cyber-and-careers

[neon ferry]

Hmmm. Actually, I am not from the Americas. But this is very insightful. Thanks 🙂

[serene umbra]

Gave +1 Rep to @flat sedge (current: #11 - 806)

[orchid raft]

So I just received an email from a potential employer at a data center in my area telling that they have filled the position, but still wants me to attend a zoom meeting for any questions I might have. Only question I have is why you ain’t hire me?????

And another employer wants me to attend all these presentations without an offer for employment after we had a second interview. I thought the second interview was the offer letter but no

[jovial oriole]

give me a screenshot to help you

[merry axle]

Bro 💀 the audacity

[broken idol]

This is your chance to ask about feedback for your interview(s).

If you choose to take part.

[dire vessel]

Hi

[fiery ruin]

I am thinking of buying the 129 plan

750 job application submission per day I haven't even applied for 750 jobs in my life lol

[golden spoke]

Tf is that

It automates job application?

[normal radish]

thats the most cursed thing i have ever seen.

your gonna need a call center to answer your jobs calling you back

[mystic drum]

thank you so much, I will get that corrected. Do my bullet points look alright to you?

[serene umbra]

Gave +1 Rep to @flat sedge (current: #11 - 807)

[flat sedge]

It looks fine enough - I didn't see anything that sticks out as being incorrect? Maybe include what language you used to script router configurations.

[marble relic]

hey y'all i'm just curious if anyone knew how important python automation was to SOC and if you had any suggestions where to learn it

[dense dagger]

Hmmm, I wouldn’t say it is a very big requirement

There will be cases where you can use Python but its also doable with other scripting languages.

The commercial tools available to you should be able to do the things you need.

[dusk wedge]

i think it mostly depends on company, where i currently work we use quite a bit of python for quite a bit of stuff. You can think of backends for local applications or just general thingys. during my application it wasnt a requirement

but its always nice to have

[maiden lintel]

I have a quick question, I'm a newbie and at present I'm completing SOC level 1. Is this enough to apply for fresher SOC roles with 0-2 exp. ?

[rugged delta]

It will depend on the employer. A certificate of completion for a course isn't the same as passing a certification, but it might be a good indicator that you're interested. You should absolutely complete it, and then SOC level 2, but also consider things like the BTL1 cert as something to aspire to. Keep working at it, but yeah, absolutely apply to various places with what you already know. Use an ATS checker for your resume/cv which compares your resume with the job role to see if there's anything you can add/remove to improve your chances. You should be modifying your resume for each role, and also consider sharing your completed paths on LinkedIn if you use it

[normal viper]

Hello guys,

Is it a good idea to bulk apply to jobs? I have always felt like I should know this much or have these certs before applying for jobs and I think this approach is wrong. What do you guys think? How did you land your first job in cybersecurity field?

[broken thistle]

I personall feel like that can expedite the denial letters to a massive lvl, this can take your morale away fast. So yes, but don' let it affect your mentality 🙂

"it doen't hurt to try", but being told no by 1000 companies does hurt

[unkempt shell]

hi, im a beginner that’s starting out in penetration testing and have taken an interest in this field, was wondering if doing eJPT would be a good way to start? i’ve read about jumping straight to OSCP but am afraid it’ll be too difficult

[hollow falcon]

Inquiry.. if I (back in 2020) was a manager for a small-business hydroponics lab and also had the responsibility of conducting and implementing physical and network security (which only happened on paper) for 3x separate sites. The business died cause of covid and we lost our investor. So the project itself never happened pass the plan & draft phase. Which I did and lead myself.

Could I use this as cybersecurity experience?

Also the world "ended" few days before the project construction start date

But, I'll save that story for another time.

[wraith mason]

Hi, I am currently pursuing a M.sc cybersecurity course in UK and I already have 6+ years of professional experience as an QA. I will graduate by sept 2025 can anyone suggest what certificates i should start with I am planning to get a job as penetration tester. Also, i am trying to find any work placement/internship in the field. Thanks in advance

[undone shore]

Depends whether they can back it up lmao

If I'm wrong I'll admit it

If they're wrong, I know they're wrong, and they can't prove their point, then it's a big red flag

[wary violet]

Hello, I need some help in an exercice in THM because i'm stuck and can't find the solution in google, can I share a photo with you ?

[wild tapir]

#room-help

[wary violet]

ty

[chrome spire]

Take the ejpt or pentest+ before oscp

[chrome spire]

What certs u got

[molten basin]

I was watching How to Be an Ethical Hacker in 2025 by Heath Adams, where he shared advice on how someone interested in becoming a penetration tester can get started and what knowledge they need to acquire. However, the video was more geared toward beginners.

I’m curious about a different path—what if someone has been working in IT for 5 to 10 years and wants to transition into a red team role? A refresher on the basics wouldn’t hurt, but where should they start? Do you have any specific recommendations for experienced IT professionals looking to make that shift?

[rose jetty]

Please who go burp suite professional

[slender slate]

i am unable to connect openvpn with my kali linux I tried multiple things but still unable to use

Please help

[warm hinge]

Security + to make sure you've got you cyber sec fundamentals then hack the boxes penetration tester path. It teaches everything you need to know to pass your OSCP which is the big cert for pen testing

THM's junior pen tester path also shares great knowledge

[wraith mason]

i have not got any certificates yet i am planning to start with comptia a+ and security

[undone shore]

Bear in mind that red team is usually an evolution from pentest.
That said, you're actually in a prime position there. Sec+ and OSCP are definitely a good bet, but you're already working for an org in IT. Speak to your higher ups about transitioning into security.
This is the traditional way of getting into security -- work in IT, then specialise -- so you're actually much better off than someone completely new who wants to get into pentesting from a standing start.

On which note, there's a bloody good reason why going into pentesting from a standing start is often a bad idea. If you don't understand infrastructure in an enterprise, or how the various IT depts function, then you're immediately way out of your depth walking into a pen test role. I found that out the hard way. I had most of a degree, plus OSCP, OSEP, OSWE, and CRTO before getting my first proper pentest job. Technical certifications through the gills, but still totally unprepared for how things work in a big org.

You shouldn't have that problem.

[warm latch]

I'm trying to do a career swap from game development (Senior Producer) to information security/cybersecurity roles. Any tips on making this change? I have mainly focused on prioritization and leadership skills, but I do have some very limited hard skills related to cyber and due to the role held in the past, also know when to withhold information and when to share it. In general in teams I'm likeable and supportive and can understand people's emotions and know how to ask open questions. 30% excel and 70% emotional intelligence and adaptability to changes.

[leaden yew]

Hello! Does anyone know what are the main concepts to know or understand at least to be able to claim to be skilled in Windows?
I mainly think about
Core Windows Processes
File System Hierarchy
Windows Server Administration (GPO, Active Directory, Domain Controller, LDAP)
User Account Control (UAC)

Is there anything else important to consider?

[chrome spire]

I feel u can skip A+

With a BS in IT

[wheat widget]

How likely is it to land a remote SOC analyst job considering you're 16 , but you are really skilled at your job.
If not, what are the other methods to make money in legitimate way?

And if experince i the hurdle, i am ready to do the internships?
But how many months of internships would be considered good enough to get a job?

[dense dagger]

Very unlikely especially if you don’t have experience. You’re underage which makes anyone who hires you liable to certain laws where you come from.

If by “remote”, you mean trying to land a job overseas, then ever far from likely. Companies have a duty to keep their security teams within their country of operations (unless they are operating on a global scale and have satellite offices in the country one lives in).

About internships, it entirely depends on your company or if others are willing to hire you given that you’re underage and normally at that age, one is taking their highschool diploma.

[austere kayak]

Hy currently I'm doing free road path in thm. After finishing it if I want to g to soc analyst. Does purchasing premium and completing soc lvl 1 and soc lvl 2 enough ?

[keen tundra]

They're a really good starting point . Majority of the content is free , you don't necessarily need premium to start 🙂

[austere kayak]

Oh so the soc lvl 1 and lvl2 majority is free that's intresting 😮‍💨

[keen tundra]

Yeah , majority of the content is free but not the whole path

[austere kayak]

ok i will try it now im into completing the free path so i can get a view on every field ..after that im going to focus on a path i had did some portswigger labs too so pentest is also somewhat intrests me haha so is it possible for a guy to gain skills on both blue team and red team haha .. if i can im gonna push my skills and knowledge and learn more new things 🫠

[dire echo]

Guys I'm currently trying to apply for soc roles and jobs. Any advice? Also is it okay to get a security+ cert directly? I don't have any certifications.

[warped moon]

It's definitely okay to get sec+ directly, although some people find it easier to get A+ and network+ first.

[dire echo]

I'm financially having issues, so I couldn't afford to write all the exams. So I'm just wondering if it's fine to directly write sec+ and will that certificate get me a soc analyst job too

[merry axle]

Mind if I dm?

[dire echo]

Sure, you are always welcome

[dire echo]

Thank you for helping

[serene umbra]

Gave +1 Rep to @merry axle (current: #170 - 48)

[rugged sable]

when i interview and someone is like this, i ask them their thought process. i am more interested in how they got to that conclusion or why they think that rather than whether or not a specific fact is right

i do ask leetcode questions, but i dont really care if they pass all test cases. i have passed someone before who couldnt get a test case but could explain to me how to pass it algorithnically (just ran out of time)

i think if a candidate were to say "i may be wrrong" a good follow up question from me would be "how do you ensure you're not wrong?"

[neat garden]

I have sec+ and no one want to hire me. Everyone want CISSP, at least here where I live.

Still good luck I hope you will find new job, I am looking for one too. We can do this.

[dire echo]

Thank you. I hope you too find a job soon

[dire echo]

I guess your pfp speaks for you 🥹

[neat garden]

That and searching for a job in cybersec for 2 months now after being laid off

[dire echo]

It's so depressing

[neat garden]

Just another depressing day of sending dozens of applications and not hearing back.

So yea my pfp is quite adequate 😄

[dire echo]

Don't worry bro. At least we are breathing. We still have a tomorrow to fight. You'll win tomorrow. Don't worry

[neat garden]

Normally I am quite happy but current job market is dreadful.

[neat garden]

Well I still have some saving so I am not that worried yet.

[dire echo]

Wow cool. I'm bad with money management too lol

[neat garden]

Well time to go back and learn cybersec no other way than to gain more experience.

[dire echo]

Can we talk on vc sometimes?

[serene umbra]

Gave +1 Rep to @rugged sable (current: #86 - 89)

[timid compass]

Hey everyone, I'm a first year cybersecurity student and I'm wondering which certifications are the most valuable. Which ones would you recommend starting with? Should I go for Security+ first, or is there a better entry-level cert to build a strong foundation?

[fleet breach]

Depends on your background

[flat sedge]

Ceritifications are a business requirement, at this point you shouldn't be paying for them yourself especially if your degree program covers that material.

[timid compass]

Okay got it thanks a lot!

[wraith mason]

got it i do have experience in IT

[chrome spire]

Yea if you already got help desk and you got a degree I feel like A+ would be a waste of your time

I suggest going for a network cert

[wraith mason]

got it

thanks

[zinc coral]

any french here ? i'm looking for help (je veux faire de l'alternance mp moi pour que je puisse expliquer en quoi je demande de l'aide)

[mortal kestrel]

Hey I want to do the security+ certification and find a job in IT, does anyone have some tips before I start my journey?

[fiery ruin]

Yes build Foundations first before security+

[fiery ruin]

A+, Net+, Microsoft azure fundementals ect and then sec+

[stoic cave]

If you're just starting out and want to get into IT, tier 1 helpdesk or similar roles is the starting point. You don't need certifications for those roles, go apply.

[stoic cave]

Please don't recommend people spend a bunch of money on certifications when there isn't a need to. Respecting people's hard earned money is important when we give recommendations.

[undone shore]

Also adding to Moose's point, uh, how's that working out for you?

[gleaming remnant]

Maybe they are the sales manager @ Comptia

[undone shore]

They're not. Last I checked they were looking for their first job in cyber (and/or IT -- we never did see the CV) by paying hundreds of dollars for a LinkedIn auto-application service.

[gleaming remnant]

https://tenor.com/view/joke-dumb-you-gif-8906255

[hollow falcon]

No one responded to my thing 😔

[chrome spire]

Every case is different. What kind of work experience you have (dont gotta be IT related) whats your education lookin like?

Whats ur country?

[chrome spire]

This

[chrome spire]

I feel game dev is a good start. What part of game dev did you do?

[chrome spire]

From a companys pov: why would I hire a 16 year old with no experience when there is a 24 year old with some projects certs education ect

[fiery ruin]

U need them because most jobs expect them

How ru gonna work in tech support or networ engineering or admin if u don't have them?

[fiery ruin]

Great!

[warm hinge]

Level 1 helpdesk is primarily customer service, with minor amounts of technical knowledge needed. I know a few places that were more interested in personal projects completed in free time rather than certifications

[shrewd nexus]

Has anyone ever tried starting a consulting business on the side? If so, how'd it go? Any advice for someone considering?

[fiery ruin]

Where ru from?

Those were super rare in competitive areas

Like my area

I think if I switched locations my salary will increase cuz less competition

[cinder orbit]

thats 1.4K in certs ☠️

[fiery ruin]

Not more?

Spend bro u will get ur ROI

[cinder orbit]

i've already got them bro - I agree with the above, would be a waste without any actual experience or direct networking, or something applicable they are abysmally easy to pass

[fiery ruin]

Nice bro me too ecept the Azure one yet

Ya without experience won't be much

@cinder orbit ronin_1_3 what do u do bro?

[torn violet]

I really need an internship pf job to get started, I already have a 1.5 yr gap. I am from India, have done ejpt and tryhackme jr pentester path. I am also planning to do masters in cybersecurity in ireland starting september but dont want to go in as a complete fresher. Please someone give genuine advice on how should I proceed.

[flint cairn]

I have been applying to jobs everyday as a fresher in this tough market and there are hardly 5-10 jobs that I can apply. I am also doing ctfs and portswigger stuff everyday and I feel like it's not useful to land a job. So, should I keep doing it or move on from it coz maybe it's time wasting right now and do other things instead? I really need guidance.

[undone shore]

Oh, neat, you got a job then?

[fiery ruin]

I already have a job just not a full time

I had an interview yesterday 32usd per hour but they want me to move to the USA and I live in Canada

[analog shoal]

Finally Guys I Finished Pre Security Path

[rugged delta]

Keep it up

[crude timber]

What is a good Roadmap to Ethical Hacking?

[keen tundra]

You can follow this one for beginning 🙂
https://tryhackme.com/hacktivities

[keen tundra]

Congrats , great job 🙂

[past mason]

It costs money tho

[keen tundra]

Majority is tree and there's also a free roadmap

[errant turret]

What type of personal project that would be?

Trying to get IT support role or even help desk is difficult these days. I don't know if it the resume or just the employer's themselves. Can someone share a good and reliable resume? Just incase if I'm getting something wrong

[hard stone]

why aint kgb community mentor yet

[brittle skiff]

Hello, I graduated from Computer Science like 6 months ago and got into networking, currently working as a NOC engineer. Been a good run, learnt a lot so far not just about computer networks but also about corpotate organization and customers, providers and the like.

