kali, which makes me wonder if the isolation is sufficient.
My main concern is whether this setup is secure enough for hacking practice (e.g., CTFs, pentesting exercises). Do I need full isolation where even my Mac can't communicate with the VMs, or is Host-Only sufficient as long as the VMs have no internet access?

[rugged delta]

Most of the time I'll put my VMs on NAT, meaning they're in a separate network, the same way your home network is behind the NAT of your router and separate from the internet

[warm hinge]

Hey guys asking this again

basically i failed all my GCSES including gcse ocr computer science and other subjects i really want to prusue a career in IT/cyber security i have been trying for exactly 3+ years now coming up to 4 and im still not understand i have asked hundreds of people throughout the years i have been trying to learn this stuff however nothing works at all im still not understanding the very basics its extremely hard for me i have tried every way of learning possible and i still for some reason just dont get it now im not sure whether to continue to prusue cyber security/IT as i am moving to a new school and i have a option to take a level 3 cyber security and digital forensics courseAnd im just not sure whether to pursue It anymore because I am on the verge of giving up even tho it's a passion and what I want to do in the future.

Need some advice

Thm is like a last hope effort but IM nearly half way pre cyber now and im still not understanding or remembering anything it's telling me

[rugged delta]

Okay, well the important thing to do when pursuing a field like IT or cybersecurity is to understand that it can take a long time. There's a lot to learn. Do you know about Windows, Linux, Networking or coding to any extent, or how a computer works? It's really important to just start at the basics.

Secondly, you should be having fun when you're still learning. Sure there's a lot to learn, but you should be playing and experimenting, rather than just seeing everything as a test or preparation for a test so you can get a job. That stuff will happen, but you have to give yourself time to enjoy it.

Thirdly, don't beat yourself up over not getting it. Cybersecurity takes time, patience, repetition and focus. Give yourself 30 minutes every day where you sit down and do 'something'. Anything, reading a walkthrough or a few pages of a book, answering a few questions, trying a target machine in one of the rooms, scribbling some notes in a notebook or typing them up in Cherrytree or Obsidian (Obsidian has a number of features to make understanding how everything connects together)

[warm hinge]

I know how a computer works I think that's pretty much can't even understand python or any of that stuff I saw it as something interesting and exciting however it feels like for how long I have tried now and all I have done for it to ammount to nothing and not even know basics still is quite unmotivating which has made it less exciting in still very interested and really want to have a job because it's seems really fun I have done exactly what you said before 1 hour everyday trying to research and try new topics in cyber I don't get it still

[rugged delta]

The only way to learn this stuff is to read, study, watch videos and practice to the best of your abilities

[rapid wind]

it seems you put a lot of effort into learning cybersec - and it sure is a never-ending field.
maybe make sure your position of "I don't understand it" is really where you think it is - frustration on CTFs and many THM exercises should be expected where you encounter the borders or your personal knowledge.
then again, question yourself WHY you want to persue that way, even after such a long time. maybe there are some corners that you feel more confortable in than in others? e.g. maybe development & architecture are your thing? or teach / security awareness? or if it's too much technology (and that IS a lot!), looking at organizational topics like in ISO 27001 is an option for you.
what exactly is it that keeps you in the field? what is your goal, exactly?

and as always, basics help in advancement 😉

[tough furnace]

Hello, I’m about to graduate with my bachelor’s in Bsc(IT) and I’m thinking about a master’s degree in cybersecurity. Do you think it’s worth it for getting into the field? Or are there other paths I should consider? I’d love to hear your thoughts🙂

[plain vector]

Hi everyone anyone got experience in building a home network project ?

I will have some questions

It can be any other beginner projects.

[wheat shoal]

don't ask to ask just ask, what are your questions ?

[rugged delta]

It depends where you're from and what position you're going for. In many cases a MSc in cybersecurity can be seen as the next logical accompaniment to a BSc, and in other contexts it's seen as holding a level of expertise already in the field. You would probably still need to pursue certifications, develop a habit for reading books in the field, eventually finding a specialisation once you are comfortable with the general skills you need. It's an ongoing development for yourself and your career. Some people pursue a masters right after the bachelor's and some wait a few years to pursue it. I would suggest reading the Tribe of Hackers books to see what some of the interviewees say about their experiences and knowledge.

[plain vector]

I will have questions based on the project. What kind of project u have ?

[wheat shoal]

well depends on what's your project, my projects have nothing to do in the conversation, it's not me asking for help here

if you want people to answer your questions just ask them with the context of your project

[tough furnace]

Thank you so much for taking the time to share such detailed advice! I really appreciate your perspective, especially on how a master's degree can be seen differently depending on where you're from and the specific role you're aiming for. That’s something I hadn’t fully considered before.😶My goal is to become a red teamer, but I don’t work anywhere yet since I’m still studying at university. I’ll definitely check out the "Tribe of Hackers " books. 🙂

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 459)

[teal hatch]

What do yall think is the best way to get knowledge if your just know wanting to get into cybersecurity

[wheat shoal]

"cybersecurity" is very large field you should probably be interested first to learn the basics before like how to code, how networking works etc...

[tough furnace]

"if you never try, you will never know". You can try each field

[rugged delta]

It's worthwhile to pursue such a career goal, but take into consideration that red teaming is a highly skilled pursuit that pentesters undertake to overcome an objective using the tools and skills an advanced threat might use when attacking an organisation. Being a penetration tester is a highly skilled role, and a highly competitive career pursuit in itself. It's expected that you would learn and understand IT technologies and skills to a high level and have several years of professional experience in IT and cybersecurity prior to pursuing a role as a pentester/red teamer, though there's always multiple avenues.

It is something worth taking your time with, as you will find your strengths as you explore the field. Being generally knowledgeable about cybersecurity and IT/networking can teach you a lot about the possibilities for your career. While pentesting/red teaming is an admirable pursuit, thos eposts are competitive and the skills you gain pursuing such can be applied to many other roles in the field that are as rewarding

[tough furnace]

Thank you so much for this thoughtful response! Understanding IT technologies is truly my passion, and I really appreciate your insight into how challenging and competitive red teaming and penetration testing can be. It’s definitely motivating to hear this perspective.

