cyber-and-careers

[whole frigate]

Call myself “founder” on linkedin

[rustic atlas]

Ah rip

Hahaha

Why not get IT?

Help desk

[whole frigate]

Thats the funny part, i dont

[fringe junco]

I feel offended

[whole frigate]

I tried soc, but no entry level roles, so i thought why not helpdesk/it support, still no luck

Almost all entry level positions need like 2 years exp

[whole frigate]

😭😭

[whole frigate]

I am like pretty good with trouble shooting especially with windows but no matter how good i convey it on resume nothing seems to be working right

[merry axle]

You can expand during your interview. Tailor your answers to boast your qualifications and experience that align with the job

[rustic atlas]

That’s what I’m worried about

I’m just gonna go for any entry level cyber role

And at career fair that’s all I’ll look for

My new resume so far, I’m gonna optimize project key words though

-need to add GitHub
-I’m leaving education and training low since they don’t really pertain to Cyber

• will make skills bullet point

I wonder if even with a year left I could apply to some entry level Cyber positions for nights and weekends

[whole frigate]

I was gonna say skills bullet points but you said it

I was using this harvard template for resume but its too hard to fit it into one page, i cant seem to make two columns on latex editor

[flat sedge]

Organization of the skills makes it painful to read. Bolding items does not do the section any favors.

[fringe junco]

Skills section has a lot of info imo. make it simple so that you explain more during interviews

[rustic atlas]

Okay I’ll narrow it down

And I guess not bold, maybe I’ll put a small space between each one

[fringe junco]

Also for the certifications i suggest you put it somewhere up in the page

[rustic atlas]

Yeah that makes sense

Should I do “Skills and Certifications”?

[fringe junco]

Yeah that sounds good

for skills just put like 2-3 words max. at the end hr is gonna have like a 15 second look at your resume for screening

also for the projects

just put headings and the date and link them to your GitHub

make your resume as clean as possible

[flat sedge]

No. If you are going to include skills, they should be in their own section. Certifications are industry recognized, if you have any, employers will want to know.

Skills are more subjective and arbitrary; it's extremely common for Dunning-Kruger to affect how someone represents themself.

[spice plover]

I have my CYSA+ with minimum help desk experience and still can’t get a job haha 😂

[rustic atlas]

Sounds good

[warm hinge]

yoo people

[rustic atlas]

I’m worried I won’t get anything

[warm hinge]

i have my eng exam tom

[rustic atlas]

I guess worst case I’ll just work as an engineer and keep applying

[warm hinge]

thats the worst?

[rustic atlas]

Right now yeah I have a company I could go to after college that actually fits my major

Cybersecurity is what I’m passionate about, I don’t like engineering but it’s better than nothing

[warm hinge]

hm how bout the salary its good?

[rustic atlas]

It’s around 85-95

[warm hinge]

well u needs have cs knowledge for cybersecurity and trust me cs degree would deff halp u land a cybersec job

[rustic atlas]

My degree isn’t CS, but I’m minoring in it

Yeah I should’ve done a different major

My degree is electrical systems

[warm hinge]

thats actually really good for just after college

[warm hinge]

well u can still change right?

[rustic atlas]

Nah I have 1 year left

I graduate in 14 months

Just gotta cross my fingers and hope I get SOC or any entry cyber role

[warm hinge]

its fine then go for comptia and other exams + work on your skills coz if u dont have a degree it will be harder to get a job

[rustic atlas]

Yeah

I’ll complete degree and CySA+

I have Sec+

[warm hinge]

yea once u get to that point degree wont matter that much only skills will

[rustic atlas]

Are you working in cyber right now?

[rustic atlas]

Yeah

[warm hinge]

college

[rustic atlas]

Ah ok

[warm hinge]

mhm

[rustic atlas]

Well good luck

[warm hinge]

all the best to u too man

[rustic atlas]

I’m gonna start applying in a few months and just see if I can get an interview

Even though I’ll still be in school

[warm hinge]

yea man interview will be a tough nut to crack.. u should focus of much more than just cybersec skills like commication and stuff..

[warm hinge]

school? like hightschool?

[rustic atlas]

Nah college

1 more year of college

[warm hinge]

oh ok

same btw

[rustic atlas]

Bet

[rustic atlas]

Yeah maybe I can get something at career fair

We will see

[warm hinge]

yea ig do u go to hackathons and stuff

[rustic atlas]

No I haven’t

[warm hinge]

u should they are fun ngl

i attended my 1st hackathon yesterday

man i m telling u if was worth it

[rustic atlas]

Is it good for learning?

Interesting okay

[warm hinge]

good dude its great

[rustic atlas]

I’ll look into it

[warm hinge]

u meet new people with new skills and stuff

they are actually eally good for overall development not just technical skills

[undone shore]

Juun, 50% is 1:1

[warm hinge]

sure man all the best

[rigid lake]

I am going for master in germany this year, anyone know about the cyber job market there?

im a fresher

[warm hinge]

it will be hard to fit in

[rigid lake]

can you please elaborate?

[warm hinge]

well so 1st it will be hard to make friends and all the social stuff except from that i dont think there are any better colleges for cybersecurity in germany as compared to us or uk ( west )... i m not trying to demotivate you i am just trying to be helpfull

[flat sedge]

facepalm

my brain read what you said as 20% admin

[rigid lake]

nono...i guess in cyber security , certifications matter more, degree doesnt matter much

so ill be focusing on that except only problem will language i guess and also im a fresher

[flat sedge]

to be brutally honest, certifications only matter if the organization has a business requirement for them.