Feel like I've gotten to a point where I wanna keep movint beyond your usual ticketing and L1 troubleshooting. But I feel like I've reached a breaking point. I was pondering studying for the CCNA and then focusing on more networking-CCNP and such.

However, looking at the sheer investment (not just money, also time and effort) it takes to get there, made me question if that's what I really like.

I've listened to L1.5 and L2 colleagues and peeked at what they do, which honestly doesn't seem that enticing to me.

I've had my eye on pentesting for a couple years now, but felt like I had to learn more about computers and networks in general.

It's been interesting, but now that I feel like I'm at that point where I should get in depth, I don't feel like I want to. At least not in the same way.

Anyone can relate?

Sorry for the long text

[flat sedge]

Talk to your manager about career goals, and what makes sense for your path - a good employer will be invested in your success and growth, because you will make them more money than they spend on training and paying your salary.

You shouldn't be paying for CCNA out of pocket, that should definitely be a thing the employer pays for

They might have a conditional where you are allowed to expense it

[lean cypress]

Has anybody paid for a membership to TryHackMe or another site ? Is it worth it ?

[keen tundra]

You mean premium or ?

Like subscription or something else 🙂 ?

[short matrix]

not, but htb yes.

[brittle skiff]

Might go speak to my manager, he's a chill dude. Also yeah, the CCNA is paid for by my employer, but (stupid, I know) I feel like if I get the CCNA then I should get the CCNP and so on because quitting after CCNA seems dumb, but committing to a career I might not like seems dumb, too

[flat sedge]

You can always change; when you get to a certain depth of knowledge, a lot of it is laterally transferable to another domain.

There's some catch-up to do with some of the foundational perspectives

[brittle skiff]

Guess doing a few rooms every now and then, while studying for the CCNA ain't a bad idea

[lean cypress]

yes sorry premium

[lean cypress]

did you think its worth the price ?

[torn urchin]

I’m actually studying for the CCNA as well.

Weather it’s worth the price depends on what your goal for taking it is for.

[plain vector]

hi everyone who is studying for comptia sec + ?

[torn urchin]

Got that in my bag already. Took me over a month plus to get ready for it.

[plain vector]

could you share your exam tips and resources with me ?

[torn urchin]

I used Proff messers free videos on YouTube and the Mikes practice exams on udemy. As for tips for the exams, i did a lot of practice and when i look at the results, I focused on my weak areas by make flash cards on them.

I did a lot of practice test every time I was done with a section.

[plain vector]

thanks !

[torn urchin]

No problem. Good luck

[visual raft]

any help withthisplease?

┌──(root㉿ARBUNZA)-[~]
└─# sudo mount -t nfs 10.10.68.119:home /tmp/mount/ -nolock
mount.nfs: access denied by server while mounting 10.10.68.119:home

[fickle flame]

Hello I need advice for an Offensive Security/Penetration Testing Internship I applied for. If anyone can help.

[brittle skiff]

That's where I fall flat. On one hand the most short term outcome would be to be paid more at my current job. On the other would be to make myself a career in networking by then going for other certs like CCNP or Huawei. But that's the core of my dilemma

I don't worry that much because my employeer pays for it anyway so I guess it's more a matter of laziness and lack of focus maybe

[wild tapir]

I know how to do this

[wild tapir]

Drop the question in #room-help

[fiery ruin]

Hey guys what is everyone's job search strategy? Or the strategy that works best for you?

[keen tundra]

I think it is worth . It is one of the cheapest options on the market and you really get much for that 14$ 🙂 . However , majority of the content is free so you don't necessarily need subscription right away 🙂 .

[proper warren]

Have my first interview on Monday for a Jr Security Analyst role, wish me luck!

[wide mica]

grats varseth , dont get dissapointed if u dont get it - keep going and learn from the last

[keen tundra]

Good luck on your interview , fingers crossed 🙂 🤞

[iron apex]

in this month i am applying 1500 jobs in cyber security domain but i am not shortlisted to any companies

[green python]

Another week , another unsuccessful internship search 😔✊

[eternal grove]

anyone ever hear of apprenticeships in the field?

[raven shale]

Hy

[rugged delta]

There are such things and you would need to apply to them the same way you would a plumbing or electrical apprenticeship. There's likely programmes in your region you can apply to

[worn birch]

there are for sure degree apprenticeships in the UK - i imagine it has to be similar elsewhere

[chrome spire]

then mby ur under qualified?

1500 jobs is a lot i feel like ur spam applying without tweaking your resume

[stoic cave]

Spam is not the way to a job

[cinder orbit]

Creative way to apply for phishing campaign manager /S

[undone shore]

Not how it works IRL. Not usually anyway. People tend to be pissed off if you target them without permission. It also demonstrates a lack of integrity, judgement, and sheer common sense... Not really the kind of person which corporations want to hire.

[cinder orbit]

Fixed it

[undone shore]

The spam, on the other hand, is just downright irritating.

[undone shore]

Lmao, fair

[candid yoke]

Hello, right now I am taking the IT and Cyber ​​Security Foundations course, but I am confused between the fields in which I should specialize otherwise. I also do not know what road map I need to make in order to complete and develop myself in cybersecurity. I hope that if anyone has sufficient experience to help me make a road map, I will follow it until I reach a good point and level and specialize in a specific field. It can help me. I am waiting for a response from you. Sorry if it is long. Thank you in advance…

[drifting seal]

also i might need some assistance myself, i’m a Greyhat that really has been enjoying the harmless pranks and gysts that technology has given me. But im wondering if i could make a career from the certificates on TryHackMe, for the soul fact that i don’t have enough money to go to school for SE.

[atomic steppe]

your on the right track with Certs but tryhack me certs are more of a conversation starter than a cert that will be recognized as an accredited cert. people can cheat in various forms on tryhack me. find walk throughs, etc and there is no true final exam to obtain the cert. Your going to want to do accredited certs such as an entry level foundational certs like CompTIA Security +, PenTest+ or if you want to get into networking then a Network + or CCNA from Cisco. (It's a good idea to have strong network foundation for ethical hacking). Then you can move into more advanced accredited certs like the CEH, CEH, OSCP or any SANS Cert (GSEC, G..., etc.). All the certs listed are recognized across all of IT in their respected fields. You will have to study for them and you will take exams for them. some multiple choice, some practical exams. You don't need a college degree or go to school for it. The certs do cost a little money depending on which one but it's worth investing in your future. The more Certs you have the more attractive you look to recruiters. You can even get pay bumps in some companies by obtaining more certs. Don't let the fact you can't afford to go to school stop you from achieving your goals and never stop learning.

[drifting seal]

thank you

[serene umbra]

Gave +1 Rep to @atomic steppe (current: #2692 - 1)

[visual raft]

ok, sent

[crimson reef]

Hi
i have recently completed my CySA+ and SOC Level 1 TryHackme, In my environment getting an IT jobs requires time because it's kind nepotism based market so i have a lot of free time in my hands while continuously applying.
My question is do you have any recommedation whats the next cert i should aim for?, im leaning more the defensive blue team.
i looked into blue team level 2 and GCIH and i cant really decide which one should i go for?

[dense dagger]

Honestly, you will need experience more so than certifications if you haven’t already.

[crimson reef]

i do have like a 5 months experience not much but the place wasnt going anywhere

im cs grad got my ccna , google IT sup

so i cant doinganything about getting job

so in the meantime while im free

thinking of doing another cert

[dense dagger]

Hmmm, both BTL2 and GCIH are SOC L2-L3 roles and its hard to recommend them without prior experience. You might be “overqualified” on paper or you will get paid less than what you are worth.

If you are looking into certifications that aren’t blue team, I recommend learning cloud security paths either from pwnedlabs or xintra. The Attacking & Defending AWS module from THM has also received multiple praises.

I think having cloud knowledge is a great plus since a lot of companies are shifting to cloud-based services.

AWS Solutions Architect - Associate and Microsoft’s AZ-104 are great entry paths.

[crimson reef]

i did study for aws part but didnt take the exam

might go for the azure one

the loop of you need experience to get experience can only solved (in my opinion) by home labs / projects is there any recommedation or should i go free roam style and figure it out

[dense dagger]

What projects have you done so far?

[crimson reef]

in cybersecuirty feild none

i did web dev and msce while studying windows server

[light wagon]

Any recommendations for a CISSP that doesn’t want to do OSCP? I’m happy doing any SANS recommended ones, I’m particularly focused on CTI but also, management level

[dense dagger]

Yeah, for CTI the OSCP is far from what you want. If you want to do SANS and get a ff GIAC cert, the GCTI, GSOC, GCFA, and GCIH can be up your alley.

[dense dagger]

Good projects are those that you can iterate over. Find one you want to do and be sure you can build over it.

[crimson reef]

yea ill build like a basic kali/firwal/seim build

and see what comes of it in the future

thanks man

[chrome spire]

Is leet code good for cybersec or not needed

[chrome spire]

Wym build it over?

[dense dagger]

Things that you are build on top of. One example is having an AD network and then trying to test vulnerabilities on it. Then you can extend it to adding an SIEM/XDR system like Wazuh.

[chrome spire]

Gotcha

Ty

[plain vector]

hey, is it better to get CCNA first or CompTia sec+ ?

[light wagon]

Thanks, I have an MsC on forensics. What is your opinion between GCTI and GSOC? I have advanced OSINT from SANS as well (SEC587)

[serene umbra]

Gave +1 Rep to @dense dagger (current: #22 - 448)

[keen tundra]

Well , they cover different topics , depends what you want to do and on your local job market 🙂

[dense dagger]

I don’t have one as I’ve haven’t taken either of them. But if you’re looking at it from a price to quality ratio I would factor in: the instructor’s backgrounds, the last update of their modules, whether or not their labs are “challenging”, and other students’ course reviews.

[light wagon]

Thanks, your replies are very helpful.

[serene umbra]

Gave +1 Rep to @dense dagger (current: #22 - 449)

[meager perch]

Hi there bros,
Do you know where on earth can i do remote volunteering in CyberSec ?

[rotund moss]

^

[flat sedge]

Volunteering for what? Cybersecurity is so integral to organization protection, volunteer roles are going to be extremely limited.

[humble gull]

try building a home lab. This is what got me two internships within cyber

[crimson reef]

freestyle it or there's a guide?

[humble gull]

theres plenty of guides. I would suggest spinning up a vm environment and installing wazuh

it's open source and farly simple

fairly*

and then add agents

through that you can do configuration checks as well as alerting

[crimson reef]

i see

might need to add ram xD

[flat sedge]

don't be afraid to use the free tier of the cloud providers for IaaS as well

Most cloud IaaS will have a free tier to learn the services that is 1 or 2 minimal resource VMs

[rustic atlas]

where did you apply to these internships? I have been applying like crazy to internships but havent gotten anythiong

[humble gull]

I’ve been searching in LinkedIn “cybersecurity internship”, filtering by the last 24 hours, then visiting the company website and applying through there. NOT applying through LinkedIn

[rustic atlas]

Same haha

Rip

Maybe need to beef resume

[rustic atlas]

Did you put your home lab on your resume? Or how did you show it off? Was it through like a personal site

[humble gull]

I have a whole projects section

I have some ELK stack work I’ve done, phishing email analyzation walkthrough document, and on prem wazuh server

[wild tapir]

I too am curious, are there any Vets in here that have gotten careers/jobs from making their own portfolio, how can we get in through the door?

[light wagon]

A good combination of studies plus portfolio are recommended. The user @humble gull gave a perfect example of it, if you don’t have any cert of ELK for instance (elastic stack) but can demonstrate that you know the technology and apply it, it can benefit. One big disadvantage are big companies with HR departments that only filter CVs by matching keywords. Without having what they ask, is almost impossible to get in, i.e., degree or MsC on science… if you don’t have it, the HR filter would not let you pass even if you have advanced knowledge in other areas.

[humble gull]

Something I’ve also done is list the certs I’m currently working on as “In progress”. That way it bypasses any sort of filter. Only do it if you’re actually studying those certs though

I am currently working towards my bachelors degree so I have it as in progress as well

[light wagon]

Of course it can help in some cases but as I said before, HR systems are quite boolean on that aspect, either you have it or not, they don’t allow other condition but any reference to what are you currently working on is a huge advantage.

[formal mango]

Hello there

[dusk wedge]

@broken idol

[flint cairn]

I have been applying to jobs everyday as a fresher in this tough market and there are hardly 5-10 jobs that I can apply. I am also doing ctfs and portswigger stuff everyday and I feel like it's not useful to land a job. So, should I keep doing it or move on from it coz maybe it's time wasting right now and do other things instead? I really need guidance.

[stoic cave]

If you're US, are you out already? If so, have you passed the point for SkillBridge?

[vital shuttle]

SkillBridge must be completed within 180 days of getting out so once the Vet status has been achieved then no more SkillBridge. I'm in a similar boat. I've been applying but no call backs and looking for ways to get in the door somewhere.

[stoic cave]

Right, which why I was asking where they were. Some start using Vet as soon as they get their DD214

That being said, there is veteran preference on USAJobs postings and the larger Defense Contractors do have veteran specific pipelines.

[warm hinge]

Can someone advise me, I have a job with a friend who and the company is a cyber security related company,

Is thm worth learning or should I be looking at something more expensive?

[ancient folio]

THM is just fine. It has all variety of tier systems. If you think you are ready to go, try hard. That should give you a good experience on if you are ready for that level. Overall, more expensive does not mean better quality. Marketing is great tool; MS and Apple are expensive but Linux is free and better.

[stiff vale]

Till you reach the advanced level, THM is just great, after that, you will have to look somewhere else.

But doesn’t mean THM will be useless after that, just not as efficient but since you are just starting, this is the right place to be and THM is continuously improving so you never know.

[warm hinge]

Awesome thank you, will put something me focus into it for a few months :).

[raw jackal]

I’m doing cybersecurity studies but I feel like it’s very theoretical. I do lots of practical stuff. I do THM mostly and I try building some cybersecurity apps. I also study at 42 school.

The thing is that I would like to maybe do a certification like CompTIA Security + and try to land a remote job in cybersecurity. I’m based in Europe. I would like to get a remote job and move somewhere else cheaper lol

Do you know if I could just get a certification between schools and could land a job? I’m looking for the fastest and easy hack to get there.

[stiff vale]

Cybersecurity is a vast field and you need to know a lot before you can start the practical stuff and thus the info dump aka the theoretical part you mention

Security + is a certification of that info dump, that you know every basic thing there is in cybersecurity, (not in depth, just the fundamentals)

[stiff vale]

You can certainly get the cert in school but landing a remote job can be tricky depending on where you are from, especially a remote job

But s+ is certainly 1 of the best if not the best beginner cybersecurity cert

[fiery ruin]

Do u guys know some fun IT labs to add to my resume?