I think I’ll focus on working as a penetration tester or IT help desk after graduating from university, gaining deeper knowledge along the way, and eventually earning the OSCP certification. I believe this path could help me move closer to achieving my goal of becoming a red teamer. And, ill defintely check out the "Tribe of Hackers " books. 🙂

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 460)

[plain vector]

1.Comptia a+ basics
2.Networking: Comptia network+, CCNA
3.Script learning:Python,C#, Golang, Perl
4.Virtualization:Wmvare,Virtualbox,
5.Comptia Security+, Pentest+, Crypthography, Attacks.
7.Tryhackme.
8.Database,SQL,NoSQL,Regex,3-Tier Application,Web Application
9.Forensic,Public key infrastucture.
10.OSCP, CEH <,Pen test,GPT certificates

here is a roadmap that I have managed for myself Im starting from really basics and going up one by one.

I would appreciate for advices.

[tough furnace]

These days, I’m doing hands-on practice with forensics, web penetration testing, network traffic analysis, OSINT, OPSEC and mobile penetration testing also reading books related to those to gain deeper knowledge.

[warm hinge]

Ok yeah I want to pursue it because I love it I like how systems work break and how they are fixed I like to mess with stuff and help catch criminals etc I find it really interesting and fun I tried but it seems like all I try is the same I don't understand it where can I look at ISO 270001 And my goal is to really help company's/people I want to work for the government or some type of anti fraud prevention team or something or maybe a bank being a security analyst or it doesn't even have to be a security analyst role it can be anything in cyber security IM not bothered I just find it all so much fun that's what keeps me going

[rugged delta]

#start-here is a good place to check out

[oblique portal]

so im 14 weeks in merit america cyber security program anyone have advice to what step i should take next after finishing coursera google cybersecurity cert and completing soc 1 and soc 2 on THM I'm still working on Intro to cyber with EDX.org as well but i feel like I haven't learned enough to find a position as an analyst

[fiery ruin]

They require 5 years of experience and already 17 ppl applied in 16 min lol

We are well cooked

It's over for IT i thinj

[faint ice]

5 years of experience to sit and recieve calls and answer common questions with a bit of rdp to fix the common issues???

[fiery ruin]

Imagine if it was entry level

[faint ice]

sounds weird to shadow

[fiery ruin]

Yes, 500 ppl will apply by tomorrow

It's insane

We better apply for Macdonalds lol

[thick spire]

I've applied for over 80 jobs in the past 2 weeks, a lot of those were listed a "Junior" or "entry level" IT positions and the ads were asking for 2-4 years experience in a similar role. I feel like somethings up

[warm hinge]

Sys admin?

THats cool

[fiery ruin]

Was cool*

[warm hinge]

It is

[fiery ruin]

Bro sys admins, software developers are at Macdonalds rn severing fries

Or jobless in 2025

The IT trend died

[warm hinge]

There will always be demand

[fiery ruin]

But nothing like before

The demand got worest i think down by 13%

In canada

And I believe it will get even more worest due to ai and automation

[craggy lake]

[ADVICE NEEDED] does anyone know what the key differences in “product security engineering” and “security operations engineering” are? i applied for the prior and passed the interviews. they seemed to think i was good but someone else had more experience so they’re giving them the offer. They offered to put me on an operations security role at the same level but I’m worried that it might not involve as much coding. Is that generally the case?

[warm hinge]

Nothing

[warm hinge]

That can't replace human support

Otherwise so many people are gonna go without jobs

[warm hinge]

AI in its current state is horrifically bad at basic IT helpdesk

[proper warren]

Agreed

AI is a tool, not a replacement (yet.....)

[keen tundra]

That's true . Don't know why people are so scared of AI . Like we still have job of translator even if google translate was launched 20+ years ago 🙂 .

[warm hinge]

Its a lot of fear mongering. Tech jobs are still on an upwards trend. Especially cyber security.

[radiant cave]

Well, is Linkedin your primary job hunting site?

[fiery ruin]

I use also glassdoor but only those two

Kijiji and fb marketplace for my electronics repair

Buisness

[radiant cave]

Also make sure your keywords are correct for job searching and job alerts (ie. No experience, or however many years; etc)

[radiant cave]

Try ziprecruiter, and indeed to that pool as well

Also there are apps around that make the entire IT world of job finding easier, not sure if they are for internships mainly but I think I saw one that had startups in the mix.

[fiery ruin]

Thanx bro, what are those apps?

[radiant cave]

I'll try and look for it as I didn't save it myself, also try this youtube video https://www.youtube.com/watch?v=e2h_BreIxaQ

[fiery ruin]

Thanx bro i will check it

[fiery ruin]

Have u tried staffing agencies

?

[radiant cave]

Not familiar with that personally

[fiery ruin]

I agree but why they say it automaticaled most entry level helpdesk?

[marble elm]

clicks = $$$

[warm hinge]

Sorry?

[fiery ruin]

Sorry I was typing fast

So most ppl say that most entry level IT support got automated

[lethal cloud]

AI is still terrible at this. Tell it your internet is out and it’ll have you calling the ISP before it tells you to check DNS. Because it doesn’t know what questions to ask. Not to mention SaaS access requests, troubleshooting, and shadow IT.

[narrow blaze]

Is trying to get a CS degree even worth it anymore? I’ve heard so many warnings about not pursuing one because the job market is so bad, doubly so since I live in Silicon Valley

The good thing is that I’m not very far into my degree, at least

The unemployment jokes are starting to get to me 🙃

[ashen herald]

Getting a CS degree is very very good if you are going into the cybersec field, you would be able to learn the fundamentals of computers which will propel you to be a verifiable cybersec professional and it gives you a strong foot into the door.

[warm hinge]

Guys what exactly should I learn on tryhackme me if I want to be a network engineer

[stoic cave]

If you're talking about cybersecurity roles, it makes sense as cybersecurity isn't entry level. That 24 years of experience it's asking for is experience in another area of the computer industry, such as IT Helpdesk.