Many businesses are private and do not necessarily care about employee certifications, because that business may not have a regulatory or business relationship requirement to have demonstrable competency

[undone shore]

Or if they teach you something, TBF, although in that case it's the course which matters more 🤷‍♂️

[flat sedge]

it's been my experience that businesses that require certfication don't actually care if employees get anything out of the cert, just that they have the cert because business

[undone shore]

Yeah, I'm meaning "matter on an individual level"

[flat sedge]

direct reporting chain managers may be invested your career, but skip level and the business itself will not

[undone shore]

Orgs will be orgs. I don't expect them to care

[flat sedge]

Yep

Morals and ethics are for people

[rigid lake]

so what should i do? can i get a job without specialization in cyber security degree

i have seen many people from even core branches

are certificates like OSCP etc wortless...im confused

[undone shore]

Remember the traditional entrance into cyber is through other areas of IT.
I did a specialist degree, personally, but most do general compsci and get along just fine.

At the end of the day, experience matters more than anything else.

As Juun said, certs satisfy requirements -- be that for hiring, or assurance.
OSCP is good for both of those things, which is why it's well respected.

Personally I found the course material to be useful as well, although I hear differing opinions on that.

[rigid lake]

so like can you tell me, what should be my roadmap for securing a job in cyber, if i am in my masters , and dont have any cyber security exp, just starting

although some exp in software dev for 10-12 months

[flat sedge]

If you are a masters graduate from a university in cyber and do not have any work experience, you are going to price yourself out of the lower level jobs you need to get the experience to be a senior or higher.

[rigid lake]

so what should i do?

[flat sedge]

If you are already in the MS program, find ways to learn the practical and contextual aspects of security. Your training and courses are going to focus on the theoretical and modelling parts, so the burden is on you to find ways to make that theory concrete instead of abstract.

[rigid lake]

no im not in master rightnow, but will go in september

i will just complete my bachlors in few months

which country are you from btw?

[flat sedge]

US

[twilit forum]

Just as a side note some companies get better insuarance if their employees have certificates

[flat sedge]

That goes into the business requirements of demonstrable comptency and expertise

[twilit forum]

I wonder what job i can pull up with 3-4 years of expirience and soon to have sec+ and cysa+

I need to upgrade

is 4k remote work reasonable 😄 ?

i think that is my end goal...anything above that is meaningless for me

[wicked breach]

guys anyone got any good resources to master networking fundamentals? because i feel like that doing thm i don't really get that much of a theory

[keen tundra]

Check this module 🙂
https://tryhackme.com/module/network-fundamentals

[wicked breach]

I already did that module, but it didn't gave me really solid fundamentals...

[rugged delta]

When it comes to remote work, you would have to check with the particular company, however, it would most likely need to be a company within your jurisdiction. It might be possible to do freelance work in some regards, or to participate in things like bug bounties. It's less likely that you would have a paid, international remote work role, due to security, technical and regulatory concerns

[twilit forum]

Hmm I do get that but I have seen SOC remote jobs before

It really depends on companies structure I think

[rugged delta]

Yes, you're right, it is definitely dependent on the particular organisation to take care of all the outlying concerns

Remote might mean that you are able to work from home while communicating with a local/regional office and they would manage international requirements from that location

[twilit forum]

I guess I could compromise with hybrid...but I really want my next job to hit all the checkboxes...yes i had work from home before but it is not really my goal

Would you say maybe DevSecOps are more remote work suitable

[rugged delta]

You'll need to see the kinds of roles and their conditions in your region to figure that one out

[loud plinth]

Hi there. I'm new to the discord, and have been on TryHackMe since college 2 years ago.

Is A+ Certification worth it if its been extremely difficult to get any entry-level Cyber role after graduating with an InfoSec degree?
I'm almost ready for the Core 2 Exam. I'm going to get Network+ and Security+ afterwards.

Are there any courses on TryHackMe specifically anyone would reccomend if I'm looking to increase my chances getting an Entry-Level IT Job first, before starting in Cyber?
(it's kind of a de facto requirement these days, and I'm not sure which city I want to move to so my tech career can kick off- I live in the midwest U.S.).
I'm sure discussing 'how to get into InfoSec with a degree and no experience' would be an interesting and constructive topic to discuss.

[wicked breach]

A+ is reconignized by many companies globally, and pairing it with Network+ and Security+ will surely be a great idea, even its pretty expensive

[loud plinth]

Even if I'm just a cart attendant at walmart in the meantime?

I'm sure we've all been there tho

Can certifications alone... I've heard from some that's quite a leap if its been a few years since the degree..

[wicked breach]

Absolutely

[loud plinth]

Yay!!

Now I'll suceed and get that IT Job at a Fiber Internet place or wherever it is I choose!

[golden spoke]

A+ will mostly just get you a help desk or IT support job

honestly not sure how useful it would be outside of those

i imagine not very useful

[cunning badger]

I would like to pass the compTia a+ exam, has anyone taken it yet? Do you have any idea where to study from?

[fickle grove]

Haven't taken it, but do check Professor Messer.

[cunning badger]

wdym Professor messer?

[fickle grove]

If you do a Google search, you'll see the page has contents on A+ to get you started.

[cunning badger]

yes, I had already looked, I wanted feedback if anyone had any. Thank you very much

[serene umbra]

Gave +1 Rep to @fickle grove (current: #12 - 772)

[carmine sandal]

Guys, If you're unsure specifically which part of Cyber you want to go into whats the like... "Best" way to find out? is it just by doing like modules and roadmaps on THM and seeing where you do well vs not so much

[keen tundra]

Try to check out this article 🙂
https://tryhackme.com/room/careersincyber

[carmine sandal]

Done it before, Just wanted to see if there were other opinions and whatnot too xD But if thats what someone else also gives that ill trust it xD

[keen tundra]

You can combine THM with other learning resources , it doesn't have to be strictly THM 🙂

[carmine sandal]

yeee

Just wanted to double check more is all

Had multiple attempts with that test over several months difference when done it and got the same thing all 3 times xD

[wary frigate]

Other than CTFs, is there some small work I can do on the Internet to help get my name out there, and potentially figure out what I want to do?