[warm coral]

When do I know I’m ready for OSCP? I’ve been behind in CTFs and labs like THM/HTB because my school blocks the VPN, but I’m wrapping up my bachelor’s in compsci/cybersecurity and definitely know a lot of the low-level concepts that (I believe) is what is really needed to be able to pass and be well prepared for the exam

[stiff vale]

You could try HTB pro Lab Dante to check where you are. It aligns the most with OSCP.

[maiden lintel]

My friend is a data engineer with 2.9 years of exp. and he is planning to switch towards Security Analyst(SOC). Is this a right move for him. Because there are no openings at present for his current role in the job market?

[stiff vale]

If he is good at what he does “data engineering” then I would say he should focus on the goal of becoming a security data engineer and not start from the role of an analyst. He will definitely have to learn all those things a SOC analyst had to and more.

It’s a high level role so it requires exp and certs, needs to work on that.

[rustic sun]

I'm currently in my second to last year in university, studying computer-science and majoring in networks. I'm leaning towards network engineering/architecture and pen-testing but after doing some research I've decided SOC will likely be an easier entry-level role to get into (ik it's usually helpdesk -> SOC but my goal is to skip the helpdesk)

I am currently spending 25-40 hours a week learning on tryhackme, as well as taking CompTIA's Network+. I plan on developing my skills, finishing the Network+, and then taking Security+ while continuously developing my practical skills with tryhackme, HTB, and other similar resources. Eventually I will look into getting my CPTS.

This is just a general road map I have currently. My goal is to get into an entry-level cyber-sec job (likely SOC) as soon as I can after university. I am also going to do whatever I can to get an internship in something network, helpdesk, cybersec related.

If anyone has any suggestions or can help me out so I can get a better idea of what I need to do, from someone with a better understanding of the industry, I would greatly appreciate it.

[golden spoke]

hi dont know if this will help but as a third year i received a SOC analyst interview and an offer letter for a network administrator/engineering role from a relatively large organization

i would say that most of it was due to my high gpa

but i think that my tailored resume and cover letters also helped a lot as my friend did not get the SOC analyst interview despite having a very slightly higher GPA. i had no work experience prior so it was mainly my courses and projects.

definitely try applying as much as you can through your school as its basically like a referral then move on to externally

i mean i basically spent more time on applications than school at some point i would say, but it gets faster once you have applied to many different roles and have resumes/cover letters you can refer to and use as templates. you still have to tailor some things accordingly to the job description

the tryhackme will definitely help for SOC analyst i know lots of people who have used that to get in including me (i assume it helped me get the interview). but keep in mind my university program specializes in networking and security as well. im not in cs

and if you are wondering my program used cisco netacad - all ccnav7 courses. my later more advanced networking courses did not use it anymore however i know a previous intern who only completed those courses (was an engineering major) and still got the network administrator/engineering role.

[warm latch]

I work on video games in the video game industry, and while it's a bit different than big tech, I could still say your GPA matters very little. It's about the skills you have and the sentiment you build. If you mention that you're doing SOC studies through portals like tryhackme etc, you're already ahead on the game compared to someone who just focused on finishing school. People hire people who showcase their interest into this stuff through their hobbies. Let's say you manage your local network and use kali linux to do CTF:s etc. Even mentioning that will raise interest compared to someone just talking about their school success. It's not the numbers you get, it's the projects you do.

[golden spoke]

definitely i think showing interest through projects is part of it but i still do think GPA will still actually get you into the interview stage

[warm latch]

This is highly dependant on the country though. So we do need to actually take that into attention.

I can say that in finland, we still have seniors here who were around before there was a formal industry education for tech, so they care about your skills more than your GPA

[golden spoke]

what im thinking is that

since i live in canada and everyone has a degree from a university

it matters a lot more

[warm latch]

Okay, you're probably working for some company already?

[golden spoke]

soon

[warm latch]

Have you already worked in the industry before?

[golden spoke]

nope

but my seniors will have degrees and masters

and my hiring manager had 2 degrees

to some extent skills yes when you actually get in but gpa is an important factor to get you in

someone from my uni has a 4.0 and is an incoming intern at google

[warm latch]

Ah, that's interesting

I am a Bachelor of Business Administration on Information Technology side with a gpa of 4,35. But I did not have my GPA set before I was hired to work for a game company

But I did showcase a megaton of that hobby side

[golden spoke]

i imagine projects matter a ton more for gamedev

[warm latch]

Even in terms of project management. I started a decentralized 3d-printing operation during covid to provide hospitals with face visors for the nurses

With 40 locations

around finland

😄

[golden spoke]

nice man

[warm latch]

That probably mattered more than the gpa I did not have yet at that point

They've tried to hire me in tech companies too, but games are more fun, because I don't have to worry about people's health and well being to same extent than I'd have to in a tech company and the projects they do

Cybersec and red teaming would literally be what I'd want to do, but with the constraint that I would love to do the physical pentesting stuff mostly, because if you let a dude that looks like me in, you've already f'd up 😄

[rustic sun]

:/ hoping it doesn't have too much of an impact to be honest

Wasted a lot of time partying up until mid last year

Idk if my GPA is repairable at this point so I'm relying on really developing my skills

[warm latch]

Well. I don't know how much it really can matter. People learn and grow throughout their lives. Would be stupid to use an educational metric in hiring professionals given they showcase a lot of skills in their trade, but have not worked that well in an educational setting. I personally care mostly about your skills, education is a plus and it's more like do you have it or not. If you're able to work in a team and can provide value, all gucci

Unpopular opinion, but need to take into account that sometimes formal education can also be a minus, if you went to a school known for being horrible and not providing the talent the industry needs you might end up needing to showcase your skills more 😄

But ultimately, take anything and everything I say with a grain of salt. My experience comes from the games industry, and I've been here for 8 years, and might not be fully synced with the tech industry trends around the world, and as seemed to be, it's apparently very location based if education matters or not.

[amber sail]

Is the new THM certificate something that goes alongside say sec+, or could you view it as a replacement? (If so, should you get both anyway?)

[keen tundra]

New THM cert is focused on blue teaming , it is comperable to btl1 for example. By comperable i mean in terms of topic 🙂

[amber sail]

so conjunction then? thanks a lot

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 3503)

[keen tundra]

You have more info on the link below
https://tryhackme.com/certification/security-analyst-level-1

[amber sail]

ah, gotcha, thanks

[rustic atlas]

If SAL1 just came out, is it worth getting? Like how will employers know what it shows?

[worldly whale]

They don’t know

And it will take a long time to gain traction usually

[rustic atlas]

Ah okay I figured

[sage ermine]

Any GRC Analyst in here? What frameworks are recommended to learn or build proficiency in?

[rustic glade]

hi guys, i want to became soc analyst. So i bought thm premium today. Thm's walktrought is enough for get a job at soc analyst L1? If not, which source would be good for me?

[flat sedge]

Depends on org and client needs. What frameworks you'll be working in specifically will be determined by the business and what will make the business money.

That said, NIST CF and NIST SP 800-153 are very common starting points, and are both freely available.

[muted shoal]

I’m looking for an entry level cybersecurity analyst job.I just graduated from a 2 year program at Devry University with honors.

[keen tundra]

Try to look at #jobs-board

[orchid bramble]

I know the new SAL1 cert is new and all, but I was curious if it would be worth grabbing for someone who already has an entry level cert (BTL1). Opinions?

[chrome spire]

Kinda afraid it will be impossible to find a job in the next few years . Is there any hope?

[stiff vale]

Its said cybersecurity has vacant positions even though there’s a surplus of workforce

[chrome spire]

Id assume its bc of a bunch of ppl not being qualified

[stiff vale]

Jobs are evolving as well, just saw on LinkedIn, they count HTB and THM in exp, so 3 years on either counts as 3 years of Exp

[chrome spire]

Thats good

I just starting my joirney

Journey*

[stiff vale]

The job market will only expand in the future because attack surface is getting bigger

Now they have to protect, doors, fridges and what not because everything is connected to internet

And probably humanoids in the near future

So cybersec is only going to grow

[chrome spire]

Thats good

Ty

[golden imp]

the thought of a hacked "playing doll" is kinda scary

[stiff vale]

Ahh we are finally getting physical control through internet and thats scary? I am excited as fuck 😂

[golden imp]

no, i mean having a robot for "fun activities" and it being hacked

[stiff vale]

Well thats kinda scary

Thats why you should get alive playing dolls

That sounds wrong 🤔

[stoic cave]

Do you have any postings? Self-learning is not professional experience.

[stiff vale]

It says exp, Lemme just search one up, maybe I will find a job with similar requirements

Check out this job at Heartland Business Systems: Penetration Tester II https://www.linkedin.com/jobs/view/4167265705

Check this one out, although it asks for certs as well but counts THM and HTB as substitute for experience

[stoic cave]

I just looked it up, and I do see that, however I would be concerned. From both an applicant perspective and from another business purchasing their services perspective

Labs are not real life

[stiff vale]

They would certainly guide whoever they choose

Then someone who is proficient in labs will take minimal time to adapt

Its like during my CCNA prep, I did things on packet tracer, doing it in real life came out as different but it hardly took me some hours to figure everything out

[flat sedge]

that company doesn't know what they want, they really need a senior role to plan out and scope what it should be. Hiring a pentester II with zero on-the-job experience is a huge red flag.

[undone shore]

They also want CEH, which is another good indicator they don't have a clue what they're talking about

[flat sedge]

Common misconception, this is absolutely not true. I interviewed a candidate awhile back who had a lot of lab experience and zero idea about why a pentest should be run, and how they should be run. Smart candidate, but not someone I could hire due to their personality.

[undone shore]

Also, this is not the case with pentesting. Some of the technology is the same as your typical lab, but the methodology and conduct are very different.

e.g., based on your lab experience, would you be comfortable scoping a full assessment (and making sure that all required components are covered), then conducting a full test -- not just looking for a complete kill chain, but all of the vulnerabilities.
For example, if you're doing an infrastructure test, are you looking for service misconfigurations? Are you looking for cryptography issues? Or are you just looking for RCE?
If you're doing a webapp test, would you know which security headers need to be in place -- and importantly, why some of them might not be?
Would you know enough to say that the Critical vulnerability which Nessus flagged is actually only a medium, or a false positive -- and be able to back that up? Would you know how to rate vulnerabilities, and justify that? I'll tell you straight off -- that takes considerable time and practice

Equally, would you know what not to test because it might cause damage to the client's infrastructure? Or what not to test because it's a waste of time?
Would you know how to recognise the technology in front of you, and tailor your testing methodology to that? If I tell you that you're going to be testing an API gateway protected by mTLS and Oauth2 tokens, do you know how to approach that? How about something like a full cloud configuration review? I've yet to see a proper lab on that.

More generally, what happens if you sit down with a client and they tell you that they need 9000 IPs scanned? How do you manage that project, coming from an environment where you've only ever had to do one at a time? Do you know how to estimate FTE? Or how to manage that time appropriately?

Then we get to the reporting...
From your lab experience, do you know how to write a proper pentest report? Do you know what information you need to include, and how to divide that into neat sections? Do you know which bits are most important the client? Do you know how to express yourself in clear, technical language? Do you know how to tailor the sections of your report to the audience?
Do you have the experience to give full recommendations for fixing the issues you raise? Are you able to take into account existing controls, and adjust your recommendation accordingly?

There is a huge amount of stuff that goes into a pentest, and the stakes are high. Worst case scenario: fucking any of it up could end with you (or your employer) being prosecuted.

I promise you -- your lab environments do not prepare you for that role, and that company are on very thin ice.

[stiff vale]

Well can’t really compare networking to pentesting, which is the case here, so it might be some HR putting this up after debating with ChatGPT 🤷🏻‍♂️🙂

[stiff vale]

Damn 💀

[stiff vale]

A useless cert indeed

[glossy dock]

This is like a pen testing version of what God said to Job in Job 38-41. 🔥

[marble elm]

That's a very detailed explanation, damn lol

[chrome spire]

Its marketable tho

[stoic cave]

The certification is quickly losing value in the western market. India, as far as we're aware, is one of if not the only market still requiring people to have it.

[abstract drift]

Guys, I have to clear the aptitude tests. I am a BTech 4th year computer science and engineering student. In this final year I have attended 6 aptitude tests by companies like Ltmindtree, UST, 6d TECHNOLOGIES ,EY etc. But I couldn't clear a single aptitude test. Now I'm nervous about my next step. After each test I'm becoming less likely to get placed.
What should I focus on programming or aptitude test ?

[stiff vale]

HR appeal? OSCP has more and thats atleast something

[cobalt reef]

https://tenor.com/view/hey-there-hello-wave-gif-19235605

ngl i can't imagine how people would even enter cyber going from non technical backgrounds, i've got what i'd consider a fairly well rounded technical background touching cyber,software engineering and it management and still struggle to pick up work atm, honestly feels like peters from dead pool soaking all the attention in interviews

[fiery osprey]

sorry to hear

[cobalt reef]

it's just got me rubbed the wrong way atm tbh, but i can't even imagine if i didnt have experience or a degree, like its just so flooded by people who don't want to actually do the work

[fiery osprey]

that's sad

[cobalt reef]

that said if it was people putting in work and i'd just be unlucky would be less tilted

[chrome spire]

True

[marsh ledge]

The job market is really bad at the moment. I am in the same boat, I come from software dev ( python / django) and even with the experience is hard to land a role. Decided to upskill to cyber security but it looks like even this field is as bad. 😢

[cobalt reef]

Yeah it’s insane, I’m about to finish my masters and even then it’s close to impossible

[broken idol]

@grizzled hare please interact more before advertising.

[grizzled hare]

okey sorry

[cobalt lily]

is that really hard to find job? , may i know which country your from?

[opaque kelp]

Hi! Hope you're well. I have a question not specifically about Tryhackme but about cybersecurity in general. Is it ok?

Although I'm particularly interested in the security aspect of computing, I still have a curiosity and interest in computing in general, which is why I'm currently studying the “Design and Architecture” aspect of CPUs at the moment (on textbooks like Computer Organization And Design MIPS Edition) even though I conceive that there's no direct link with computer security. However, I'm afraid it's even completely useless for cybersecurity and spending too much time on it.
What do you think? If there are professionals on the server, do you recommend spending time understanding in depth the workings of cpu's and different computer components, or should I confine myself to areas directly related to security, such as networks, cryptography...? Is there any difference between those who have this knowledge and those who don't among cybersec professionals? Is it more valued by recruiters? Thank you.