[stoic cave]

There are varying levels of Helpdesk and Systems Administrator. The role title itself does not designate the experience requirements in this case

[stoic cave]

You're using CS for Computer Science here, yes? If so, yes, it's a valid choice. It opens up a wide array of possibilities and positions that can include or are in a different field than cybersecurity.

[green python]

Cybersecurity student here , still looking for opportunities and interships , i dont think the issues is automation and Ai , maybe for smaller role yes . I think the issue is the high demand of qualifications that just dont exists currently , businesses and agencies dont seem to wanna train new entries

[lethal cloud]

Maybe Wireshark and Zeek but THM isn’t the best platform for network engineering. That’s a different career track. You would need to focus on cloud network (I.e. AWS VPC) and Cisco CCNA type things

[green python]

To add on this, ai and automation as become an issues in HR and application processes . Why resume, cover letters and more get filtered by ai tools ... An approximate of 50-75% of resume dont even reach a human because of these ATS falsly selecting people . New workers in cybersecurity wont have a chance because guess what ... there resume doesnt meet the criteria of these ATS

[warm hinge]

For beginner tho that I don't have to pay for

[stoic cave]

If you're not in school or have a degree, get an entry level job on something like a Helpdesk. You need experience for network engineering.

[warm hinge]

IM in school

I can do a apprentischip

So you don't need experience

[lethal cloud]

You can learn some cloud networking on AWS' 12 month free tier. just don't spin up paid resources

[stoic cave]

It's not entirely the businesses don't want to train new employees, cyber itself is not an entry level occupation within the computer industry. There is an expectation that you'll bring some prior professional experience, in something like IT, or a STEM/Computer focused degree to those entry cyber roles.

[stoic cave]

You don't need experience for Network engineering? That's not a true statement.

If you can do an apprenticeship through your school, that's good.

[fiery ruin]

But why the high firing lately edpecially in big companies? And the increased unemployment rates in cs?

[warm hinge]

For a apprentischip no you don't

[warm hinge]

How long does it take to get the IT certification for a complete beginner?

[stoic cave]

Which IT certification? There isn't a singular certification. If you're talking about working on a IT Helpdesk, just go apply. Tier 1 positions generally don't have any requirements.

[warm hinge]

I am talking about the A+ and network+ certification.

[cinder orbit]

i think this might be outdated info, have you looked at help-desk job listing recently? many are asking bachelors + 1-3 years. some even 2-5 years. for $19/hr

[stoic cave]

They can ask for it, but the requirements on job applications are written like a wish list. Tier 1 Helpdesk is the ground floor and all it requires is basic competency and a desire to learn.

[cinder orbit]

sorry, I should clarify. they are not using wording of "asking" it is literally listed as "minimum reqs"

[stoic cave]

If you know what a computer is and what the parts do, A+ isn't required. I would start applying now and then look to have something like Network+ paid for by your future employer.

[stoic cave]

Right, I assumed that.

[toxic zealot]

Anyone use tryhackme labs for CPEs? Does anyone know if they're accepted?

[pearl yoke]

Hi everyone!
I need some advice... I worked for years as a help-desk and now I have completed some Paths on TryHackMe. My boss asked if I can start doing internal and external pentesting at my workplace. Since I haven't done any professionally, I don't know where to start. Could you give me some tips?

[broken idol]

If nobody in your own org can guide you,. probably not a good idea tbh

[pearl yoke]

I'm already into security where I work (Patch Management, VDR, SIEM). But the Pentesting thing is totally new for me. I think it's gonna be a good thing for the CV.

[broken idol]

This could also go horribly wrong if you have no idea what you're doing and nobody to guide you.

[pearl bluff]

i took a ccna course from cisco and now i'm reading sans books like sec401.2 , 401.3 and 504.1
and i got a premium sub to tryhackme
what rooms should i join while studying these books ?

[keen tundra]

Which field of cyber security are you the most interested in 🙂 ?

[pearl bluff]

SOC

[keen tundra]

You can check out SOC1 and SOC2 pathways then 🙂
https://tryhackme.com/r/path/outline/soclevel1
https://tryhackme.com/r/path/outline/soclevel2

[stoic cave]

Review the rules for the certification body you're trying to apply CPEs to to see if they count.

[toxic zealot]

What would they be classified as you think? I looked through the rules before.

[stoic cave]

I agree with Scrubz, this is a bad idea. I would want authorization from the company owner/president or COO. If anything goes wrong, it can negatively impact the business. The blame would also be pointed at you.

[stoic cave]

It depends on the certification body. You need to look at their CPE rules to determine if you can use THM, and if so how much, is what I am saying.

[toxic zealot]

Thanks I think so I mean reading case studies and articles are included

[serene umbra]

Gave +1 Rep to @stoic cave (current: #20 - 497)

[toxic zealot]

I'll just add one one and track it I've got three years so no rush

[warm hinge]

It's the fastest growing industry. The only layoffs I can think of is Intel nearly going backrupt and those FANG layoffs from a few years after covid. But that was because loans were practically free so nothing jobs were created.
AI in its current state isn't taking any tech jobs. It hallicunates so many things

[thick spire]

No, the 2-4 years exp in the roles I'm looking at for junior cyber security analyst were asking for that exp to be in cybersecurity / SOC environment. I'll find an example when I turn my PC on and back at my desk

[warm hinge]

A lot of them say "In a SOC environment or similar technological role"

[merry axle]

Few months at most for A+. 6 months ~ for network+

[warm hinge]

Thanks

[serene umbra]

Gave +1 Rep to @merry axle (current: #177 - 45)

[gloomy mortar]

what level of pentest would match the CEH or OSCP?

[gloomy mortar]

in the roadmap paths

[stoic cave]

Not sure what you mean, those are also two very different certifications.

[gloomy mortar]

how would I best prepare for CEH?