[wicked breach]

contribute in github open source project or maybe do some blogs

[warm hinge]

hey there, for someone who wants to get a remote job easly, what do you advice him to learn, pentesting or bug bounty ?

[wicked breach]

pentesting and bug bounty are really close to each other

i would actually suggest to learn pentesting first then specialize in bug bounty

[warm hinge]

thank you man 🙂

[serene umbra]

Gave +1 Rep to @wicked breach (current: #1791 - 2)

[keen tundra]

Well I would say that it is relatively hard to get a remote pentester job

[warm hinge]

huum sadly :/

[wicked breach]

yes, easier to get a bug bounty one

[dusk wedge]

Id just do some rooms, do some paths. See what you like and what seems fun

From there you can look for jobs or other things related to the things you like.

[wary frigate]

Is it feasible to assume I could just be contacted for a job if I do something interesting and worthwhile enough?
I might be drawing too much from fiction, but I feel as though the Internet could work as a crucible, where developing skill from ambition and effort could give me a chance to do something that decides my entire future for the better.
At the same time, now that I'm typing it out, it feels like a grift.
Though, I'm still certain that there's more to the world than mundane ideas. Cybersecurity just seems like one of those things that are difficult and technical enough that rising as a force of pure individuality and actualization would have very practical benefits.

[dusk wedge]

On linkedin there are plenty of recruiters that will reach out to people for an "interview" or just a chat to see if they can provide anything, but i dont know how that actually goes since i didnt follow through with any of them.

[loud plinth]

Rulez

[tired sequoia]

hey, in my experience A+ won't get you a cybersec job

it could get you a tech support job

[loud plinth]

That’s what I need first.

Good to hear.

1 year of tech job plus network+ and security+ equals=

entry level cyber? SOC analyst?

[static heron]

Yeah maybe. You can get into enterprise firewall vendor frontline support with half a CCNA and some memorized protocol port numbers and a reasonable troubleshooting flow on a hypothetical scenario. Pivot into professional services or get picked up by a customer to push policy and file tickets for 6 digits, lol. Junior sysadmin stuff too. That still exists right?

I'm sure you're already familiar with the fact that people won't take an infosec degree seriously by itself and why. But this is fairly easy to rectify with the time-honored tactic of paying your dues in the trenches, taking it seriously, and standing out (not hard really, unless all your coworkers are just super moto for some reason)

You don't have to be the ultimate infosec wizard or anything, if you do basic stuff like take notes about things you learn, then compile and publish documentation for the benefit of others at work, people will think you're f***ing amazing and eyes will be on you in a good way

[plucky spoke]

hello, I’ve just decided it’s time to move on—my new team members seem like they might be the ones to cause a breach… 😬
I’d love to hear any insights on the current job market in the security space. Also, if anyone has information on global remote opportunities (preferably in the ANZ region), I’d really appreciate it!

[rugged delta]

You should check out the individual stories section of the blog, consider getting your hands on some of the Tribe of Hackers books and keep building your knowledge and skills. You should check the kinds of roles advertised in your area and see what they're looking for, try and find local cybersec groups, go to conferences, participate in CTFs, make a blog, do writeups, bug bounties or any other opportunities to connect and improve your skills.

The SOC 1 and SOC2 paths will teach you a lot of good theory and give you some practical experience. Also, while CompTIA certs are good for learning theory about a job, and A+, Net+ and Sec+ are good indicators of your interests, a good practical cert like the THM SAL1, the BTL1 or similar SOC certification can demonstrate your ability to do some of the practical things a SOC analyst does

https://tryhackme.com/resources/success-story

[loud plinth]

Thank you all so much! I will get started and read into all of that!

This is a good community to discuss these things.

[fair nova]

Does anyone think a bachelors is a necessity to compete in the job market or no. Stressing out about all of this but i also feel like college and uni is a bit of a scam.

[static heron]

experience > certs > degrees, mostly, kind of

But experience and a degree is definitely better than just experience, especially for the initial entry into the hiring process

And not everyone involved in hiring has the same views/priorities on this. But if you have to choose between getting hands-on experience and getting a degree only, being able to speak to things you've built, screwed up, and recovered will be preferable

[flat sedge]

It depends on what your goals are. A BS will delay the gratification of a job, but the tradeoff is a higher starting wage and a higher top end at the peak of your career, statistically.

Certs are almost always a business thing, so do not pay out of pocket to get them unless it's absolutely a requirement in your area.

Vocational and entry level experiences teach you how to do things, but don't really teach you why. IMO, that's harder to understand but this way makes you more immediately useful to an employer.

The degree teaches you why, but not how. In the short term, the university graduate is less useful but catches up very quickly.

[static heron]

Yeah, you could be right. I know that vocational or self-taught types can excel if they have the drive to find out the why. And I know the university grads have a tendency to be stuck in lofty abstraction (it can be really bad, like almost impossible to have a practical, goal-oriented discussion sometimes). But I don't have any anecdata on how often the uni grads transcend their state vs. the other type

[muted holly]

Anybody here from Digital Forensics field?
Having experience in this domain

[loud plinth]

I was afraid of becoming like that so I decided to take some psychology courses to learn how to speak professionally and truly use ‘active listening’ and use ‘civic engagement tactics’.
The general education brings is useful for the remainder of their lives, but really they should make it so after you’ve completed the sad general education requirements and learn what jobs in society exist in those fields- as well as internships so you can see them for yourself- that should lead to you getting the ‘chosen major’ half of the four year degree, which leads you into entry-level jobs in that field, or even higher. I hope the coming state-by-state diverse educational reforms find some way to fix these issues.