(Feel free to correct me if I have made any English mistakes)

[rugged delta]

If you look at the kinds of jobs being posted for cybersecurity, they revolve around things like SOC or pentesting, engineering and various other roles, management roles, etc. Look at what those roles expect of you. While the book you've been reading is interesting, you likely won't be dealing with much to do with CPUs unless you're designing or working on such things and the proesses around them. You should see the kinds of qualifications and education people who work in cybersecurity take for such roles. By all means, maintain your interest in things like the book you're reading, but you should be learning things like networking, Linux/Windows administation, etc. Check out the paths on the THM site and the various certs, books and other resources mentioned. Sure, recruiters like to see that you have broad interets, but they want to see that you understand the regular details that most security personnel deals with daily

[thick quail]

Hi guys !
I have a question : I’m on my way to learn cybersecurity and system administration. I know in France a master degree is important to find work in cyber. But could you give me information about the other country? Especially in Switzerland, Canada, Ireland or Nordic countries ! (We know we want to leave France after my studies with my wife, but we don’t know where for the moment !)
Thanks for your answers !

[dense barn]

Hi I need an advice
I got an email that I am selected for Information Security Specialist position phone interview last Friday at 2.30pm. I professionally responded at 9.30 pm. So today is Wednesday and I did not hear back from them. How to handle please?

[golden spoke]

send a follow up email if the phone interview date has passed

reply to the email thread again and include your available times for the week and ask if those work for them or if additional times are required

"i am just following up on my previous email..."

ideally u didnt wait too long

[opaque kelp]

Hi thanks for you're long and well written message. I appreciate that ! I'll definitely finish my book and then move on to networks and network administration

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 464)

[rugged delta]

If you already have a degree in Computer Science or a related topic, you should be able to combine that with things like certifications, CTFs, having a blog, doing writeups, bug bounties, having a home lab, etc., to be able to demonstrate your abilities. Having a Master's can be a good indicator of your abilities and interests, and your ambition, but isn't always necessary, and can mean an employer will expect high performance from you. I would suggest reading the Tribe of Hackers books by Marcus J Carey. They're a collection of interviews with experts in various roles in the field with advice on how to proceed

[lusty ibex]

Good morning everyone! My name is Eddie! I’m looking to get into cybersecurity without paying thousands of dollars for a bootcamp. Does anyone have any suggestions, resources or recommendations on how to get started, learn some skills, build a portfolio and eventually land an interview/job?

[keen tundra]

THM is a great starting point

[lusty ibex]

🙏🏾🙏🏾🙏🏾 thank you!!

[steep rampart]

Hello,
First off your website and learning modules are 👌🏻

I have a question, Im currently following the pre-security path and next the cybersecurity 101 path for a good base. I want to focus on open source instellingence next. What path would be the best starting point for that?

[keen tundra]

You're on a great path , just follow along 🙂

[leaden yew]

Hello! Does anyone know what are the main concepts to know or understand at least to be able to claim to be skilled in Windows?
I mainly think about
Core Windows Processes
File System Hierarchy
Windows Server Administration (GPO, Active Directory, Domain Controller, LDAP)
User Account Control (UAC)

Is there anything else important to consider?

[fair urchin]

Never done bug bounty but having a very hard time breaking into a cyber career rn and would like to do some for fun/experience/side income. I know that they aren't really 100% comparable but what level of box/skill on sites like thm would you say is high enough for me to have some success starting out?

[quick brook]

really niche question but does anyone know if "Pyramid Consulting" is a legit company, it was on ziprecruiter and they responded within the hour. im not sure if this is a legit company i should be dealing with

[whole frigate]

Pyramid scheme 🤨

[stiff vale]

If you are able to complete Hard level boxes, you can definitely survive out there but then again, CTFs are puzzely and at the same time have no defined scope, you just have to do it. Real life is a bit more straightforward but with strong rules and limited scope which you have to be within.

So when you gain the skills in THM, start in real life, learn the difference and you are going to survive

[quick brook]

im not 100% certain, i google the company and it seems legit but pyramid consulting doesnt sound too legit

[whole frigate]

Not one company responds immediately, so its very sus

[stiff vale]

Legit company with almost a million follower, you might as well doubt TryHackMe 😭

[stiff vale]

😆

Agree on that

[spice plover]

anyone available to look at my resume and give me a review of it?

[shrewd veldt]

Is there such thing as job positions for individuals with little cyber security knowledge but hungry to learn on the job or help progress learning?

[misty thistle]

Some would recommand to do some Helpdesk job aka IT customer supports

[gleaming remnant]

@broken idol @cobalt escarp

[warm hinge]

Lmfao what is this

[rose sentinel]

what are the certain things taken care of in an interview?

[cunning shadow]

Done!

[daring mantle]

i have done all things now whay i have to do

[rotund crow]

Hey brother, if you find the answer to this question, please do let me know, this is the reason I join this app, Lol

[surreal zealot]

THM is the best point to start man

[old fossil]

Strive to acquire a general overview of the field in the first place. The way you phrased your question ("to get into cybersecurity") suggests a lack of informedness. It's like asking: How do I get into playing sports?
Look into the curriculum of CompTIA Sec+. I would not necessarily recommend getting the cert (it would help with the job hunt though if you have the cash) but reading through the official cert guide will give you a decent overview of the field. You can also get the ISC2 CC which is less extensive, but free (you actually have to pay the 50 USD yearly maintenance fee to become a member, but the course and the exam are free at the moment). Maybe look into the Google Cybersecurity cert.

At this point you should have clue about which area of cysec are you willing to pursue. Then pick an advanced course and start practicing the relevant skills in your lab environment.

For example if you are interested in blue teaming: deploy a SIEM, ELK stack, NAC, maybe a DLP, try to analyze network traffic, do some digital forensics, etc. THM can teach you a lot of that. Take a look at LetsDefend and HTB.

[warm hinge]

Hi, I am looking to start a career in Cyber Security and believe am SOC Analyst would be a great starting point. Being 35 and having no degree in a relevant field, going back to University is not an option. I was looking at completing my CompTIA A+ 1/2, CompTIA Sec+, CompTIA Network+, and CompTIA PenTest+, whilst doing these I am also going to be using THM as well as building a home lab to try get some practical practice as well. Any recommendations from anyone about whether this should set me up?

[fiery osprey]

can someone provife me a roadmap with free courses to optain certs (espacialy red/purple team)

[broken idol]

You won't get worthwhile certs for free, or do you just mean training?

[keen tundra]

THM map may help for learning purposes
https://tryhackme.com/hacktivities

[rustic atlas]

Hey Guys!

I’m about to finish a degree in Electronics Technology. I want to get a job as an SOC analyst 1.

Currently I have:

• Security+ Cert

I’m pursuing:

• Splunk Core certification
• Microsoft sentinel SEIM
• home lab
• Scripting using powershell

Any tips on anything else for getting a SOC Analyst job?

[solid tree]

I'm doing master's in computer application from govt engineering college I want to make my career in cyber security I'm highly interested in blue team roles like SOC,DFIR can anyone give me guidance I want to do internship as soon as possible and grab job ,my father have some liver and heart problem

[rugged delta]

I'd suggest doing the SOC Level 1 and SOC Level 2 paths on THM, and consider doing the new THM SAL1 certification, or perhaps the BTL1 or another practical SOC certification

#announcements message

[quick brook]

for anyone wondering they are a scam, been doing it for 16+ years

[stoic cave]

Are you going to provide a source or other evidence?

[chilly jasper]

guys i want to start a learn about cyber security but i want start from the biginner hahaa, there some good content to recommendo ?

basic please

[quick brook]

https://youtu.be/Tqnns1Sbr54?si=dlfFaFnh08c0oUEL

Along with an automated bot asking for my social security number before actually knowing if I'm hired

[latent vault]

guys i have ceh v12 and have decent knowledge but i dont have degree actually i failed in exams can anyone help me to land my job 🙂

[viral magnet]

I have a question. What is the best real life hacking tool to buy? Is it Flipper0 or maybe Proxmarc3 rdv4 or maybe another gadget like this? Im concerned in credit card security and training thats why i ask

[digital shell]

Hi I hope everyone is well, I just wanted to ask for help with my job hunt in the Cyber Security or IT field (UK).
I've recently completed my MSc in Cyber Security with a Distinction (1st) and have a BSc in Computer Science achieving a 2:1 .
I've got no relevant experience, just summer jobs.
I am currently studying through the SOC Level 1 path on tryhackme and I'm looking to start learning for the sc-200 cert.
I would like to get into an entry level SOC analyst role (preferred), or any entry level IT role to get my foot in the door to gain experience and try and shift around from there.
If anyone has any advice or guidance I would really appreciate it and thank you for your time reading and responding to me in advance.

[rugged delta]

The CEH is still accepted by a lot of organisations in India, but you may need to complement your knowledge with practical experience, a blog/projects, writeups, home lab, CTFs, bug bounties and progress on platforms like THM, PicoCTF, VulnHub, PortSwigger and others.

A home lab, for instance, could include old/spare computers, virtual machines, a cloud account (AWS/Azure/GCP all have free tiers available), or a combination. You might post a blog on a platform like Medium, or even GitHub, or use it to discuss projects you're doing, etc. You'll need to check the rules of the platforms you engage with as to when you're allowed discuss/share details of your progess/experiences/writeups. Obviously, you can make use of blogs/writeups/videos others have published to help you learn more; as the cybersecurity field is always evolving. Best of luck

[rugged delta]

Congratulations on your academic achievements and your enthusiasm for pursuing a role in a SOC. It's usually the first role most people in the field will start with, and spend a number of years with. You have the right attitude with regard to your pursuits, and it's perfectly fine to pursue a role like helpdesk/tech support/IT (Windows, Linux, Networks, etc.), when looking for experience and a solid grounding.

You should consider on your resume/cv to include the work experience you've had; it can be a good demonstration of your willingness to participate and contribute. As for certifications, the SC-200 is recognised by potential employers. AFAIK it's a mix of multiple choice questions and interactive components. THM has recently launched the SAL-1 (Security Analyst Level-1) certification with both multiple choice and practical simulation aspects. Here's the announcement and a review of it for your consideration, since you're pursuing the SOC Level 1 path
#announcements message
#announcements message

[quick forum]

Credit cards are pretty specialist. None of those are really credit card related, there's not really kit out there for it.
What are you working on?

[viral magnet]

Not really working on anything. Havent even put my foot in water yet. Just wandering where to start and how. Im new to gadgets and cybersecurity in general

[quick forum]

Don't start with credit cards
Be very careful around the laws that govern hacking too

[stiff vale]

If 1 plans on moving to a higher level then skipping CeH is better

Security+ and then a decent certification like OSCP for intermediate level

Or if you have all the money in the world, then no problem on going for the all the certs you can 🤷🏻‍♂️

[stoic cave]

Cert hunting isn't actually recommended, not just from a monetary perspective, but also from the negative connotations.

[stoic cave]

OSCP is entry level for pentesting, just FYI

[fair urchin]

I have a degree, sec+, and help desk experience and can't seem to find a job 😔

[golden imp]

can you elaborate on the negative connotations, please?

[dense dagger]

Certifications without experience are a sus flag for employers. While certifications show you know a certain thing, it doesn’t necessarily translate to actual experience (e.g., doing a pentest for a client, writing a report, scoping an engagement, etc.)

[golden imp]

I see, thanks

[serene umbra]

Gave +1 Rep to @dense dagger (current: #22 - 450)

[stiff vale]

For an entry level role? Like will it be sus if it’s for my first job and I apply with sec+, CCNA and CPTS?

[dense dagger]

It all depends on the employer tbh.

[stiff vale]

I feel like you deleted a whole paragraph just to say this 💀

I mean it showed Mknukn’s typing for a long time

[digital shell]

Thank you, I appreciate it and I will look into it

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 465)

[latent wyvern]

Hello... I am Mubashir... i am a try hack me beginner... im looking for partners to learn together and build future partnership and workspace... if you are willing to join in try hack me and be friends pl send request [e-mail] Thanks and happy learning.

[golden imp]

https://discord.com/channels/521382216299839518/833866257077895178

😅

[latent wyvern]

thanks.. i new here...

[golden imp]

np, hf

[timber nexus]

when will the complete beginner path removed from TryHackMe ?

[plain vector]

Hi everyone ! is there any recommendation I can get about a book while studying for CompTIA Sec+ ?

[grand sequoia]

@plain vector I just picked up CompTIA Security+ Third Edition by Ian Neil from Pakt publishing. So far so good.

[stiff vale]

“Security+ Get certified ahead by Daril Gibson and Joe Shelly”

[plain vector]

Thanks guys

Just completed Google Cyebrsecurity Professional certificate program

actually boosted some of my knowledge which Sec+ requires.

especially threats vulnerabilites and mitigations

[flint current]

Hello, can you give me more information about the certification? and how it works? I know you do the course on coursera, self-paced, and in order to receive the certificate you need to pay. Can you tell me how much did you paid? and if you can complete the course in a month for example.

[plain vector]

Hi, sure so the course is normally should be finished within 6 months but I have finished in 3 because I was barely having time and I have paid a lot money 30 or 40 $ a month something like that. The best option is there if you can complete it in a month or a two that would be great because the knowledge in the certificate program are very basic thus do it if you can complete it in a month or two if not I do not recommend spending more than 2 months in the program better to spend it on Comptia exams. But it does give you the basic knowledge in some aspects especially for the sec +. I would say its 6/10 better to spend the time/money on comptia materials.

[flint current]

Ok, thank you very much, now I only need to schedule my program to be able to complete it in a month 🙂

[serene umbra]

Gave +1 Rep to @plain vector (current: #2709 - 1)

[plain vector]

Good luck 🙂

[high flume]

riiight... so im hearing some rather gruesome stories about pentesting as a career being really difficult. As a beginner, its gotten me a little concerned ngl. Anyone here have any experience with pentesting professionally to give their two cents?

[plain vector]

I don't have direct experience but I can say that lets not call it very difficult rather call it a long road it but at the end if you learn consistently you are gonna get your reward in life you just need to put in work IT in general is a long path.

[quaint flare]

Do you guys think putting certs you’re working on on your resume is a bad thing? For example, “OSCP (in progress)” under your certifications section

Is that okay?

[stiff vale]

You can but I wouldn’t

[quaint flare]

Why would it be good or bad for example, I thought it would be a good thing

[stoic cave]

I don't know that it's a direct negative, but I personally wouldn't. I haven't earned it, so to me, it doesn't belong. That and what are you going to do if you fail and you've applied to jobs? It just opens up unnecessary, imo, questions.

[rugged delta]

You can feel free to discuss certifications you're planning on, or you've booked. Failing cert exams is a normal thing. If the cert is a requirement for the job, you won't get an interview, and if it's a suggestion for the role, unless they say they're paying for it, you shouldn't list it.

The only time you'd list a certification you don't yet have is when, for instance, you're doing a college/uni course and the certification is part of that course. You can mention your intention to complete it by the end of whatever academic period/when you graduate. Other than that, leave it off the resume/cv. You might mention that you're preparing for it if you get an interview, but otherwise don't

[stone brook]

Hi guys, I am looking for friends who share the same passion; Cybersecurity or Desktop engineer. I am an IT professional in the Dallas. Texas area. Please send me a private message

[hasty hedge]

I am looking for the same I am in the Kansas City missouri area

[gray garnet]

https://tenor.com/view/charlie-day-gif-18564553

Question regarding the learning process: Is feeling overwhelmed a common experience for newcomers in CTFs and security challenges? When machines take hours with minimal progress and consulting write-ups becomes necessary, is this part of the normal learning curve? For those now working in pentesting or threat analysis, how did you manage the initial learning phases and stay motivated through difficult challenges? Any insights would be valuable.