[warm hinge]

by skipping it

[gloomy mortar]

hahaha

[warm hinge]

India is the only country that asks for it

OSCP is a practically exam

[undone shore]

That wasn't a joke

[flat sedge]

https://tenor.com/view/ben-stiller-oh-you-you-dont-say-come-on-gif-4954979

[vivid charm]

anyone here guys

[undone shore]

Nope

[vivid charm]

awesome

[undone shore]

Yw! 😁

[desert mango]

intro to cyber security and half way done with cyber security 101 what should i do after to be ready for Bugbountys or something to earn in come from home or freelance

[keen tundra]

I would recommend you to check out Web fundamentals and Web app pentesting paths afterwards 🙂

[lethal cloud]

Also check out the portswigger academy, google it

[vivid charm]

i finished Pre security, Intro to Cyber Security, CYber Security 101 and Complete Beginner. What would the next step be?

@keen tundra Maybe you could help me? thanks

[serene umbra]

Gave +1 Rep to @keen tundra (current: #2 - 3222)

[keen tundra]

In which field of cyber security are you interested in 🙂 ?

[vivid charm]

well i guess pentesting would be a logical start

i would try to cover everything there is on tryhackme

but Pentesting seems like a logical solution for starters compared to security engineer

[keen tundra]

You can go with Jr.Pentester path then 🙂

[vivid charm]

with everything ive completed so far, should i choose a certificate to pursue?

which certificate would be the best for a beginner?

[keen tundra]

Maybe it's too early to pursue a certificate for now 🙂 . THM has a path that covers some topics present on Pentest+ exam , you may want to check it out and see how it goes for you 🙂
https://tryhackme.com/path/outline/pentestplus

[vivid charm]

understood. how likely is that i can pursue a certificate with tryhackme knowledge presented on the platform?

[keen tundra]

It's a great starting point 🙂

[desert mango]

thank you so much for responding guys im ALONE and its means alot for the advice

[green python]

That’s something i never understood they lay off a bunch in canada in tech sector and dont hire , my guess is they went for cheap labor / subsidies and they realized it didnt work . They also said they need 70% more employees

[vivid charm]

i understand that. but i need a more concrete answer like, can i thoroughly prepare myself for some "beginner" certificates on THM?

[stoic cave]

I'm going to assume you're talking about certifications, not certificates, as they are different. You shouldn't get a certification just because, as they are used to quantify professional experience. Once you're at a job, have them pay for the certification.

[keen tundra]

Certificates from THM aren't really valuable at all on job market 🙂 .

[vivid charm]

i think im not expressing myself properly

for example, if i finish comptia pentest + on tryhackme, where do i go from there to obtain broader knowledge

[green python]

Linkedin certs/ thm and even any free course certs are a bonus on your first resume. Sure not universally good but it shows your desire to learn 🤷‍♂️

[green python]

Linkedin courses are a goof for basic and a bit more advanced learning

[stoic cave]

They can go under an extracurricular section, but they wouldn't belong under certifications or education, just FYI

Certificates are not the same as certifications

[vivid charm]

which one provides more integrity and confirmation of knowledge?

[fiery ruin]

They need 70% more employees? Not less?

[stoic cave]

Hiring and layoffs happen in cycles and have a bunch of variables like the economy, projects spinning up or down, etc. One thing to remember is that a lot of big tech workers are actually contractors, so you also have that dynamic.

[stoic cave]

Cybersecurity has a personnel shortage

[green python]

Thats what I meant, it won’t land you a job but will definitely show your desire and dedication . But something like iso27005 or wtv are more worth but again its better to wait once they pay you to do those lol

[green python]

No in canada only roughly 30-40% of the cybersecurity roles are filled meaning they have a void of 70-60% to fill

[fiery ruin]

So why am I jobless lol?

I mean I work through side hustles only

[stoic cave]

Certifications are what companies look for. However, like I said earlier, they are used to quantify professional experience. Getting certifications without prior professional experience or a degree doesn't do much. You're just spending money to spend money.

[stoic cave]

Still haven't seen your resume

[fiery ruin]

How come? I see a job posted about cybersec 10 minites later 50+ ppl have applied lol in canada at the entry level

They have enough i think they just don't want entry level

And much on the job learning

[green python]

Its because its a highly picky and difficult field they don’t wanna invest in mistakes. Im in college still and looking for an internship is a pain , even in the military theyll turn you around unless you have ur diploma so getting an internship is doodoo

[fiery ruin]

Cuz ur scared of my links and files😂

[vivid charm]

So.... what is your advice, where do i start from? i got an impression that tryhackme is just a platform to familiarize myself but not get some valuable knowledge?

[stoic cave]

Multiple people offered to help you, but you didn't listen...

[vivid charm]

i subscribed for a full year on THM hoping it would be a good kickstart into the industry. But it doesnt seem quite so?

[fiery ruin]

It's ok bro i hired a specialist to do it, let's not get much advices from beginners when the job market is down rn

And waste time

[green python]

I stated that this morning, most of these jobs application use ATS ( application tracking system ) meaning that if ur resume doesnt have certain key words or criteria the automated/ai system will never pick you . Thats one of the main issues . Also the over filling of false applicants who apply with no educational background who think cybersecurity / IT2 jobs are education free positions

[stoic cave]

If you do not have a degree, or are not intending to get a 4 year accredited bachelors degree, you're going to need to build your professional experience. A common starting point for a lot of the industry is IT Helpdesk. Self learning can show potential employers you have drive, but it's not the same as real world experience.

[fiery ruin]

Ah I see ya when I was hiring before in my company I got a lot of shifty resumes 95%+ were

But it wasn't for IT Ofc

[vivid charm]

what degree would that be?

[fiery ruin]

Outsourced acually*

[vivid charm]

for example*

[green python]

The approximate is around 70-80% of resume gets falsed flagged and temove from the banks because of these ATS . So you only have at max 30% chance that ur Resume will have human contact

[stoic cave]

Computer Science is a solid degree choice

[stoic cave]

Where are you pulling these numbers from?