[fair vapor]

#1347596231551225887

[dapper depot]

If you are American this is a pretty good training course and you get a cool cert https://teex.org/class/awr139/

[muted holly]

I'm outsider, and I also complete eCDFP recently.
I just want to pursue my career in this field, explore opportunities and grow .....

[dapper depot]

Cool. I figured I'd throw it out there but it seems you're beyond that point in your learning. Hope you find someone to mentor/assist you.

[muted holly]

I'd Happy to learn from you

[dapper depot]

I don't know what all you could learn from me but feel free to shoot me a dm. Happy to share anything I know 🙂

[whole frigate]

Guys is customer experience role same as helpdesk/ support role?

Coz i dont have any other interviews that actually went through, so should i just get this and pivot my way into cyber or look for better jobs?

[warm hinge]

I think System Administrator could be a good choice.

[whole frigate]

Not like i can choose, my application never went through

[warm hinge]

Or if you're into networking, you could start with network admin.

If you feel confident that you are a good applicant for the Job then tailor the resume with key words and make it ATS-Friendly

[warm hinge]

A.I could be a factor that many people are not getting called backs

[whole frigate]

Yep

[whole frigate]

Thats the thing

Workday auto rejection emails are disheartening

[warm hinge]

That's true

It can be a lot frustrating when no response, but a resume with above montioned factors can be a helpful to get callback from recruiters

I hope i could help you 🙂

[broken idol]

@dusk gazelle please don't ask for help in this server regarding your challenge.

[dusk gazelle]

sory

[fair nova]

Whats everybody's opinion on western governors university (online university) course for cyber security or computer science? Ive heard a lot about them feom cyber related videos on university but kinda feel like the degrees would be looked down upon especially as i advanced through my career more.

[dark fulcrum]

Hello

[onyx gyro]

.

[whole frigate]

I mean if you got some tool where you can modify resume according to jd and save it without paying a premium then lmk

[golden spoke]

if it were me yea i would look down on it. LLMs are here and theres probably a ton of different ways to cheat.

They probably have methods put in place but i think many people would not know how good it actually is

[fading panther]

I just graduated from WGU with a bachelors in Cybersecurity last week actually. The program gets you multiple certs on top of the bachelors. I got Network+, Sec+, Project+, CySA+, Pentest+ plus all of comptias stackable certs that go along with those (I had A+ going into it). I also got SSCP and have a voucher to take CCSP cert exam for free still. You get a couple other misc certs in there too like linux essentials, and one of the ITIL ones. If you wanna know more ping me in here or shoot me a DM

[fading panther]

and I was able to finish all of that in 9 months too so I could keep the cost down lol

[amber sail]

ive been reading some conflicting stuff lately and was just wondering, is sec+ still a good cert to work towards (as someone with no tech background/infosec degree)? The plan atm is to work towards sec+ then maybe something that demonstrates network knowledge (and maybe some splunk courses too) before setting up projects and stuff to show practical cases of skills but if anyone has better ideas id love to hear them!

[merry axle]

how much did that cost?

[dark crest]

can some help me my browsers got highjakced

[warm hinge]

Right now i am not aware of such software, i will reach you when i found one 😀

[warm hinge]

#room-help ask for help over there

[fickle grove]

I don't think the help the user needs is related to THM though. 😅

[warm hinge]

Oh then i helped the wrong help😂

[fading panther]

Program cost is 4500 per six months before any scholarships or anything. That gets you access to all course materials and vouchers for exams. Only thing you could possibly need to pay for would be if you fail certification exams multiple times and need multiple vouchers (I think you pay after your 3rd fail but I’m not positive because I passed first try every time lol)

[tall frigate]

As a WGU student, I can vouch that what he's saying is true (including the cost). I'm on my third term, going quite slow.. but it's a great program in my opinion. It's helped me land a job already.

[ivory swallow]

Hi everyone. I am looking for a team to join for the new event (Hackfinity Battle) is there any team that might be interested?

Whoever is interested, join my team
https://tryhackme.com/manage-account/teams?joinTeam=c7e649e5c4

[keen tundra]

Try to ask in this channel #1347596231551225887 🙂

[ivory swallow]

thank you so much

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 3911)

[whole frigate]

Do you have to be in the US to enroll?

[tall frigate]

yes

[whole frigate]

😔

Tbh it seems to be a good choice rather doing masters in a physical uni

Cheaper too

[tall frigate]

Yes I think so too.

As long as you are a self starter and are comfortable with remote learning I think it's a great option.

Because you don't have a class schedule or anything which is good for some people bad for others, mainly younger people I think.

[fading panther]

Being a self starter is critical imo

[tall frigate]

absolutely agree

[warm hinge]

Hello friend, i searched for a free resume builder but all i found is that it is a google away, so i can give you a template 👇 (which i tried lately) and you can edit and add your info into it.

[whole frigate]

Yooo thanks a lot 🙏🏻🙏🏻

[serene umbra]

Gave +1 Rep to @charred knoll (current: #367 - 17)

[merry axle]

Thank you for the insight :)

[serene umbra]

Gave +1 Rep to @fading panther (current: #2739 - 1)

[dusk wedge]

For resumes i really like canva. Works in the website and has alot of templates

[static topaz]

I have no relevant work experience, a bootcamp, and a sec+. can I get hired as a basic IT tech?