[static heron]

I have done this under particular circumstances: Halfway through a CCNA class, having been referred to the job (along with the rest of the class) by the instructor, I listed the partial cert study progress. I stress that I did this only because 1) the certification, and the things the employer knew I would have learned by that point in the course, were directly relevant, and 2) I was referred in relation to the cert course by its instructor, who had an established relationship with the employer.
If that's happening, then sure, go nuts. Otherwise I would lean toward no. Maybe, if you're taking a course and the cert is going to make or break you for that role.

[dense dagger]

Yeah it is. I was in the same boat and I also occasionally peek at writeups every now and then.

[static heron]

Dallas is a pretty good place to be for that. Just moved from there a while back. If you fw FW vendors in the area, tell DTAC and/or the ELTA 11 diaspora that Puff Junior says wazzaaa :V

[gray garnet]

Thank you 🙂
Its really frustrating some times, but addictive the same. ^^

[serene umbra]

Gave +1 Rep to @dense dagger (current: #22 - 451)

[coral merlin]

Hello everyone, I’m looking into getting cyber certificates. Specifically catered towards red teaming and pen testing. I have been looking into EC- Council’s certs but the information I find is that they are useless certificates. In your guys opinion what certifications should I seek for a career in penetration testing?

[keen tundra]

Yeah , I also used write-ups and watched a lot of videos when I was starting . I mean nobody was born with knowledge , you need to get it somewhere , just find good author and make sure you understand what are you doing 🙂 .

[gray garnet]

thank you 🙂

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 3647)

[leaden yew]

It is strongly recommended to use a password manager for storing securely passwords. However, I do not like and trust Lastpass, is there any free alternative?

[dusk wedge]

bitwarden

can also be hosted locally

https://bitwarden.com/download/

[grizzled lynx]

I'm new, too. What path/room are in you in?

Anybody here learning while abroad.

[static heron]

KeepassXC also good if you don't mind managing your cloud sync yourself

[fringe spade]

And if you want to have it on your phone, then Keepassium is cool. It has some features locked behind a paywall, but even for free it's good

[high plover]

Need a Vietnamese hacker

[cobalt escarp]

Hey this isn't a hacker-for-hire Discord server. We are unable to help you here as it would be against our community #rules

[stiff vale]

🤣🤣

[cunning shadow]

:mute: al.saffah#0 has been muted.

[stiff vale]

Dude you muted me for laughing? You saying “hacker-for-hire” to her “need a Vietnamese hacker” is funny af and I am somehow breaking the rules?

I will continue to use emojis, ban me next time if you got a problem with that

[jagged mural]

hey, any idea if i can get Job in georgia? 🇬🇪

[simple echo]

comptia scurity + is very costly what should we have to do ?

[cunning shadow]

:hammer: al.saffah#0 has been banned.

[high flume]

thank you man, appreciate the positivity

[serene umbra]

Gave +1 Rep to @plain vector (current: #1771 - 2)

[merry axle]

Are you a student? You can get it for a fraction of the cost through their academy store

If not get a discount by buying a voucher through professor messers website

[plain vector]

You r welcome !

[sleek flicker]

Does anyone recommend a resume that has space for putting some skills in without making it the focus?

Like a "familiar with" section maybe

[sleek flicker]

template*

[soft zinc]

so, I have been doing networking security for about 20 years, I'm about to get let go after an acquisition. how much of a step back would it be shifting from netsec to a cybersec role for say pen testing or maybe red teaming?(I'm not real clear on what roles are)

[flat sedge]

Can yo provide an example? Like a template you see with that?

[sleek flicker]

yeah, I'm trying to send a picture but I don't have permissions

on some resumes there's a section on the left hand side where it includes stuff like "skills"

[flat sedge]

You'll need to verify a THM account to get permissions to post pictures. We've had.... problems in the past, and so we don't allow unverified to post images.

[sleek flicker]

oh i have one

how do i go about that?

[flat sedge]

that's not the right link. weaksauce bot devs! @quasi stream

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account for full instructinos, short answer is /verify <your-thm-account-token>

[flat sedge]

with that much experience, I'd be looking at network architect or director type roles - that said, you are probably qualified for a senior network pentest role; not sure what you make now, but i don't think they'd want to slot you into a junior role with that background.

[sleek flicker]

notice how the lefthand side is spaced out? I'd like to have a template that looks compact and modular with a similar section as skills

I guess I could definitely try with one of these resumes first to see if I even need something more compact

[flat sedge]

i really hate that format. I've seen it more often from european candidates, and I do not like the left hand strip. having a skills section is fine, but that template does not flow well when I read it.

[sleek flicker]

that's right, do you have any suggestions? @flat sedge

I want to avoid that generic look

I can put my information down, with the obvious private information censored and we can go from there

[flat sedge]

My first suggestion is to find a resume format and template that appeals to you.

[storm sinew]

Hello friends, hope you are doing great, I’m here just looking for some help,

Tomorrow I have my final interview with the SOC fraud Leader and the QA at local company, I already been through 4 prior interviews for the position and went successfully through them.

I’m trying to figure out what questions I might face. If I pass the interview, I’ll land the cybersecurity analyst position. Does anyone have any recommendations on what I should practice, or at least what questions I should keep in mind that might be asked?

Thank you in advance, I do appreciate any help possible.🙏🏾🙏🏾

This will be my first Cybersecurity related position, so it’s kind of hard to know what to expect when you don’t have in-real world experience m, hope someone can help me, thank you

[warm hinge]

I would suggest crafting a resume that applicant tracking systems can easily process.

[sleek flicker]

what features do resumes like that have?

thats a good idea

[warm hinge]

Keep it simple, don't add any fancy borders/colors, try to use the fonts like arial,Helvetica,verdana and use keywords to tailor your resume for you desired Job so that yoh can increse the proportion of getting hired

[latent wyvern]

currently im in cyber 101... SQL basics... what about you?

[warm hinge]

Here is an example 👇🏻

[warm hinge]

To increase the chances of a resume being seen by a human recruiter, many companies use AI to screen applications; therefore, maintaining a well-organized resume that AI can easily process is beneficial.

[woven spoke]

Hey @warm hinge , How does this certification path for Red Team/Pentesting looks like? PNPT > CPTS > OSCP

[warm hinge]

Honestly, I am no expert in cybersecurity i think this is a solid path.

Security+ and pentest+ by compTIA can be advantageous if you are starting new to Cybersecurity

[zealous plume]

Security+ yes as fundamentals , but avoid PenTest+ since its only theoretical , ethical hacking is fully practical hassle and only practical certifications are worth doing.

[orchid raft]

I got offered a position as IT Helpdesk/security support… is that real role?

[warm hinge]

Thank you for the reply, i will keep it in my mind 😀

[serene umbra]

Gave +1 Rep to @zealous plume (current: #2711 - 1)

[warm hinge]

Yes, a help desk position is a good entry-level opportunity to gain experience in the IT field.

[warm hinge]

Congrats for the Job offer 👏

[orchid raft]

Thanks. Are my certs enough or do I need to know more? I have A+ Network + and Sec +

[serene umbra]

Gave +1 Rep to @charred knoll (current: #401 - 15)

[warm hinge]

That would be enough and good communication skill can be a bigg plus

[orchid raft]

Whats after help desk? What position should I prepare for?

[warm hinge]

Probably for system admin or network admin

Which can be a stepping stone for cybersecurity

[orchid raft]

So I’m not at cybersecurity yet?

[warm hinge]

No, help desk is typically considered an entry-level IT role. However, it's a valuable stepping stone. You'll gain experience with troubleshooting, customer service, and understanding how different systems work. System admin or network admin roles often follow, and those are much closer to the cybersecurity field. They involve more in-depth knowledge of networks, servers, and security protocols

I hope i could help you 😄

[orchid raft]

Definitely. I was a little nervous about starting this new position. I thought maybe e I didn’t know enough but if you say my certs are enough for help desk then I believe you.

[quasi stream]

what was the command that you were running? Sorry missing some context here 😅 /docs verify?

[warm hinge]

Your certifications provide a strong foundation for an entry-level IT help desk position, and gaining experience will further enhance your career prospects.

[flat sedge]

yeah, docs verify brought up to the "verify your school account" page, not the "how to verify thm on discord"

[fervent berry]

Looking for advice
I have a Computer Science bachelor degree and I did the presecruity, cyber security 101 and SOC 1 paths .
Now I have a little more than a month to find a remote job or I will have to move on to do other things (salary is not an issue for the most part as long as the job gives me experience)
Is it possible? And what steps should I take?

[rustic atlas]

Those who got an SOC analyst role, what projects were most impactful for you guys?

[foggy ermine]

Hello friends, is there any way by which I can earn money sitting at home or cover my study expenses
Please🙏 help guys I want to study but studying is very expensive.

[warm hinge]

It is better if you start from the beginning look for a entry-level job then with experience you can apply advanced jobs or step into cybersecurity, i recommend security+ by compTIA for a beginner level cert in cybersecurity and if you are completely a fresher then compTIA A+ can be a good option

[warm hinge]

For your convenience, you might consider seeking employment opportunities through job search applications or platforms like Indeed, perhaps as a transcriptionist or a freelance proofreader/editor. Please remember to consider your location, as job opportunities can vary from country to country

[fervent berry]

I was looking at the content of those certs and it's mostly stuff I already know and studied before

[warm hinge]

Yeah i know but certs really shows that this individual knows stuff, because industry standard certs can be a plus to the candidate when it comes to be a pioneer

[flat sedge]

That's not a fair assessment of the value of certs vs degree.

Having the degree makes having the certs unnecessary, unless the business explicitly asks the employee to get those certs. Certs establish a baseline expertise that is accredited, to an auditor or to another business customer. In the absence of needing to 'sell' the idea of employee expertise or other business requirements, certs are not important.

[fervent berry]

Looking at your message again this is the most vanilla advice you can give 😅😅

[fervent berry]

I already have the degree
Any idea how should I navigate rn

[flat sedge]

I don't understand what you're asking. Can you reword this so what you are looking for is more clear?

[fervent berry]

basically what should I do to find a remote job
In the next 40 days

if it's even possible

[flat sedge]

Apply for roles that look reasonable? Your question is still not clear what you're looking for.

[fervent berry]

Oh I didn't mention that I am not getting any responses

[flat sedge]

It usually takes 2-3 weeks for a company to respond to an application beyong 'we received your resume and will review it.'

If you aren't getting responses beyond that, it's likely that your resume isn't getting through to a human because it doesn't have the keywords that each job is looking for.

I strongly recommend you personalize your resume for each job you apply to, aligning the presentation of your knowledge and experience to the requirements and tasks of the new role.

[rugged delta]

Added to this, put your cv/resume and the job description into one of the many ATS checkers on the web. They can tell what terms you need to include in your resume (only include ones you actually know). This helps your cv/resume get seen

[warm hinge]

I apologize for the inaccurate guidance

[warm hinge]

I appreciate for correcting me 😀

[warm hinge]

I understand your perspective, and I agree with you. However, in my job search, I frequently encountered requirements for specific certifications.

[flat sedge]

Cert requirements are often more 'fluid' - if a company thinks that a candidate is a good fit for the job and capable of getting the cert, they may put a probationary period on employment. Such as, "you have the knowledge but not the cert, you have 90 days from hire to get that cert. When you pass we'll reimburse you for the exam"

[warm hinge]

Thank you for taking the time to explain me things i was unsure off 😄

[serene umbra]

Gave +1 Rep to @flat sedge (current: #11 - 812)

[fervent berry]

I will try doing that thanks

[serene umbra]

Gave +1 Rep to @flat sedge (current: #11 - 813)

[plain olive]

@keen tundra

[keen tundra]

Only mod/admin can help with that 🙂

[broken idol]

What do you need help with?

[golden imp]

there was someone with a steam gift away link

[broken idol]

Ah, that checks out, thanks.

[light schooner]

Has anyone heard about CRTA certification by cyberwarfare?

[wicked cedar]

Is anyone Bangladeshi or Indian?

[fiery ruin]

Yo guys I will start an MSP, what do u guys think?

[vital laurel]

you play chess?

[fiery ruin]

Yes, I am rates 2000+ on chess.com

[vital laurel]

Do you play OTB?

[fiery ruin]

Not anymore, Now I rarely play on cc, because of work and my road to 1M$ income per year lol

What is ur rating?

[vital laurel]

like 900

i suck

[storm sinew]

Hello, I just got hired for an internship in cybersecurity as a junior analyst. It lasts three months, but the salary is around $500. I live in Latin America and I am not sure what recommendations you would give me, because if I manage to pass this internship, I would be hired. I would really appreciate if you could contribute to my experience. Thank you in advance.

[neon ore]

I need a little guidance and I'm hoping this is the right place to ask. I do not have a IT background outside of basic computer knowledge and have a degree in Criminal justice that i have used over multiple jobs at this point. I am wanting to break into the Cybersecurity field although I do understand this is not a entry level gig. The 2 long term jobs that have really struck my interst are Penetration tester and Digital Forensics and Incident Response. I have started the beginner course TryHackMe is offering and have really enjoyed these. I am just needing a little guidance on the direction I should be taking and what other things I should be working towards.

sorry I know that was a lot

[dense barn]

I need some advice, please. I am working at my first IT job as IT support for an MSP, where we mainly support the medical and some restaurant businesses. My non-compete agreement states a 50-mile radius, especially with another MSP, but I’ve been invited to interview with another MSP that supports schools. It offers a 20-25% raise and is more helpdesk-focused. What are the risks? Is it worth it, and how will it look on my resume in the long term if I leave after only 6 months?
Thank you in advance

[stone brook]

Going from IT support to help desk is like downgrading your carreer to me. Unless we mean different things with IT support. I do IT support and in my company, helpdesk only does the half of what we do.

[flat sedge]

a lot of that is actually unenforcable, depending on the area you live in. talk to your local labor board to know your rights

[warm hinge]

hey guys. I read on THM that the Comptia Pentest+ Path on THM is enough to prep for the Security+ exam. Is that correct?

[dense barn]

thanks

[serene umbra]

Gave +1 Rep to @flat sedge (current: #11 - 814)

[fiery ruin]

Oh dam bro, well u seem good a cybersec if u want I can teach u chess and you teach me cybersec

[fiery ruin]

Wdym 50 miles radius?