[green python]

An article ive read on careerminds the other day i cant say its 100% but from experience it feels like it

[stoic cave]

Roger that Lil bro, not like the people trying to help you work in industry or something. You do you

[fiery ruin]

Ya that is why u hired a certified expert to improve my resume, cover letter and linkedin

[green python]

Wanna look at my resume ? I dont know if i have an english version on my phone tho im out of town

[stoic cave]

Sure, go ahead and post a redacted copy as a PNG or other supported image format here

You'll need to verify

[fiery ruin]

He works in Hr and did many resumes for tech but ya I tried getting advised from Friends here in the industry and most of them just wasted my time lol

[crude sphinx]

@green python

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Feb 15, 2025, 3:18 AM

[fiery ruin]

Ya bro let me look too

[undone shore]

Oh, awesome. One less job for us, and someone gets paid for it. Win win 😆

[fiery ruin]

U can remove ur personal infos

[green python]

Ill check im on my phone so idk if i have the english version on me but ill send another day if not

[stoic cave]

So, it looks like their business is helping people get through that sort of stuff. So they're going to try and sell you on why you need their services.

I would take what they say with a grain of salt

[fiery ruin]

Lol u mean I will get hired after the update?

[undone shore]

Not even remotely lmao

[fiery ruin]

Why lol I have like 6 IT certs

And worker in the field twice + side hustles

[undone shore]

No, as in, not even remotely what I meant.

I have no idea how qualified you are or how likely you are to get a job... I haven't seen your CV

[fiery ruin]

Ah ok I thought u meant remotely as online

[willow perch]

Is it realistic to be able get an entry level job while still in Uni?

[undone shore]

Yes, but it's uncommon.

[rapid sparrow]

No web fundamentals first

[keen tundra]

There's some overlap between the two 🙂

But , you're right , you can't go wrong with either of those

[glossy sundial]

@hard stone dm me

[rapid sparrow]

👍

[proper warren]

I've seen a lot of students do Helpdesk jobs at the University itself while in school. My friend worked in the Library as their IT guy, paid minimum wage but he got good entry level experience.

[willow perch]

I meant an actual entry level job at a company

I’m already working at my school in their SOC

[fringe spade]

If you have such experience then there shouldn’t be many issues with finding a job, even if you’re a student

[willow perch]

I wish that was true

Still working on my certs

[fringe spade]

Work experience >> certs

Work on your CV, apply to different positions and find out

[willow perch]

Thats what I’m doing

Entry level jobs / Internships

All in different positions

[bold grove]

does everyone have a degree in cyber security

if so tag me so i can ask questions

im curious about which community college i should start at for different courses but the same applied degree

[broken idol]

Or you can just ask them, and get answers.

[bold grove]

i just joined last night so idk who has what, sorry mr mod lol

;-;

thy ask thy shall receieve tho so-

@willow perch question

what degree are you specifically chasing

[willow perch]

School doesn’t offer cyber sec as a bachelors so I did the next closest available thing, sys admin

[bold grove]

thats lowkey strange that your school doesnt do that

😭

i guess im lucky then, i thought it was butterflies and rainbows

my school has the option to pursue a cyber security degree, with the choice on stacking it with a certificate course.

my initial problem was the fact they have both this, but also computer science and IT

and network security as distinct courses.

and its just confusing sometimes

[bold grove]

is it hard finding any apprentinceships

because logically speaking, as a noob from my perspective, the more prevelant the program is in cyber security

the easier apprentinceships and certifications are in your area right?

[warm hinge]

gi

hi

[charred talon]

guys, i need to make a choice. I have two job offers. As a ICT Risk Control Manager (a lot of DORA : Digital Operational Resilience Act) in Finance (staff ~1300) and a job as a Cybersecurity Expert with a focus on Information Security Management in a high-security company (right hand of the CISO and 50% OpSec).

Any idea what has more potential? payment is the same atm

[prime saddle]

In my opinion its not about potential

Do whatever you feel bro

What makes you happier and want to do for a long time

[fickle grove]

Agree with zlandzuffy, go with the one you want to do better.

[charred talon]

yea, that doesnt help at all. Both sound pretty good to me

[prime saddle]

Do a research about the jobs

Watch youtube videos or ask chatgpt about benefits or anything you need

[rocky wagon]

https://media.discordapp.net/attachments/884057471340150797/936656939876745216/image0-2.gif

[fickle grove]

Which one has better company / team culture? How about which of the two immediate superior or manager did you feel you'll be able to work with?

[charred talon]

#1 would be a "new" position in that company. i would work a lot with the CIO, CISO and CRO. a lot of report reading and writing and a lot of understanding and improving operating processes.

#2 a lot of mentoring in tech and OpSec by external courses and the OpSec-Team + from the CISO

[vivid charm]

I've asked some questions yesterday regarding skills development possibilities on tryhackme. The guy named KGB and Did you google? provided me with some answers which I didn't quite expect, but i think it covers the most of the questions being asked here.
From what I have understood, a beginner in cyber security industry should be more studywise focused, rather than landing-a-job-right-away focused. That being said, the aim of tryhackme platform is to provide its users some level of familiarization with, and practice within the cyber security world. Tryhackme certificates are worthless in terms of accreditation and as a proof of honed skills from an employers point of view. To a degree, skills may be developed on tryhackme. This will prove useful if one lands an entry-level position, which will, at a certain point, pave a way for verification of those skills and knowledge with one of the official certificates (ideally, your employer will invest in your training). A proper faculty diploma will definitely put you on the higher positions of a job search queue, especially if you have a Computer Science or similar degree, since they provide an excellent base for any computer tech field, but your hands-on experience is what counts the most. Conclusion: for a career development in cyber security niche, one must put extra effort into study, work and practice regardless of a college degree possession. Entry level work ( charity or payless ) for a period of time is a first step and a reality, so expectations need to be lowered as you slowly build your experience base, which is further developed by your personal commitment and learning expansion. I hope this helps and wish you all the best.

[vivid charm]

@warm hinge 😄

[spice plover]

Good Morning! Does anyone have pointers for trying to find an entry lvl job. I have CYSA+ and google cybersec professional, and am finishing my bachelors in cyber. Im 28 so i need a job while in school haha

[warm hinge]

Do you have any IT work experience?