[severe arch]

🚀 Hey everyone!

I'm new to cybersecurity and transitioning from healthcare. I wanted to ask—can I land a job in either offensive or defensive security just by learning from TryHackMe and getting a degree? Or should I also focus on certifications? Will TryHackMe teach me everything I need to know to get hired?

Would love to hear your thoughts and advice! Thanks in advance! 🔥

[onyx brook]

there are alot of factors that depends upon. First and foremost is the region you are from, after that stuff like
are you a student?
are you a recent graduate?
did you have any tech experience or background before?

The only thing of value that i can add is, If you have time to grind then yeah just THM can land you a job. Although it might be a really tough and long road.

[severe arch]

@onyx brook I start my first class for my IT degree in April. I started the pre security pathway on tryhackme yesterday. I retired from my first career. Im 39 and ready to embark on this journey. I have all the time in the world.

[sand wedge]

💯

[haughty patio]

Hello there. This is Serkan!
I'm an ex-maths teacher. Two years ago I had my first cert eJPT. Last month passed the PNPT & today I got my OSCP+

I need some suggestions to land on my first job. Since I was a maths teacher, I have never applied a CS related jobs. It'd be delightful to hear the advices. Thanks in advance!

[waxen vortex]

Hi

[rigid holly]

@haughty patio congratulations 🎉💥💥💥

[haughty patio]

Thank you so much! 😇

[serene umbra]

Gave +1 Rep to @rigid holly (current: #2739 - 1)

[rigid holly]

@haughty patio you are welcome looking forward to learn from you

[rapid valley]

who can help me w the tut vc?

[keen tundra]

#room-help 🙂

[obsidian robin]

Hello everyone, I’m a third-year cybersecurity student aiming for a SOC role. However, I’ve noticed that internship opportunities are quite limited. Would it be a good idea to start with a sysadmin role (related to hosting services), or should I wait for a SOC internship?

[obsidian robin]

Thank you for the advice, i have been thinking about that for couple of weeks now. Its just that infosec is such a large field that i didn't really know what to focus on half of the time, even thinking about starting as sysadmin and then maybe in the future i may changed my liking to devops for what ever the reason

[serene umbra]

Gave +1 Rep to @hallow sparrow (current: #56 - 160)

[gilded jasper]

I wanna ask, what are the websites that I can do for real penetration testing using my kali linux legally? Im so tired of doing courses..

[keen tundra]

https://tryhackme.com/

[gilded jasper]

other than tryhackme..

I mean the commitment is there for tryhackme but then I wanna do like on actual vulnerable legal websites

[keen tundra]

wdym by actual vulnerable legal websites ?

[gilded jasper]

Just other websites other than tryhackme

[keen tundra]

hack the box , burp academy ... 🙂

[gilded jasper]

does burp academy requires subscription?

[keen tundra]

no , it is free for the most part 🙂

[warm hinge]

Check out this website 👇 It's legit, and you can make real money from bounties, depending on how serious they are

[warm hinge]

https://hackerone.com/opportunities/all

[gilded jasper]

thanks

Also why is it so hard

Im just beginning to learn backk

some can get to 25k

[warm hinge]

That is the real pentesting environment if you are not familiar with it try tryhackme's king of the hill, hackthebox's vr machines

[warm hinge]

https://tryhackme.com/games/koth

[gilded jasper]

is koth a free one?

[warm hinge]

Yeah

It is free

Click the "join a public game" option

[warm hinge]

Hackthebox has 646 machines to play with

But it can be challenging

I hope I could help you

[gilded jasper]

[gilded jasper]

Yeah I cannot play korh

because Im not an intermediate or advanced

[keen tundra]

Just change it in your account settings 🙂

[gilded jasper]

can I play it alone?

[lean lion]

Hello guys, I am new to Ethical hacking field and i have my interest on offensive side.
Can someone please guide me on how should my approach be ( In what order should i do the courses )?

[vale falcon]

Do you have any exp in IT ?

[lean lion]

Currently i am pursuing BE in Computer science , so i would say i know the basics

[vale falcon]

then you can enroll the Jr Penetration tester learning path

and if you find it too hard you can always go back to "basics" learning path

[lean lion]

Thank you for your time sir.

[rotund pond]

could anybody

may refer as cyber security analyst

[tough furnace]

I applied for many cybersecurity internships but got rejected from all of them. I don't even know why. This is a sad and funny situation 💀

[tough furnace]

I'm curious about the reason for this.

[broken idol]

Have you asked for feedback?

[tough furnace]

not yet

my friends say there can only be one reason for this. It's the ATS system

[broken idol]

Could be, could also be manual.

[tough furnace]

Today, I would like to write an email to companies I rejected to ask for feedback.

I hope that maybe I would get some useful feedback haha

[polar hinge]

hey how can someone secure a remote junior soc analyst job? (as a person with 0 experience)

[vocal silo]

when you say zero experience, do you mean working in general, like right out of school, or just getting into the cyber field in general?

if you do have work experience, do you have any IT

[empty kite]

Hi, can anybody tell me if i get a job in offensive security as a beginner with no experience with only one degree in cyberinvestigation. I finished junior pentesting path and practiced for a month mostly easy challenge. What's my next step ? What job could i get if there is any ? What practical certification useful i could get without needing to be an expert ?

[wide mica]

@empty kite what degree do you have ?

[vestal solar]

Hey everyone, I’m aiming to land my first junior role in cybersecurity and would love any advice on where to start. I’m currently working through the SOC Level 1 path for more hands-on learning and would appreciate suggestions on other steps I can take. I also have the Qualys Certified Specialist and Google Cybersecurity Professional certifications. I'm looking forward to hearing from you all!