If you leave after 6 months it might look look to them that ur not loyal, good at your job or can't keep a job

[dense barn]

cant work for another MSP within 50 miles from the current job
Yes, but its 10-20% raise, is it worth the gamble
Im not planning to stay there for long either, i wanna do something like a hybrid between soc and grc

[tawdry sandal]

hello im pHAT i kmow alot about network and must protocols how its work and the security cetficatr and event logs and more i want road map to blue team in depth in soc team and forensics team i and i need group of friends if they are making skills and sharing skills i need pepole who make metting evrey day and talk and disscus alot of thing so i learn more and help each other

[keen tundra]

Hello , if you're interested in logs and blue team activities you can check the two path linked below 🙂
https://tryhackme.com/path/outline/soclevel1
https://tryhackme.com/path/outline/soclevel2

[tawdry sandal]

after that its gonan be some certficate or studys in depth in specfic thing

when soc 2 came ?

so fast cool

[golden spoke]

What would someone recommend eventually progressing to from a network administrator/engineer role? I start soon, but I figure the role would be a little stressful, so I eventually want to move into something else that is related.

As of now, I was thinking of eventually getting a government network based role, as I have heard working for the government is more relaxed.

[keen tundra]

It came out a long time ago 🙂

[still sequoia]

government is also more stable

a company would rather kick somebody out

[golden spoke]

yea i was thinking of using this company's prestige to eventually get into a government role

or some security role that still deals with networking

not sure how exactly i would do either though

[dawn ridge]

Hello everyone, I am seeking advice on my next career move. I’m currently a cyber analyst but just recently received a job offer that will come with a 15% pay increase (before negotiations so maybe that number increases) for a Senior position.

The position is on the GRC (governance risk and compliance) side of things. My current role is more technical. I have a few thoughts on this:

On one hand I think it’s a no brainer. Take the significant pay increase along with the Senior title.

On the other hand, I’m a little timid to move away from a technical role to more of a project management / admin role.

I’ve heard that eventually in cyber security, you’re going to be asked to manage people / projects anyways and the days of doing the technical work will come to an end. If you want to continuously climb the corporate latter and earn more money, that is. Which I do.

Any advice on this? I’m leaning towards taking the position, I just want to gather some thoughts from the group please.

[zealous plume]

All depends how you feel about the job , money wont give you anything material that you already can have so let yourself get comfortable . If Technical side what you like , then let it be .

[dawn ridge]

I wouldn’t necessarily say it’s what I like, it’s just what I know and have been doing. I’m open to other disciplines on cybersecurity. I just want to make sure I’m making the right career move to max financial opportunities in the future.

[zealous plume]

In that case go for GRC role , just make sure you got enough experience on paper to reapply for a technical position in case your new opportunity will be unbearable.

[dawn ridge]

Thanks for the input

[serene umbra]

Gave +1 Rep to @zealous plume (current: #1774 - 2)

[cunning raptor]

Hello, i'm Blackxut 🐈‍⬛

Currently i'm focusing my learning in data science.
Do you have any suggestion of rooms that involves "data scientist", "data engineer", "AI", "Big Data", "DataBase", ... ?
As an example, i liked a lot [Machine learning] Can't CAPTCHA this Machine! during THM AoC 2023

Thanks for your time and have a good day ☕

[keen tundra]

Apart from one challenge in AoC2024 there're no ML/AI content currently on THM 😦

[cunning raptor]

I searched a bit but didn't find any ML room, what about topics that involve Data in general ?

[keen tundra]

Not really , THM is security oriented platform

[cunning raptor]

Alright then, i thought i could find stuff that mixes cyber and data. Thank you for your answers

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 3709)

[tight dew]

hey

[tight dew]

nnvm

[dusk wedge]

It would be a cool concept

[sonic barn]

hey i am new here in this cyber seecurity field from where should i start

[unique scarab]

hey there! current automotive technician of 7 years. looking to get into tech. been working on THM pre-security courses. seems to be the right path so far, any recommendations on resume building based on my automotive skills to start a transition over to tech?

[stoic cave]

Buddy did this transition a couple of years ago. He transitioned over to a Helpdesk, worked there for a year, and then transitioned to a different company doing more Linux admin work. Then moved more recently to a more cyber focused role

[unique scarab]

I feel like quite a few skills I have from automotive would translate well. especially considering new vehicles are saturated in modules nowadays. only been doing it for 7 years but it's killing my body already. plus I just have a genuine interest in tech

[neon pulsar]

Hi!

I've been a certified tour guide, have a Master's degree in museography, worked as a CEO's assistant in a truck company, then been a volunteer EMT for 7 years while doing nurse studies, and now, I'm an artist's agent on my way to cybersecurity:

[unique scarab]

wow! you have quite the experience in various fields, that's awesome. thank you for your volunteer service as an EMT!

[neon pulsar]

My tip for your resume: be proud of all you've done before, don't lie, and just be yourself.

Explaining why, at some point in our lives, we decide to change our career fields is a demonstration of strength, ability to learn, adapt, evolve as a person: I love explaining all that choices in a great letter on top of my resume!

Nowadays, company are not hiring "diplomas" anymore, but personalities.
At least, that's the way I see things.

[unique scarab]

couldn't agree more! thankfully my soft skills are pretty decent (if I'm critiquing myself) and I know that's super important in this field. I just want to find that fine line on my resume that'll highlight my accomplishments in my automotive career, show how it can be applied to tech and get myself past the HR filters

[neon pulsar]

Thanks, it's kind of you!

My point was that, even tough I've worked in lots of unrelated fields, every experience was in correlation with what I wanted to live at that time, and that's how I present things: I'm not "lost", I do what matters to me. 🙂

[serene umbra]

Gave +1 Rep to @unique scarab (current: #2714 - 1)

[unique scarab]

absolutely! that's where I'm at in life. almost 30 years old and I've lost my passion for turning wrenches. I have always loved technology and feel my passion is shifting significantly. that alone makes it justifiable in my head to make a career change now. I simply want to do something that makes me happy

I've had to keep myself away from the naysayer mentality on sites like Reddit - all doom and gloom about tech/cyber. I've always been about pushing past my comfort zone and I love that tech/cyber is challenging and always evolving

[neon pulsar]

Regarding my education and job history, I'm a pro HR hacker! My tip: a good letter, well written and structured, pinpointing your skills and linking your past experience to the next is waaaay more important then a simple resume or a "standard" letter.

I get you, I'm 34, and starting studies in cybersecurity! 😅

[neon pulsar]

Not on Reddit: I'm listening to my heart and mind. If you wanna do tech, do it! 😀

Plus, you've got your link! Tech is all over automotive now, so it'll be easy to write a letter highlighting the skills you already have. 🙂

[floral hazel]

human resources ?

[neon pulsar]

Yeah 😊

[dawn ridge]

Anyone currently working under the “unlimited vacation” policy?

[stoic cave]

Yes

[keen tundra]

Welcome , you can start with this pathway 🙂
https://tryhackme.com/path/outline/presecurity

[viscid folio]

Hi i'm very close to get a new job as Cyber security analyst. Just the last step. I have long experince from IT in differents role and have seen many enviroments. What do you think is the best courses/paths here to get more training. I have finishes security engineer path...

[keen tundra]

For SOC analyst you can check out two paths linked below 🙂
https://tryhackme.com/r/path/outline/soclevel1
https://tryhackme.com/r/path/outline/soclevel2

[radiant cave]

Question for you, do you know of any CS jobs that provide training?

[keen tundra]

What do you mean by that ?

[final dome]

Hello everyone, I am currently in 3rd year of my college pursuing Btech CSE degree in India, and its a 4 years course. So I want to do masters in Cybersecurity abroad but I don't which country is good currently I am considering this options: USA, Germany, Sweden. So can anyone suggest me where to go and what are the requirements, also which exams to prepare? Please it would be very helpful 😊

[quiet flax]

Hey everyone, I’m looking for some advice on how to navigate my next steps in cybersecurity.

So far, I’ve secured my CompTIA Security+ certification and completed the Pre-Security and SOC Level 1 paths on TryHackMe. However, due to hardware limitations (my laptop isn’t powerful enough) so hella weak🥹, I haven’t been able to work on many side projects. Additionally, due to my geographical location, affording premium training programs is challenging because of high exchange rates.

Right now, I’m considering applying for remote help desk roles to gain IT experience and secure funds to continue my cybersecurity education. I’m also taking the TCM Practical Help Desk to boost my chances.

My ultimate goal is to land a SOC Analyst role, but I don’t have enough xp to with —just Security+ and my TryHackMe progress. Given my current situation, should I:

1. Keep applying for entry-level cybersecurity jobs (SOC roles, etc.) despite my limited resources?
2. Go for a help desk role first, gain experience, and then transition into cybersecurity later?

I’d really appreciate any insights from those who have been in a similar situation or have experience breaking into cybersecurity. Thanks in advance!

[fair urchin]

Why not both. Apply to Soc roles and help desk then leave the desk whenever you land the Soc job you want

[golden spoke]

yea just apply to both it doesnt hurt

[carmine sandal]

Question on top of parelis, When transferring from a non cyber sec role, What would be those like "Starter" Jobs that you should be looking for? Help desk? SOC? anyhting else that comes to mind?

[brittle coral]

In my experience, if you have a good enough fundamental knowledge of Active Directory, networks, operating systems, and overall computer science, and you are able to prove your knowledge, then apply straight for an entry-level cybersecurity role, like SOC. Obviously, you also need to know the fundamentals of a SOC analyst's job, but luckily for us, we have the SAL1 certification to prove our skills!

What I've done is spend four years in basic IT support, and now I'm learning cybersecurity to land my first SOC analyst job. I think the experience in basic IT support has helped me a lot

[carmine sandal]

So what do you class as basic IT support then?

[golden spoke]

most IT support is pretty basic

just help desk roles or L1 IT support roles

[golden spoke]

yea soc and help desk

ideally u dont stay in the roles too long

[carmine sandal]

Neat, Also what is the differneces when they mention the levels

[golden spoke]

just like the points of contact

l1 is the first point of contact

l2 is more complex issues that l1 couldnt do

[brittle coral]

l1 and l2 can vary a lot depending on the workplace. In my experience, at l1 you gain basic knowledge of troubleshooting, operating systems (mostly Windows), basics of AD and Azure AD, O365 admin, and networking

[carmine sandal]

ahh fair

Also. How the hell do i learn about azure. Because i see it nearly in every job ad and I have no clue how the hell to get any practice/access to it, don't know fi im missing something obvious or just not looking hard enough

[whole frigate]

Coursera and udemy got good courses, you can also do hands on projects to learn more about it

[carmine sandal]

What even is it? Cloud?

[whole frigate]

Guys i have been applying for almost 3 months now, looking for entry level roles, networking seems to be like barking at a wall with no replies. Applying feels like a drag and all are rejections, should i just give up😭😭(i am 150 applications in)

[whole frigate]

Yep

Its a cloud service provider like gcp and aws

You can learn more about it, on thm(they have a room for it) and as well on their documentation about their services offered

[carmine sandal]

Ahhhh okay so i do know what it is just never actually used it

[whole frigate]

Hmm

[carmine sandal]

Also shrek, dm me your resume ill see if i can help you

[whole frigate]

Ohh thanks

[serene umbra]

Gave +1 Rep to @carmine sandal (current: #2716 - 1)

[carmine sandal]

All good 😄

[slate wraith]

Hey y’all, dealing with some rough family issues and gotta leave my parents’ house & no clue where I’m headed yet, I just need a remote job ASAP in cybersecurity or sys admin (part-time or full-time) to stay afloat, salary isn’t an issue as I just need a place to start

If you can help in any way, lmk & I’ll send my resume, pls no negativity or sarcasm, I'm already dealing with enough,,, appreciate y’all 🙏

[keen tundra]

Try to check out #jobs-board , also try to search some offers on LinkedIn from your local area .

[carmine sandal]

Just wanting to find out some information from anyone within the Incident Response side of Cyber Security want to ask some questions and pick you brain for some info. Feel free to PM me and I'll get back to you when i can. I appreciate you're time and willingness to help thanks guys 😄

[rugged delta]

This is a very interactive and open community. Feel free to post your questions here. You'll be more likely to get more contributions and it'll add to the knowledge the community regularly shares

[quiet flax]

Thank you so much for your input and support, you guys are truly amazing 💯🔥

[serene umbra]

Gave +1 Rep to @golden spoke (current: #2717 - 1)

[loud trail]

hey guys, ive been learning cybersec for some months now and tomorrow i have a job interview as a Junior Sys Admin (new to IT i think thats good to get into industry before SOC) do u have any tips on what to focus? kinda stressed ngl

[tall frigate]

use chat gpt to study for common sysadmin interview questions, i used it to study interview questions for an interview i had a few days ago and it helped. you can hold down on the response (right click if on computer) and have it read the response to you. You can also respond with how you'd answer the mock questions, and it will help improve your response. Practice answering common questions that they're almost certainly going to ask you first like, "tell us about yourself" etc.

[flat sedge]

You are entry level, I wouldn't stress about it. As entry level you aren't really expected to know much, just show a good attitude and do not be afraid to say you don't know.

I would NOT recommend using chatgpt or another ai to practice interviewing, as you don't know enough about IT to know when it is giving you an incorrect answer or response.

It's expected that entry level people are nervous in interviews, because you haven't done many of them yet. Just do your best, answer honestly, and don't be afraid to say you don't know.

[loud trail]

thank you both : )!

calmed a bit

[tall frigate]

when is your interview?

[loud trail]

tomorrow at 11

[tall frigate]

one question you can prepare for, that I can almost guarantee they'll ask, if the "tell us about yourself" icebreaker. Definitely think about the best way to answer that one. I understand people are averse to trusting chatgpt on technical matters, for good reason, but try it out for nontechnical questions and discern for yourself if the response sounds professional or not. Personally, it helped me practice professional ways to structure and answer common questions. Since you're on such short notice, it may prove a useful tool. Youtube videos like "how to prepare for sysadmin interview" may help too. Like mod said, answer honestly and if you dont know the answer smile and say something like "You know, I haven't tried that yet [or something like that] but I'm eager to learn more about it". Never answer a question with just "I don't know".

[loud trail]

ye thats what i thought about ur & juun`s answers (to try and practice some non-technical questions with GPT guy) , also, thanks for the tip about no-short answers, noted for sure📔

[viscid folio]

I got a new joboffer as CS analyst today

[median steppe]

hi everyone

[glossy heron]

Good luck @slate wraith
A game plan:

1. Put together a good resume highlighting your project experience, and get it reviewed by peers and recruiters if you can.

2. Connect with real people you know, explain what you want to do, and ask for help finding work. Uncles, school mentors, church or civic clubs, friends parents.

3. look at sites like Upwork, remotejobs, weworkremotely for possible short gigs.

4. Get on LinkedIn, clean up your profile, and connect with recruiters and tech people in your local area.

Try to directly connect with local tech business owners and send them a message, introduce yourself.

5. Meanwhile start hitting every job application you can find for junior IT jobs. Help desk, tech support, ticket triage, etc

Foot in the door is better than waiting around for the dream job.

The prime rule here:
🔑 Real people connections are the key.

1 in-person connection > 100 job applications

[hasty hedge]

Almost everywhere i apply calls me back. The key for me is getting in the top 20 people that apply on linkedIN i am new to the industry but i have 10 years experience as a logistics manager so that may help. Just sit on linkedin and refresh and as soon as a job pops up apply as quickly as you can

[hollow falcon]

How my email?