[sage bronze]

anyone willin to rate my CV?

[supple arrow]

Yes dm

[plain vector]

Anyone got the google cybersecurity professional certificate ?

[rugged delta]

I did the whole thing 100% in about 16 hours over the first (free) week, during the Christmas build up between a bunch of parties and hangovers and getting my other work/studies done. If you can't get it done in the first/free week, don't bother paying for it. You should be aiming for the Sec+ if you're new to cybersecurity, and you should already have some familiarity with Windows/Linux from an admin perspective, networking, basic coding knowledge is a real help. These will all grow as you delve deeper into cybersecurity

[plain vector]

Im in the second month of the certificate program and I was actually really new into cybersecurity in all concepts OS/Networking/Coding etc.. and from my perspective the google course is not good and its not bad right now I am combining both tryhackme courses with google cybersecurity professional course and its working good for me to learn new things daily. After that Im aiming to learn Python. I have tried to learn Python while doing the google course and tryhackme but it just mixed them.

and also I am planning to get CCNA

1.Comptia a+ basics
2.Networking: Comptia network+, CCNA
3.Script learning:Python,C#.
4.Virtualization:Wmvare,Virtualbox,
5.Comptia Security+,Pentest+. Pki,Crypthography,Attacks.
7.Tryhackme.
8.Database,SQL,NoSQL,Regex,3-Tier Application,Web Application
9.Forensic,Public key infrastucture,
10.OSCP, CEH,Pen test,GPT certificates

[plain vector]

I would be more than happy to get your comments on my learning path 🙂

[solar scroll]

Hello , I'm from Brazil , I have a law degree and I'm finishing my Computer Science degree and a Information security degree. I following the paths on tryhackme ( I intent on doing them all ,but I'm stating at SOC 1 after I finish the basics).
so what I want to ask you guys is
if I'm on the right track, and w]hat kind of certs or jobs should I be aiming for.....or any other tip you would be willing to give
thank you for your attention

[foggy root]

any opinions on pentest+/ejpt? are these certs worth it? mostly asking for passing hr filters

[uneven sky]

Hello guys

[plain vector]

Eleykume Hello

[visual flax]

SALAM SALAM

[ocean spindle]

Aleykum bratam

netersiz

[visual flax]

şükr şükür

[plain vector]

ooo

vezyet

[visual flax]

əla əla

[uneven sky]

TRYHACKME Azerbaycandir

[ocean spindle]

Salamatçılıq

BURA BİZİMDİ Nİ(sonrasi ban sebebi)

[plain vector]

tryhackme is the best

[ocean spindle]

baxim hele

duzektdim

sahjvdhgasvhas

[broken idol]

@plain vector @visual flax @ocean spindle @uneven sky English only please.

[plain vector]

[plain vector]

Does anyone got any project with raspbery pi ? I am thinking about making a project with it like IDS/VPN/FireWall that kind of things. Does it have a big impact on the job CV ?

[fringe spade]

If you have no experience and publish it on GitHub/as a writeup it can have some impact

[hardy harbor]

As far as I researched, there are better certs to pursuit than that one, in terms of pentesting.

[foggy root]

What would you recommend? I know OSCP is the standard, but it seems a bit too advanced for me at the moment.

[worldly whale]

Can do cpts path on HTB academy

[zealous fog]

You could potentially get a job with your degree alone but id recommend to start doing the comptia sec+ cert

[keen tundra]

Great summary although I would also add that THM's certification should be released at the end of this month 🙂

[spice plover]

Yes, I have performed basic it jobs but nothing really for a company more project management stuff

[proper warren]

Experience > Degree > Certifications

[shy sleet]

if i were to major in cyber defense what different career paths could i see in a business concentration vs a computer science concentration

[stray plank]

if you're business sided, you'll be the inbetween for the tech people, and business people. you'll do stuff like consulting, and sales. cs concentration, you'll do more technical work. chatgpt can honestly give you a good rundown

[stoic cave]

Would be dependent on how the courses are structured, not every school is the same. If you're talking about a Computer Science bachelors, that's pretty standardized across academia at this point.

[amber pier]

What's your guys' opinions on the learning paths vs the road map? I've been off THM for the past few weeks and it looks like the learning path i was on has migrated off the road map. Trying to decide where to dive back in. I had 84% completion in presecurity before i switch to complete beginner.

[keen tundra]

Complete beginner was discontinued . Move to Cyber101 path , it is upgraded and more up to date version of complete beginner 🙂

[amber pier]

Will do, Thanks!👍

[serene umbra]

Gave +1 Rep to @keen tundra (current: #2 - 3281)

[thick spire]

Does anyone have any suggestions or tips on how to practice/study for a Hacker rank test? I just received an invite to complete one for a job interview and I have no idea what to brush up on for the test

[worldly dragon]

hey is there any good android or mobile device hacking class ?

[echo sinew]

Hey guys I'm a beginner here and I want to get good with practice and research. I wanted to enroll into some certification exams so this may help me narrow my study and was wondering what certification will give me more knowledge on its exam challenges and even more credibility for a jobs search. Please does anyone here know how I can get into this with a good structure of learning?

[dense dagger]

The Android Hacking course from hextree is good. Its also sponsored by Google 🙂

[keen tundra]

You have this room on THM , it may be helpful 🙂
https://tryhackme.com/room/androidhacking101

[echo sinew]

!!!

[broken idol]

Please be patient, somebody will get to you eventually.

[plain vector]

Hi start with

Comptia A+

and combine it with THM

that will be great

and you can find a lots of teaching in YouTube for Comptia

[high jacinth]

Hi everyone, any recommendation on free cyber security projects? Will start applying for SOC jobs soon, got my google cs, getting soc lvl1 thm and preparing comptia sec +. I do not have any experience on the field yet. Any suggestion is very much appreciated 🙂 cheers from an uruguayan in new zealand

[dense dagger]

Build your own Cyber Range 🙂

Full attack & defend and see how you can mitigate attacks

[high jacinth]

like Lima Charlie project? Tried that one a few weeks ago, got stuck and quit it. Soon as I finish soc lvl 1 will get into some of that. Thank you mate!