[gilded jasper]

Okay so far..I only have the basics down after 3 months of leaving cybersecurity to focus on school, So far I have known how to get ip addresses for websites and networks and how to scan for ports. What should I do next for web pentesting for beginners?

[keen tundra]

@cobalt escarp

[tight dew]

when colleges say they teacher computer science, or cybersecurity what does that mean, because some people have different meanings when saying those terms.

MIT college

[tight dew]

dam, srubz was just online

[cobalt escarp]

Hey please don’t advertise here

[tidal sedge]

hi

If one wanted to test a website’s defenses—purely academically, of course—where would they even start?

[keen tundra]

https://tryhackme.com/path/outline/cybersecurity101
Here 🙂

[tribal tangle]

Hello i just got my 1st ever job position: soc analyst i don't have cert or exp i only do THM and others but i have high rank in my local THM rank i think that is why i got offer Thanks for the journey ❤️

[keen tundra]

Congrats 🙂 🚀

[unreal temple]

Hey I've just start this course can anybody tell me it's real after this course we can get a job?

[rugged delta]

Well done, keep at it!

[tall frigate]

WOW congrats. I'm curious, what kind of questions did they ask you in the interview and did you feel prepared for them? I mean, you must've I presume because you got it, right?! XD

[empty kite]

it's a sort of attestation from college in cyberinvestigation, it is not a bachelor. I also did business management study at college and drop out but continued my study on my side, i have good business and finanacial knowledge with investigation knowledge and now i develop my cybersecurity skill like i said i can do some basic easy ctf. There must have a remote job possible for me with the skill/knowledge i have. I would like a startup where i could manage some hacker and investigator.

[tribal tangle]

I had 2 interviews 1st one was what u did and what u wanna do and most of technical question like how u will do when u see some alert example phishing and i think familiar with siem r big plus too like splunk elk stack etc 2nd interview had more advance technicao question and personal questions for preparing i did soc 1 from thm and junior analyst path from blue team lab that is all

[thorny bough]

Hey I've been specializing in red team modules for the past few months, and now I'm looking at planning for doing certs, what cert would you recommend for my first? The SAL1 looks more blue team than I hoped, but if it gets me through the door I'm happy to complete. I can't see any other certs on the TryHackMe.com website, and OSCP is too expensive for me to do rn. Any recommendations from someone who's been there would be great. I could just save up for OSCP since my main hacking OS is Kali.

[thorny bough]

im comfortable with most easy and medium level rooms, and can usually get through a hard room with concentrated effort

[bleak egret]

hello, would a 3year infosec/ it forensics degree on uni land me a job? or still need certs etc?

[thorny bough]

I also have a BA in communication and many years of linux experience

[dusky light]

At what percentage on TryHackME top users can I start highlighting that and it be a point in my favor?

[keen tundra]

I don't think it would be counted as an advantage on the job market

[golden spoke]

Do an internship during it and sure

Keep ur grades up and put something on your resume to show personal interest in the field

[dusky light]

Is it because TryHackMe doesn't have the notoriety it needs just yet in the job market or are there other reasons?

[golden spoke]

I know many ppl who have used tryhackme to help land security internships

Idk about jobs

[dusky light]

I did basically get my current internship in part because of efforts on TryHackMe as well as the diversity of projects on my tech blog

[keen tundra]

Well anybody can just copy/paste answers from writeups and quickly get in top 1-2-3% . It doesn't really prove anything.

[golden spoke]

Its still a plus

Much better than not having it

But yea if u dont want to waste your time then dont

[keen tundra]

Well it probably won't hurt anything but honestly I wouldn't include that number 🙂

[dusky light]

I agree that there are people that will consider that someone would do that but I am not sure if EVERY employer will think of that. I will add that I am aware that TryHackMe alone will not land me a job

[golden spoke]

i feel like it would depend on whos hiring

in the end if you can answer the interview questions its prob fine

i could see why u wouldnt put it though

[dusky light]

I agree, I do think that the interview will usually show weither I actually did the work or if I just copy/pasted answers to the rooms after looking them up

[golden spoke]

i have heard some ppl dont like the top % thing so to play it safe maybe u could just put what u learned there relating to the job

[undone shore]

Disagreed from the technical recruitment side. If I see a CV come through with the percentage on it for anyone other than an intern, it's a pretty good indicator that you've missed the point entirely.

For an internship or a junior role, in lieu of actual experience, putting stuff like the paths you've done is good. As you say, that gives us something to discuss in an interview.

Top x% tells me that:

1. You're in it for the points (which mean jack shit on a learning platform -- especially one where cheating is rampant), and
2. You don't understand that the system is extremely easy to game, and there are quite literally tens of thousands of people who can claim to be in the top 1%. Hell, I'm top 1% and I haven't done any THM in about 3 years. It's a meaningless statistic. If you put stock in it then it tells me that you're out of touch with that, which is not a good look.

So, yes, if you have no relevant real world experience, putting what you've learnt is good when applying for a very junior role or internship. Anything more advanced than that you'd be expected to have experience, in which case saying that you do THM as an extracurricular activity is great, but we don't need details.

[fading panther]

As someone who just graduated with a degree in cybersecurity but has no real world experience what section of the resume would you suggest putting paths in. I have been contemplating adding it to either projects or interests as I have not had much luck landing interviews (granted I've only been applying for two weeks at this point)

[broken idol]

THM paths?

Hobbies.

[undone shore]

Extra curricular activities, hobbies & interests, etc.