[sick mountain]

can i get a site for IT jobs please. i appreciate

[keen tundra]

You mean #jobs-board ?

[old fossil]

Obviously a work of AI: "perpetrator webcam" , "selected an option that installed", "in this ever changing technological world" (I'm missing the "let's dive deep into this topic" part 😏 ) , but the message is clear.

[errant niche]

Hello guys hope all are good, i have a big confusion in choosing the right certification for myself among BTL1, CCD, CDSA and SAL1. I have 12 years experience in various fields of IT in which 2 years of security experience, currently holding CEH ECSA ECIH. Seeking for your suggestion.

[urban void]

When choosing a certification, consider your career goals and interests:
CCD (Certified Cybersecurity Defender): Focuses on defensive cybersecurity skills; good for enhancing your security knowledge.
CDSA (Cybersecurity Defense Specialist Associate): A strong choice for developing specialized skills in cybersecurity defense.
SAL1 (Secure Application Lifecycle): Ideal if you're interested in application security and secure coding practices.
Given your background, CDSA might align well with your current experience in security, while CCD could help deepen your technical skills. Evaluate your career aspirations to make the best choice. and just just keep pushing and know what you want it's the more important thing i guess but kudos to you wish you all the best

[errant niche]

Thanks dear, here CDSA is from HTB. And what about BTL1, and what is your recommendation for me

[serene umbra]

Gave +1 Rep to @urban void (current: #2720 - 1)

[urban void]

Given that CDSA is from Hack The Box (HTB) and focuses on practical, hands-on cybersecurity skills, it’s a solid choice to enhance your technical capabilities.
BTL1 (Business Technology Leadership) is likely aimed more at those seeking to develop leadership and strategic management skills in technology-focused roles. If you're more interested in technical expertise rather than management, BTL1 may not be the best fit.
Considering your experience in IT and your existing security certifications (CEH, ECSA, ECIH), I recommend pursuing CDSA to deepen your technical skills further. This can help you become more proficient in cybersecurity, which will complement your existing certifications and experience. If you eventually wish to move toward leadership roles, you can consider BTL1 later on.
i guess that's for me but re think and ask expert in the domaine to get the full vision wish you all the best

[errant niche]

Thank you dear for your valuable advice.

[serene umbra]

Gave +1 Rep to @urban void (current: #1780 - 2)

[whole frigate]

Ig experience and the region plays a factor too

If a job has like 3-4k applicants chances of getting a call back is zero

[sick mountain]

thank you

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 3770)

[hollow falcon]

I wanted to make more informative but I know my users have short attention spans with emails

[rustic atlas]

Should I get CySa+ certificate if I’m going for junior cybersec analyst roles and SOC roles?

[stoic cave]

If you're in that situation, you need any job. Don't just limit yourself to sysadmin or cyber as both have competitive and longer hiring processes. You should realistically just be looking for any job in order to keep yourself afloat.

[stoic cave]

Why are you sending this in a public forum?

[stoic cave]

LinkedIn and Indeed are popular, it depends on your country though

Do you have a degree or prior professional experience in the computer industry? Of the answer is no to both, a common starting point for a lot of people in security is IT Helpdesk. Certifications without a degree or prior professional experience don't really stand on their own.

[stoic cave]

If you have 12 years of professional experience, you should be able to apply for Senior+ level roles. I'm not sure any of those certifications would help you.

[stoic cave]

Is this an AI response?

[gritty arch]

I have a question, I have a good amount of the required basic skills for a cybersecurity intership but then i do not have any good projects to be done which can stand out for getting both an internship and for the jobs, any suggestions?

Looking for internships for Jr penetration tester roles and more of VAPT roles

[stoic cave]

Are you a current student in higher education?

[gritty arch]

Im pursuing a Bachelors degree

[stoic cave]

ie college/university/graduate program etc

[gritty arch]

University

in Cyber Security itself

[stoic cave]

Ok, personally, I wouldn't limit yourself to just cybersecurity internships. You're a little late for Summer 2025 applications and if you're not a rising senior, it's going to be a bit harder.

Anecdotally, I did an IT internship and got just as much value out of it, if not more, than a dedicated cyber internship.

[gritty arch]

The problem is I have my university placements coming up by the end of this year so I have a limited amount of time and I personally have not worked on any projects yet to add on to my resume thats why

[gritty arch]

yea like any beginner internship role is fine

but its just that i do not have any projects to add/show and due to that itself, i am unable to get any internships

So if you have any suggestions for that, it would be really helpful

[hollow falcon]

Called feedback, same reason I posted my resume back few months ago

There are no secrets with me. Anything that is I don't mention.

I did adjust my resume with the suggestions so I'm hoping that it will catch more attention

[stoic cave]

It's terrible OPSEC, probably against school district policy, and maybe even state law. You're posting about an incident that happened at your place of work, that you don't have an answer to how it occurred, and it involves minors (assumption here given you're provisioning Chromebooks). You're posting this information on a very public hacking forum......

[hollow falcon]

That is way over thinking the subject.

There is no PII, reason I kept it vague. It's more about bringing to attention not the situation but to be aware.

[undone shore]

SAL1 - Secure Application Lifecycle

Wonder how the hell you even get that response lmao

[cobalt escarp]

icl I don't know, ChatGPT worked just fine

@urban void Are you using articial intelligence to write responses?
If so, please familiarise yourself with our community guidelines #rules 🙂

ChatGPT (and other) are not equipped to give accurate advice, please let others answer if you don't know an answer 😄

[undone shore]

Nah, I mean the juxtaposition between clearly knowing the acronym "SAL1", then going off the rails with the meaning.

Oh, so did you

[warm hinge]

Anyone in here got Pentest+? If so what are your experiences with working security assessor roles/ designing automated software if you have that experience(Python-heavy). I just got my PT0-003 certification and want to know peoples experience with employability in development or compliance testing.

[urban void]

yeah i'm currently rolling 42 degree , i also have project in c and c++ and i'm learning python also javascript so i have a it background and i play ctf's a lot what do you think ?

[urban void]