[random cradle]

you mean actual one? like CPTS?

i was hoping for it some days ago when TryHackMe asked about it

"What comes to your mind when you hear the word certification" on linkedin

[keen tundra]

Yes , something like that 🙂 . More info should come on Feb 25th 🙂

[random cradle]

less go

so many things are gonna happen on 20th+ february

[keen tundra]

Yup , at least on THM 🙂

[random cradle]

hmm.....yup 🙂

[plain vector]

what ?

[keen tundra]

THM's certification should come out soon 🙂

[plain vector]

what kind of cert is that can u give me some details ?

[keen tundra]

More info should come on Feb 25th i think , it will probably be blue team oriented

[plain vector]

Thanks !

[serene umbra]

Gave +1 Rep to @keen tundra (current: #2 - 3302)

[rugged delta]

It's good to see you're making an effort and you've considered a plan of action. Try Hack Me is really good for teaching a lot of things from the ground up. Keep making progress on this. I wouldn't be spending so much time on the Google course, try to finish it up and move on, and don't spend much money on it. If you're looking to do a career in cybersecurity, the CCNA can certainly be beneficial but you won't usually need that level of networking knowledge unless you're pursuing a networking role.

Net+ is usually sufficient. By all means study the CCNA resources, but one or the other course should be sufficient.

Learning coding can be complex, and there are a lot of good Python resources online, including python.org and other such sources. Stick to learning one language at a time.
You should also get compfortable with Windows/Linux administration, as you'll be encountering them a lot

Virtualisation software is essential in our field and knowing how to install an os in a vm and configure it is a great skilll to have.

Security+ is typically a good cert to pursue to familiarise yourself with the field of cybersecurity in general, but after that, I would consider pursuing practical certifications and getting a lot of hands on experience. CompTIA certs generally show that you've read the details of how something works, but I would suggest sticking to other books and resources to learn theory. You should look at the desired certifications for the region you intend working in. BTL1 and similar for blue teaming knowledge, OSCP, CPTS, CRTO, CRTP/E as practical pentesting certs to consider. I wouldn't waste time on CEH unless a specific employer requests it, and they should help pay for it. It's another theoretical, multiple choice cert that won't actually teach you how to hack.

[plain vector]

thanks a lot for the reply you brightened my way !

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 461)

[undone shore]

Stick to one language at a time
I'd caveat that by saying that it's good advice to start with, but once you understand programmatic thinking then the language becomes largely irrelevant.
i.e., learn how to think like a computer by learning one language very well first, but thereafter it doesn't really matter how you pick them up.

[flat sedge]

That's true.... but if you find yourself writing code in 3 different languages for 3 different projects at the same time there is bleedover and you will find yourself trying to use pythonic idioms in C, and pointer manipulations in Java..... don't ask how I know

[undone shore]

Oh, I don't need to ask... I know
First python project of the new year I kept trying to stick function definitions in curly braces...

Python and JS full stack in my current project is bad enough

[flat sedge]

LOL. Exactly.

That's disgusting Muiri. Whoever defined that projects design requirements needs to re-evaluate why this is necessary

[jolly wyvern]

I got it

[undone shore]

I did.
FastAPI >>> Express, but Python client side isn't a thing

[flat sedge]

Why are you using Express instead of Flask? I thought flask was your jam

[undone shore]

I've been on FastAPI for a while now

Can't stand express

I still use Flask for SSR applications, but more often than not the stuff I'm working on is better decoupled.

[flat sedge]

FastAPI is python, mostly curious why you didn't use a python backend framework as well

[undone shore]

FastAPI is the backend framework lmao

[flat sedge]

Ok, so you're using JS to enforce decoupling.

https://tenor.com/view/thanks-i-hate-it-cat-party-thanks-but-no-thanks-thank-you-gif-3271377789522749679

[undone shore]

No, I'm using JS because I can't write Python for client side

... I think

... Right?

[flat sedge]

Let's walk through the use case, because I don't think I understand either.

[undone shore]

So it's a React front end and a FastAPI backend

[flat sedge]

You need an installed interpreter for both JS and python to be runnable

[undone shore]

Which is a fairly common combo afaik lmao

[flat sedge]

The FastAPI is providing the microservice API that the front end makes requests to right?

[undone shore]

Aye

[flat sedge]

yeah, but we already know industry does crazy/dumb stuff because reasons

[undone shore]

What's your preferred stack for webdev?

I stfg if you say Rust WASM front end...

[flat sedge]

I think it depends on what you consider "decoupled". The front end (express/flask/whatever) shouldn't have dependencies on the backend API; it should simply make TCP/UDP requests and parse the response right?

I usually use django/postgres for personal projects

[undone shore]

So just SSR?
That's fine as long as the web UI is the only interface

[flat sedge]

Because if I need to layer on something stupid like bootstrap to make it look pretty, I can. And it ensures that it's 100% impossible for code contamination to happen between front end and backend

[undone shore]

As soon as you add other consumers (including service consumers) it's much easier to have a separate API

[flat sedge]

Most of what I code for work is POC stuff and then when it gets approval I wash my hands of it and give it to an actual dev team to fuck up

[undone shore]

Yeah, these are separate codebases. Granted in the same monorepo, but that's because I'm lazy

[flat sedge]

django is reasonably secure out of the box, and it uses a lot of concepts I know pretty well; I can also fragment it as much/as little as I want to integrate with other APIs and services

the biggest headache I have with Django is using LDAP for users, honestly

[spice plover]

How do I get this entry level job? CYSA + secured, google cyber cert secured, I am finishing my bachelors in cyber security this year. Anyone care to help me out on this with suggestions

[flat sedge]

Generic answer for this question: Look at the job req and tailor your resume to it. I'm going to assume this is your first job that isn't retail or service industry, so relate keywords if you can. Don't call things that you weren't compensated for "Experience." A personal project isn't experience. Doing some paid work for a friend's dad isn't experience. TryHackMe isn't experience.