Just... Whatever you do... Do not put them in experience

[fading panther]

Yeah THM and HTB paths

[fading panther]

Yeah not a chance I was putting them in experience lol

[broken idol]

You'd be surprised at how many does

[fading panther]

@undone shore @broken idol thank you both very much. I appreciate it

[serene umbra]

Gave +1 Rep to @undone shore (current: #10 - 859)

[fossil rampart]

@undone shore Thanks for the insight, just passing by

[serene umbra]

Gave +1 Rep to @undone shore (current: #10 - 860)

[severe arch]

Hey everyone! I'm new to IT with no prior experience, and I'm currently learning cybersecurity through TryHackMe. I'm wondering if I should start with a help desk role to gain foundational IT experience, or if there are entry-level cybersecurity positions I could aim for directly. Any advice or recommendations would be greatly appreciated!

[fringe spade]

Hi! Helpdesk will be definitely easier to get into, cybersecurity roles (even internships) often require some IT experience

[thorny bough]

look im in the top 1% of offsec, came to tryhackme after doing some hackthebox. skipped a lot of the pre amble for red team fundamentals

had a productive month

Ive been deploying raspotify linux servers for speaker systems for a while

i started learning with a RBPI 3b board

I always did this stuff because i loved it, not just to be paid

heres my cv. I have signal installed if someone wants to contact me

[broken idol]

I think it's best you post screenshots, people won't download your pdf.

[thorny bough]

but thats where the best malware hides 🙂

[brittle pier]

Don’t think that helps your case

[thorny bough]

its a joke

[broken idol]

If I scan this and it reveals malware I'm going to ban you.

Don't makes jokes like that in this server, illegal and blackhat activities have zero tolerance.

[thorny bough]

i have video links in it

im good if you looked

there

thats the pdf

happy, just trying to lighten the mood

but now no links to portfolio

pick your poison, zero trust, or some trust

[broken idol]

The joke used to lighten the mode, is the sort of activaty the could get this server deleted, that's why we have zero tolerance towards them, and not much more towards jokes.

[thorny bough]

zero tolerance towards jokes? yikes,

[broken idol]

No, black hat/illegal jokes.

Please don't take what I say, and make your own narrative of it.

[thorny bough]

https://tenor.com/view/piracy-download-a-car-piracy-its-a-crime-download-a-handbag-download-a-computer-gif-17133478

so accept your narrative at face value?

sounds fascist

if you read that right it says i was unionized

[broken idol]

Don't makes jokes like that in this server, illegal and blackhat activities have zero tolerance.

I mean, It's said here...

I didn't say "don't make jokes", I said "don't make jokes like that".

Now that's clarified, somebody will help you soon on your resume. 🙂

[thorny bough]

a joke about malware is not black hat, how the hell do you diagnose anything

its a regular part of netizen life

[broken idol]

A joke about hiding malware in pdf for a user to download, is blackhat, as it promotes the practices.

now we really don't need to fill up the channel with arguments, and I won't discuss any further in here.

All I've asked, like I do with everyone else who makes these sort of jokes, to stop it, and don't.

[thorny bough]

you insinuated i was peddling malware

thats not a nice intro

hello scrubz im jradx or Jared

[broken idol]

but thats where the best malware hides

Sorry, you're joke gave that impression.

[thorny bough]

i said the joke after, check logs

is this the interview?

[broken idol]

Interview for what?

Which area would you like a job?

[thorny bough]

@broken idol Red Teaming, OFFSec

[broken idol]

Are you ok with airing your PPI in here?

People often hide it.

[thorny bough]

Im not firing myself

[thorny bough]

its the careers channel

if im going to do this im going to be public about it

I contact cyber twitter friends all the time, with my legal name

im a open fucking book

unorthodox but truthful

[merry axle]

Spicy chat

[thorny bough]

is that too black hat

[stone brook]

Please stop guys. This server is not for arguments. Please go private or DMs

[fresh vapor]

no micromodding 🤓

[thorny bough]

Future reference. Saying Hello im restricting your speech as an introduction usually doesnt go well

[muted terrace]

https://tenor.com/view/dramatic-gif-26532302

[vagrant solstice]

Hello guys am Newton from Kenya
Just completed my underrgraduate in IT and want to specialize in cyber security and Ethical hacking

[nimble elbow]

Hey everyone,

I am high school CS, Science, Math teacher and I have been promoting the field of Cyber Security to my students for a few years now. This year it hit me that maybe I should switch into it myself. I am 36, so not too old but not too young.

I have been working on getting my A+, network+ and security+ certs. Unfortunately my degree is in Kinesiology with only a few courses in computer science (enough to teach it).
This summer I was going to try to find a job in a remote IT help desk to get some job experience on my resume.

I was wondering if other people switched into the cybersecurity as a second career and how did they find the transition. What worked and what should be avoided.

[gilded jasper]

Hey are there any best ways for me to revise my cybersecurity knowledge on like notes or something? Because Im not on my laptop all the time and I wish for notes that can be opened on my phone anytime

[keen tundra]

Hello Newton , congrats on your achievement 🙂

[keen tundra]

A lot of people are recommending notion for taking notes

[gilded jasper]

how am I gonna take notes with notion?

[warm hinge]

Notion has a subscription but i think it's worth it, because it has its own A.I so you can ask it to quiz you and motivate you to achieve goals when feels burn out 😀

Whithout copying all of your notes to another ai provider and make it to quiz you

Theres can be done i a single window

[gilded jasper]

yeah…no

[warm hinge]

Ohh… that is expensive sirr

[gilded jasper]

expensive yes

[dapper depot]

Im happy to chat. May I dm?