no i have a friend who already like his path and i ask him you can see

d just just keep pushing and know what you want it's the more important thing i guess but kudos to you wish you all the best
``` ow thi can be an ai

[fleet breach]

I’m looking to apply to a cybersecurity internship. Would you guys recommend I put a section for professional development and list out THM as a part of that resume ?

[rugged delta]

You could put it in a professional/oersonal development section at the end of your resume, after you list your skills, work experience, education, etc. You could include things like a blog/writeups, home lab (a few old computers, some VMs, or a cloud environment perhaps), participation in CTFs or bug bounties you've contributed to, etc

[fleet breach]

You recommend I have labs and THM included together? Because I do have a honeypot lab I was going to include but in it’s own section

[rugged delta]

As long as you include it somewhere, but any kind of home lab, I would usually list it as part of personal/professional development, unless it was for a work or course project

[woven spoke]

Can anyone tell me about the security engineer learning path's career aspect? I have no idea or experience about it.

[broken root]

i just landed my first junior cyber analyst role, beat out candidates with degrees and certs bc i had practical experience and understood business needs + attacker mindsets

not saying that will work everywhere

but it worked for me

picked up most of my practical skills and experience from homelab and tryhack me

[stone brook]

Congratulations bottack!

[cold edge]

hi

[broken root]

but yeah, tryhackme rooms wont get you a job themselves, i did mention this was a site i used, but if you follow the paths, and practice in home lab environments or ctfs outside of the rooms to reinforce your knowledge, a team looking for practical experience will like you more than a candidate who just did their coursework or bought a sec+ study guide

what i really like tryhackme for is the way it introduces really complex or niche hacks in an easy to follow way, but often there's way less handholding in real environments so you gotta make sure you understanding what you're doing as you go

[still sequoia]

people wich certification would you recommend for pentesting

there are too much of them out there

and a lot of boof

[rotund ice]

hii

[carmine sandal]

Hey guys. Anyone that's a incident responder. How do you find it? What are the pros and Cons of the job and do you find it easy or hard?

[autumn fable]

My 2 cents: It is hard if you do not have enough support and autonomy, a lot of actions depend on owners of the devices and applications. If you are new starter look for a team that will be good fit for you and provides culture to build your initial knowledge base, I would say work with MSSPs where you can be deployed to multiple customers. Once you survive for a few years, you will know how to handle it. At the beginning it will look like too much to know and do. Pros: 1. You will have a future proof career, given you keep updated on latest threats and trends. 2. Get paid well. Cons: You need to be available at ungodly hours. Deal with some politics. Constantly need to keep up with new things.

[winter parcel]

Hi all, hope you have a good day! I started since a couple of weeks to work on THM trying to getting the basics; now, I am looking to change career as I work in customer service and after many years I might burn out soon. I have some basic knowledge of networks and python, does anyone has "experience" of getting in cybersec without a super experience or technical knowledge?

[rugged delta]

A security engineer is very similar to a regular IT engineer, with their responsibilities including installing, configuring, maintaining, modifying and managing security ifrastructure. As a former security engineer, my role involved managing things like 802.1x server infrastructure, single sign-on, wifi infrastructure security, and other such things. Having skills in Windows, Linux, networking, Active Directory and other technolologies is a real benefit

[rugged delta]

It's good you've started pursuing cybersecurity. It is a highly competitive and rewarding field to be in. It's generally expected that you are quite technically competent in things like networking, Windows/Linux administration, understand at least some coding starting out, that you are pursuing some kind of certification. Frequent study and learning is a massive part of cybersecurity and IT in general. You should always be looking to enhance your skills and abilities and taking chances to practice. Keep working at it, and take a look at job roles in your area to see the kinds of skills that they need you to have.

Your first role in tech doesn't have to be cybersecurity. Many people start out in helpdesk/tech support, in IT, networking, cloud, etc., and move into a cyber role from there.

[woven spoke]

Is there any AWS cert I should consider? Like Cloud practitioner, Security, Solutions Architect and SysOps.

[rugged delta]

The Cloud Practitioner cert is aimed at sales/marketing/management types. All the stuff covered in that will be covered in the Solution Architect or other Associate level certs. You should do at least one of the Associate level certifications to get your footing. The Security cert is a professional level cert.

[woven spoke]

Alright. Thank you.

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 469)

[unkempt bay]

Hi everyone. As a guy who has no formal IT experience and no college degree, Should I aim to get A+ or Sec+ to break into the field? Most my training has been through THM.

[zealous plume]

That really depends of your end goal , where exacly you see yourself in near future . because recommendation for System Administrator or Jr. Penetration Tester and any other role are different

[unkempt bay]

Not sure if its possible to start into IT directly as SOC Analyst or Jr. Pentester, willing to start as help desk if needed..

[zealous plume]

You gotta convince companies to hire you by doing a lot projects/Volunteering and many more. Certifications are just one out of many steps. In general Security+ is a good choice as fundamentals (there is still at least one more to do specificly to role you desire ) if u plan to become SOC Analyst or even Pentester .

[unkempt bay]

What 2nd certificate would you suggest for those two ?

[zealous plume]

for SOC l1 analyst the THM cert - SAL1 , or BTL1 or tcm's PSAA .
as for jr. penetration tester OSCP is huge one , and later on any other OffSec certification (most of them are really difficult , but so is your role as pentester)

[unkempt bay]

I appreciate the answers. Thank you a bunch!

[serene umbra]

Gave +1 Rep to @zealous plume (current: #1343 - 3)

[fallow torrent]

hey all, im new, i have joined premium and doing the jr pentesting path, then web pentesting and then red teaming, is there something else i should keep trying
idk
how to start im just learning form there

[keen tundra]

You can follow this path 🙂
https://tryhackme.com/hacktivities/

[carmine sandal]

So basically what I do already in pharmacy anyhow 😅 just change out medications and that for computer stuff lol.

[blazing laurel]

yo is it bette rto buy th premium or no

.

[fickle grove]

How many THM rooms have you tried thus far? I'd recommend you take a loom at the free path to get a feel for the platform. If you find that the manner it is presenting the concepts suit your learning style, then by all means.

https://tryhackme.com/resources/blog/free_path

[blazing laurel]

oh k thankss

i did like 10 room

s

[late saddle]

Hi, I’m currently studying for the CompTIA Security+ SY0-701 exam using the CompTIA Security+ SY0-701 Certification Guide by Ian Neil, along with the CompTIA Security+ Exam Prep app by Than Hung. To increase my chances of passing, I’d like to add another resource, but I’m torn between Professor Messer’s Notes + Exam package and Jason Dion’s Udemy course. Which one would you recommend and why? Thank you.

[rugged delta]

Seems like you have the right resources to pursue the exam. The Study Guide and Exam Prep should give you really good preparation for the exam with what you have, and I would suggest you complete those first before you consider other prep materials, as there's no need to overburden yourself. You should make notes as you study for any exam you're doing.

If after completing those resources and you still feel you need more, Professor Messer's videos are free and would be good to check your knowledge and progress. Either his or Jason Dion's packages are highly recommended, so it's a flip of the coin, but you really shouldn't need either of them since you've already got the Study guide and Exam Prep app.

[late saddle]

Thanks a lot.

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 471)

[late saddle]

How similar are the questions in the CompTIA Security+ Exam Prep app to the ones that will appear on the actual test?

[novel bay]

Random question. How much of an achievement would completing the CyberSecurity 101 course be? And on average, how long does it take people to complete?

[sullen pond]

that one i like thanx mate for posting that

[keen tundra]

Maybe a month , it's a great foundational path 🙂 .

[novel bay]

sweet .... Im on a 32 day streak, and I'm pretty sure I'll be finishing cuber 101 today.... hopefully....

[keen tundra]

Keep up the good work 🙂 🚀

[whole frigate]

I lost my streak after 51 days

😭 😭

[keen tundra]

You can ask staff to restore it 🙂

[rugged delta]

They're going to be of the same standard, but won't be questions from the test itself. The Study Guide should have similar questions as well

[late saddle]

Thanks

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 472)

[rustic atlas]

Could someone look at my resume and help me out?

I’m trying for:

• Junior Cyber Analyst Roles
• Entry Level Cybersecurity Roles

It won’t let me upload my resume in here

[stoic cave]

You need to verify your account

[crude sphinx]

Discord: How Do I Verify My TryHackMe Account?

Article Link

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

Mar 9, 2025, 5:16 PM

[stoic cave]

Upload it as an accepted picture format, people don't want to have to download files here

[rustic atlas]

Looking for:
Entry Level SOC Analyst
Any Junior Analyst Roles

Any advice would be appreciated

[stoic cave]

I'm out and about, so I'll do a dive later, but move your education above skills. It seems like you're a recent grad.

I'm not sure about the areas of expertise section either

[rugged delta]

If you're pursuing a certification, I'd recommend either posting the date you have the exam booked for, or if you haven't booked it, just bring it up in the interview as something you're pursuing

[stoic cave]

Seems like an extra skills section, but it's a full paragraph, which is going to detract from the "elevator pitch"

[rustic atlas]

I haven’t graduated yet, so yeah I’ll do that

[flat sedge]

Your areas of expertise should be demonstrable, and really, it's an unneccessary section. Your expertise should be obvious from the tasking you've done, and possibly the projects you contribute and build. You are looking for junior roles, you probably aren't a SME at anything you've listed; if you list those as skills you ought to have a deep knowledge of any thing you list.

Also carefully re-read your skills; several things there aren't really skills, they are products or processes that are extremely vague. A recruiter/hiring manager should be able to read your skills from your work tasking. If you list a skill and it doesn't relate to professional work, you probably aren't as good at is as you think you are.

Did you graduate from your BS program? It's important to include that, or if you are still in school, your expected graduation.

[rustic atlas]

Okay sounds good, I have a year left

[flat sedge]

I also think that a personal summary isn't necessary, at least in the way you are writing it. You have written a narrative duplication of what's in the Skills and Experience sections, it's useless as it is now.

[rustic atlas]

Ah okay

[flat sedge]

Either cut it or rework it..... I'm not a fan of personal summaries, and I have never included one in my CV.

[stoic cave]

Put dates in your education to clarify then. Current students don't have the same schedules typically as FTEs

[flat sedge]

Are your projects on a repo that can be reviewed? Like a git page, or otherwise published? Were the projects part of your degree? If so, they should be bundled into a relevant coursework section.

That section will go away once you get your first full time job, but it can be useful for students looking to get their foot in the door.

[rustic atlas]

It was a personal project, I’ll add the GitHub link

[rustic atlas]

Do you think instead of skills and areas of expertise I should maybe add in another project with more skills incorporated?

Or should I add like 5 bullet points talking about what I have experience in, like:

“Capable of Monitoring Network Traffic (IDS/IPS) Logs to identify potential intrusions”

[flat sedge]

Your skills should reflect what youv'e done professionally, IMO. That's demonstrable, because that was your actual job. Passing a class is passing a class; I expect college graduates to know things right away, not to do things.

Conversely, vocational school and jr college graduates are usually more immediately useful because their curriculum is oriented towards a specific thing (ie, windows administration, network device config, et al) and not towards understanding the foundational topics deeply.

[rustic atlas]

Ahhhh ok

I don’t have a professional cybersecurity skills

I’ll try to work on them more and only list a select few

My college major is more control systems engineering :/

[tulip gorge]

Hey party people. I just finished both SOC learning paths. My original goal this year was to power through all learning paths before the end of the year, but seeing that this SAL1 cert was just released and that I just finished the SOC Level 2 path, I'm wondering if it would be wise to take a break from my original goal and go for the cert.

According to the recommended learning, I the next step I need to take (other than reviewing the recommended rooms) is to try a SOC Simulator or two.
https://tryhackme.com/certification/security-analyst-level-1/details

Does anyone have any experience or advice on this?

[timber dome]

It's a pretty brand new cert, so not many would have advice on itself. I will say that if you have the CySA+ and BTL1 already: https://www.reddit.com/r/tryhackme/comments/1j2nens/free_sal1_for_btl1_or_cysa_holders/

Price is a bit steep imo for a new certificate with no proven track record, so I'd say pursue it if you can get the voucher and/or an employer to reimburse this exam.

[tulip gorge]

Thanks for that link. I don't have any official cyber security certs yet, just a BS in Computer Science and work experience as a software focused engineer

[serene umbra]

Gave +1 Rep to @timber dome (current: #1344 - 3)

[timber dome]

Gotcha, then I wouldn't rush it and continue on your learning journey. Wait for some feedback as others take it and give feedback. As far as Certs go, you'd be better suited on getting the Security+ as it's pretty well recognized.

[tulip gorge]

Right on, thanks.

Yeah, my main dilemma is whether to keep going with the other learning paths or to take the SAL1 while the related material is still fresh in my mind. I'm not currently applying to any cybersecurity roles (although I'd like to start soon), and I see that the SAL1 is good for 2 years. I know there's a balance to try to achieve between getting certs for the sake of certs and certs for the sake of building a knowledge base, so I guess I'm just trying to weight the SAL1 vs. completing the other paths 😉

Thanks again

[serene umbra]

Gave +1 Rep to @timber dome (current: #1084 - 4)

[radiant cave]

Does anyone have knowledge of like remote ‘apprenticeships’ per se where you learn on the job instead of providing immediate knowledge?

[cedar viper]

Is this needed for entry level 😳

Is Sec+, eJPT+, CySA and a college degree in something cs/tech related enough for an entry level SOC L1 job?

[flat sedge]

Entry level to security is usually not entry level to IT.

It's very common to have 2+ years of experience or equivalent education before getting hired into a SOC

[rustic atlas]

I’m worried I won’t be able to get an entry level SOC job, and my last resume I added all those words to hopefully pass through ATS, but I think I just need better phrasing and instead of so many skills, I will add another project

[whole frigate]

Your resume looks solid but like you i put the education on the bottom

I mean check it out and guys if you have any advice on my resume please let me know

I tried fitting in what i could do but it never goes into one page, i really dont like the summary but some say its needed while others dont, some one please help me out here

[carmine sandal]

Guys out of curiosity how long should you be learning cyber stuff for basic jobs in tech

[carmine sandal]

Or can you go in bare bones and learn on the go

[odd hemlock]

I am a Bs comp sci student in my 4th sem....so all my friends. ..actually most of them are oriented towards development And my interest is more towards cyber...I know most of them will start free lancing during college...I wanted to do something like I want to start some Cybersecurity service providing as my own business in almost a year or year and half
Like is it possible in any way
Like I can provide security testing to small sites or businesses or any other way

[undone shore]

I highly recommend you do not try that.

1. Chances of you having the correct insurance and legal documents to stay out of prison are slim.
2. Chances of you conducting a comprehensive test are also slim. CTFs do not count as experience, nor do they give you the background knowledge you need.

Cyber security is not a game. It's not an entry level sector... for a reason. Pentesting is not an entry level topic within that sector... for a reason.
It's one thing to learn on the job while working with someone experienced, but in the nicest possible way, do you really feel like you can guarantee an accurate & comprehensive assessment with where you are now?

Bearing in mind that without the legal background you're at risk of being sued or ending up in jail as well.
e.g., go out of scope, client reports you to the police => breach of computer misuse.
Or alternatively: bring something down by accident, don't have the proper insurance or disclaimers => sued for the downtime (which could be thousands or more).

[odd hemlock]

So you recommend I go for a job

But a job never gives freedom 🥲

[undone shore]

Again, security is not a game. There is nothing more terrifying than an inexperienced tester being let loose on a project with freedom...

Either way I suggest you get a job with someone else until you have a few years of experience.

[carmine sandal]

Also jobs give financial freedom which evantually lead to the ability to be more free with your work as you develop skills

[undone shore]

Worth trying to do that (or get internships) as a student.
As I said though: it's not an entry level sector... For a reason.
If you don't get a job as a pentester immediately, I would suggest doing things the "normal" way. Work elsewhere in tech for a while until you've got a strong foundation in how technology works in the real world (and I don't just mean on a technical level), then transition into security.

[odd hemlock]

So what do you suggest as some help how should I use my one year so that I can get some job

I actually am not able to ask clearly 😀

I don't know what to exactly ask

[undone shore]

For cyber specifically?
Do some HTB, do some THM, build a homelab, build projects, get certs. Generally show as much interest as you can, and hope for the best.

CompTIA Security+ is relatively cheap and gives a reasonable foundation.
I started working part-time as a pentester during my degree. I had my OSCP and OSEP by that point. Costs for both of those are through the roof at this point though.

For general tech? The same, I'd guess, but swap out HTB/THM for whatever learning resources you need for the sector you're targeting.

[odd hemlock]

Thanks...❤️

[carmine sandal]

So would you say even if it was like help desk just keep doing assorted resources based on X sector or that

[undone shore]

Np... just, whatever you do, please do not go out and offer pentesting services without experience lmao

[undone shore]

Pretty much tbh

Homelab, projects, stuff like A+

[carmine sandal]

Fair enough, just cause getting back into cyber stuff after trying to see if web Dev/cyber was better

[undone shore]

I'm sure Net+/Sec+ are useful as well, and more focused than A+

[carmine sandal]

Oh I'm Hella limited currently can't do homelab and don't have internet properly at current house. Hahah

Renting a room in old coworkers dad's beach house

😂

[undone shore]

If you can: get a couple of ex-enterprise thin clients. They go for 40 quid on eBay.
Stick something like Proxmox on them and just tinker around using a type 1 cluster.

Doesn't need to be connected to anything, and gives you some reasonable hands on experience with the tech.

[carmine sandal]

So that's more the physical hardware side of stuff?

Does it need alot of space??

[undone shore]

I mean, if you want to take them to bits by all means lmao

[undone shore]

Nah, that's why I'm saying thin clients. They're generally ultra small form factor.

I've got one which fits in my hand.

[carmine sandal]

Neat. I'm still like iffy in the brain about hardware when it comes to names of stuff so ye lol. But that's cool to know

[odd hemlock]

So what did you find ...web Dev is better or not

[carmine sandal]

They're good in there own ways. I just have trouble creating stuff so web kinda was busting my backside

[odd hemlock]

I actually also can't create stuff 🥲

[undone shore]

I've got a workshop which uses something very similar for a demo. Couple of HP ProDesk 400 G3 uSFF boxes, some patch cables, and a HP ProCurve 1810G switch. All you really need for a tiny lab.

[carmine sandal]

Hahaha fair, I'm better at problem solving then creation

Interesting

[undone shore]

Most professional web jobs won't require you to design the site

[carmine sandal]

Oh

[undone shore]

Designs come from the design team (who have already figured out the customer journeys, UI, UX, etc). All the techies need to do is implement a Figma drawing.

[carmine sandal]

Lol

[undone shore]

Well, a wireframe. There's more design software than just figma.

[carmine sandal]

Yeah was about to say 😅

[undone shore]

Tells you how ubiquitous it is these days

[odd hemlock]

also I think if in a job you need to have stronger grip on things for interview etc...if providing services by self then this much skill level isn't required

You can just use AI more

[carmine sandal]

Not really?

Because AI can create stuff but it also doesn't do bug checks

[odd hemlock]

I have frnds who work in flutter and have 0 knowledge of coding in flutter

[carmine sandal]

Or check for conflicts

[undone shore]

Yes. That's the problem lmao.
If you don't have the skill then you shouldn't be doing the job. Lowering the barrier to entry is not a good solution, for you or the client.

[carmine sandal]

Only time lowering barrier of entry is when it's legit a basic AF job

E.g. retail

[undone shore]

Please don't...
Chances of AI doing a comprehensive security test at this point in time are zero

Which means you're likely to end up sued when your client gets hacked.

[odd hemlock]

I am talking about web actually now

[undone shore]

I mean, there's already a lower barrier to entry there. That's the point

[carmine sandal]

Exactly

[undone shore]

I mean, fair enough. AI is definitely doing a lot of coding these days.

[carmine sandal]

Also can you actually be sued for a website being hacked if everything is actually in place? Or is it only if neglect is happening

[undone shore]

Not sure I'd want to hire someone who doesn't understand what the AI is doing, but by the looks of things a lot of people do

[carmine sandal]

Yeah that's a bit wild

[odd hemlock]

They just know how to make it work ..like what to do where but just don't write code themselves

[undone shore]

It's a complicated one.
Realistically anyone can sue anyone for anything.
If you offer a pentest on a consultancy basis and the client gets hacked the following week, they're likely to be pretty pissed off.

It would then be up to you to prove that you satisfied your contractual obligation to test their system. That generally means demonstrating that your evidence of testing covers each step in your methodology, and that your methodology is comprehensive. If you fail to do that then you're likely to be liable for at least some of their damages, which is why insurance is a really good idea.

[carmine sandal]

Ahhh checks out

[undone shore]

That also assumes that your contract and task order are actually air tight. If they're not then you may also end up going down under breach of computer misuse laws

[carmine sandal]

It's interesting to say the least. To see how the world works out stuff and what not

[undone shore]

Yeah. People thing pentesting is all technical.
It's at least 50% business crap lmao

[carmine sandal]

I feel like anything redteam kinda plays in that role of trying to play the fine line of doing the stuff that's required whilst protecting yourself

[undone shore]

Aye

[carmine sandal]

Yeah, cause I'm looking at the stuff in cyber and trying to figure what's the best route.

Part of my brain is like I should go do incident response because problem solving and that but yeah who knows lol

[undone shore]

A tester should only ever really need to worry about the documents they're responsible for: the report, and maybe the scope of work in the task order. Roughly 20% of your working time usually.
Everything else should be handled by the administration.

That's why working for yourself without experience is a bad idea.

[carmine sandal]

Valid

Is there any way that kinda helps figure what's best for you

[late anchor]

in a pentest, is the people aspect usually in scope, such as social engineering attacks

[carmine sandal]

Social engineering is fun

[undone shore]

Not usually, no

[flat sedge]

I'd say the ratio of actual work to business stuff is more like 1:1. Scope, SOW, MSA, compliance reqs, all eat up time. Just because the technical side doesn't want to care about it doesn't mean there aren't at least as many hours burned for lawyers and admin as there are spent doing the actual work.

[flat sedge]

100% depends on engagement, and how much red team the org has tolerance for. It's been my experience that unless the org is actually looking for red team engagements, the capacity is very very low.

[spice plover]

Is it just me or does it feel like a waste of time when you spend all that time and energy on filling out an application and never hear anything back

[spark solstice]

It seems like there are alot of great minds here. I have been struggling getting jobs for months now and I need to get one to be able to stay in the US. Due to lack of finances, I could just manage to finish the SAL 1 by THM. Have tons of grit and hardworking and skilled for an entry level job but it just seems hopeless. Is there any kind of suggestion I can get from experts here in any way? It would be a great help

[merry axle]

A resume gets you an interview while an interview gets you a job

[rustic atlas]

Why at the bottom? Everyone told me to move it up

I’m still in school so maybe that’s why, but I want companies to respond to me

[whole frigate]

I don’t really know, isn’t skills supposed to be the highlight rather than education

[rustic atlas]

That’s what I thought

[whole frigate]

Workday man

Draining me mentally filling out

I am like almost 200 applications in and i just got one interview in and no reply from it for the past two months

[rustic atlas]

What was your interview for?

[whole frigate]

It was for a technical graduate role

For london stock exchange group

[rustic atlas]

Shoot am I cooked

[fringe junco]

Not an expert but as a red teamer, your certs are good but not good enough cuz you can literally buy certs from OffSec. When you go to an interview you gotta show them how you can compromise stuff and you need to show them that you are confident

[whole frigate]

More like we are cooked

[rustic atlas]

Lmao

[whole frigate]

You are still in school tho right?

[fringe junco]

pretty sure it is somewhat similar to blue team stuff

[rustic atlas]

I have 1yr of school left

[whole frigate]

I am done with degree so i am more like baked

[rustic atlas]

Lmao

[whole frigate]

I have to do either driving jobs/delivery or start a business