[spice plover]

I’ve been a construction project manager for 4 years

And was in the army 4 years prior to that @flat sedge

[undone shore]

Ew, LDAP. SSO pls & ty

[serene umbra]

Gave +1 Rep to @flat sedge (current: #11 - 805)

[undone shore]

Oidc my beloved

[flat sedge]

If only I had an OAuth2.0 provider..... I've pitched it multiple times, but management isn't convinced.

[plain vector]

u happy with it 😄 ?

[undone shore]

Well that sucks.
Tell them Keycloak is free.
And written in Java which should keep corpos happy

Oh, and maintained by RH

[flat sedge]

My boss and I bring up Keycloak every time someone complains about it. But again, security has no power to move anything at my company

[undone shore]

Oof

[flat sedge]

Yes, but I haven't been at RH in 18 months.

[undone shore]

No one does anything without security sign off around here

[flat sedge]

Security can't sign off on anything that isn't compliance related

Developers want to use an AI intelligent agent? Cool, turns out they've been using that paid service for almost 2 years and my boss and I just found out 2 weeks ago.

[undone shore]

Ours can
Albeit sec architecture

They make the patterns. If it doesn't follow the pattern, it ain't being used.

[flat sedge]

https://tenor.com/view/shrug-frank-sheldon-christopher-walken-the-outlaws-fine-gif-25275641

Welp, time to go see if the game store has more overpriced plastic I want to paint.

[small mural]

Try to catch the piece of technology they're using in their company to relate in case you know them. Like THM is no experience I do agree but it can give you great insight about how to use the tool and be ready for basic tasks (E.g. ELK, Splunk, etc.)

Your past experience in the construction is not totally to discard. I mean, it's a hard honest work and you might have some social skills that could be handy (E.g. planning, flexible in case something is not going as plan, management if you were organizing team on the workplace). And the army experience, I mean, give you a quite good idea about confidentiality and stuff 🙂

And I don't know if they were part of your bachelor path but check stuff on Azure (like the SC200) or AWS/Google Cloud. Especially Google and Microsoft, they offer solid certs (and far cheaper than a SANS :D) + a ton of training materials for free.

And finally, don't be afraid to say you don't know. I saw candidate completely stressed out just to say they had no idea about specific stuffs... Better looks like a motivated learner than BS a guy who know his stuff.

Oh also, finally finally, understand what you are asked to do in case you are given an to test your skills. I saw someone analyzing a Maldoc with oledump,presenting us suspicious evidence and still saying he would enable the macro while opening the file with word because he didn't see that as malicious...

And good luck mate, you'll rock it

[spice plover]

You’re goated haha thank you!

[earnest lake]

Hello

[dim turret]

Hey, I was wondering how achievable is a career in cyber without any degrees (living in Canada).. I started learning the basics about a week ago and I see degrees everywhere and it's seems like it's gonna be quite a challenge to stand out as a candidate.

Could anyone give me an insight or a path on what I should focus on?

[earnest lake]

I am new to tryhackme

And I am not able to write my answers

Can anybody assist me with that

[fiery ruin]

Did anyone try those ai that apply to 100+ job application per day?

[rare obsidian]

Has anyone here done any malware analysis or malware analysis adjacent tasks for work?

I feel like it's very niche and wouldn't be used in most jobs, but dang out of all the THM modules I've done, I find it to be the most interesting

[sleek hinge]

Hi everyone 👋 please help 🙂
I've been an cybersecurity enthusiast for some years, but I have no certifications. I am not a noob but not an expert either. I would like to get into this industry professionally, specially for pentsting or red team areas.
What certification/s will you recommend to get first or to start with?
(I apologize for my spelling/grammar, english is not my first language)

[dense dagger]

Check your local area under the job description what certifications they look for.

[fiery ruin]

Ya like he said I would also suggest looking at 100 jobs for a role u would target and track which ones is the most in demand

Like do it on excel or something

[wicked breach]

even without any research, usually many cybersecurity companies like to have their employees comptia A+ or comptia Security certified, you could definetly look them up👍

[dense dagger]

Is this yours? Lol

[broken idol]

Please don't advertise a course on here

[flat sedge]

Sorry it took me a bit longer than expected. First, Work Experience should be above certifications in the list. If you are going to include email, linkedin, other social media as contacts, don't just put the link, type out the address at the very least.

I'm not a huge fan of Word template resumes, strongly recommend you use a LaTeX template if you are comfortable writing scripts or programming.

With your education, it's very common to put the expected graduation date for your program.

If a Certification you currently hold has an expiration, you ought to list it.

[neon ferry]

Is it just me or are there actually less cybersecurity jobs overall ? I have kept my eyes on them locally and internationally for a while and despite the stats implying many vacancies in the field, the job roles don't seem to match the stats.

[flat sedge]

If you don't have a background in security, you are going to have to overcome some hurdles to do red team or pentesting. Do you currently do bug bounty or have any IT security background?

I would not spend your own money to get certifications, because certs are primarily a business need not a need for an individual to pay for.

[flat sedge]

Depending on the company, they may not be posting roles publicly. Not all businesses are required to do so.

[neon ferry]

I see and does one need to run some cold calls or do some emailing to figure that out?

[flat sedge]

Does your current employer have a security team? Talk to your manager about your goals, and reach out to their manager and tell them you are interested in security and would like to shadow their team

[neon ferry]

Oh, I'm a Student rn. I have completed two internships (unpaid) but now I wish to get paid for the experience and I just try to keep track of the openings.

So, I wanted to understand if I am doing things right to land a job

[flat sedge]

it's a little late in the US to find internships for this summer but you might find something

Go to IT meetups in your area, ask your instructors if they know anyone hiring interns/part time while you finish school.

There's no guaranteed path to get a job, and to be 100% honest, having a social network of industry professionals is how you'll learn about roles and move forward more than any other way.

The biggest currency as a security professional is trust, and you build that with your network.