[drowsy wharf]

hey anyone is preparing for ceh practical exam?

[broken idol]

This, also applies to you. 😄

[junior oar]

hello everyone. i have a question regarding SAL1 cert. this might be a dumb question but is SAL1 cert accepted by employers worldwide? i live in EU and want to see when in am done with the soc pathway and made the SAL1 test, the employers would actually consider it.

[fickle grove]

It is relatively new so only a handful of employers would recognise or consider it.

[junior oar]

but the SOC pathway does teach everything that an junior SOC analyst position requires? Right?

[fickle grove]

As a baseline, yes. However, do note that each organisation may be implementing their tooling or defining their job description or process differently from other organisations so no two implementations will be the same.

[junior oar]

Sorry. but what do you mean by "However, do note that each organisation may be implementing their tooling or defining their process differently from other organisations so no two implementations will be the same."?

[fickle grove]

In here, you mentioned 'everything'. That is why I am qualifying it that while the intent of the certification and learning path is to teach you the basics and prepare you on the job, there might still be stuff you need to learn once you've landed the role.

[junior oar]

Ok. Thanks for the information

[serene umbra]

Gave +1 Rep to @fickle grove (current: #12 - 784)

[tacit saffron]

ayo i'm confused between hacking and ai machine learning i wnat to make money as well as enjoy programming like ai but i'm confused what to choose ai or hacking so if i want three votes 1: hacking 2: AI

[rugged delta]

They're both admirable directions, and over time you might enjoy combining the two. Both are complex and challenging pursuits so I would recommend you start out dipping your toes a little in each to find out what draws you more

[vagrant solstice]

Thanks Now I want to grow my skills in cyber security
Was hoping for a professional view on how to join the cyber security market

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 4004)

[rugged delta]

The best thing you csan do is #start-here to get plenty of practice and see the range of skills yoiu'll need to grow and develop. There are hundreds of walkthroughs and challenges, forming Learning Paths, , Modules and other objectives to learn and experience cybersecurity in a safe and ethical way

[languid prism]

Just out of curiosity, how can one get their foot in the door for cybersecurity without any certifications? I have over 25 years of experience in IT, but no certifications.

[rugged delta]

You can show your experience in security skills through the systems you've been supporting, e.g. operating systems, firewalls, Active Directory, Identity and Access Management, etc. You can develop an understanding of the security environment through Try Hack Me, and reading books/doing courses like Security+ or the many books from publishers like O'Reilly, Wiley, Sybex, No Starch Press and others. Cybersecurity is a broad range of discussion, but you might enjoy learning about things like the SOC, penetration testing, etc., through practicing in the various rooms in THM.

I'd sugest checking out the Tribe of Hackers books by Marcus J. Carey. If you check out the Darknet Diaries podcast episode 83 there's a discussion with Marcus
https://darknetdiaries.com/episode/83/
or
https://www.youtube.com/watch?v=JemCG7y_2kc

[languid prism]

Thanks for the information! I am saving it now to check it out.

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 476)

[tranquil robin]

Hi Guys, I’m Jonny 28 year old and I come Italy, I just finished my high school diploma in computer science and I want to start my Career as an ethical Hacker/ Penetration Test, I was looking for advice from you more experienced in this field, would it be better to start a university study in computer security or study on your own and obtain the certifications needed to work such as COMPTIA Security + etc? Thank you very much guys for your advice 🙏

[vague scaffold]

Hello! I would like some advice from more professional fellas.

Tl;dr I work as an NSA for an MSSP that actually does Network Security Engineer (I think) tasks. While I have learned plenty, feel like job hasn't really taught me what it is to be an NSA and don't know how to move forward.

I've been having concerns about my current job and moving forward.

I don't really have any previous experience in the field, professionally, except a bachelor's degree. It may sound weird for many of you, but I work at an MSSP as a NSA, luckily they were willing to take me in at the time, even though I knew so little. I'm not putting myself down, the standards for hiring are just that low here.

Thing is, this job feels more like a Network Security Engineer... I've taken on some SOC rooms in TryHackMe and its very different from what I do now. I learned a lot at this job anyways, still and always am but it may be time to change things.

I would like to change to another role in Cybersecurity, but I'm afraid this job hasn't really taught me what is to be an NSA and I will potentially fail interviews or jobs for NSA.

I look forward to any help

[cursive pendant]

Does pentesting job required social engineering skills ?
or it's just a redteamer skill

[fringe spade]

Most often in pentesting you won’t have to use social engineering, but sometimes you might be asked to perform a phishing campaign, then those skills might help.

[cursive pendant]

interesting ! thank you

[serene umbra]

Gave +1 Rep to @fringe spade (current: #292 - 23)

[static topaz]

VC anyone? career talk?

[queen osprey]

Hey all, I had a question. I'm French and here we rely a lot on school diplomas. Is it true that in the United States they prefer certifications?

[golden spoke]

they prefer high school diplomas

[cyan fern]

Does THM offer internships?

[queen osprey]

really??? here we are told the opposite

[golden spoke]

maybe ur high school is different? in the US its 4 years and when they graduate they get a hs diploma

[queen osprey]

Yes, it's the same, weird

[mint cloud]

Hi guys, what digital forensics courses do you recommend? I'm looking for the ones with a practical approach and not just theory.

[keen tundra]

There's not a course yet but there're many digital forensics room released on THM recently 🙂

[whole frigate]

Guys i finally got a job😭😭

No more malding on this channel anymore

[hearty tide]

Congratulations 🎊 bro

[whole frigate]

🙏🏻

LinkedIn really works

I almost lost hope

[keen tundra]

Congrats 🥳 🚀 . I'm so happy and glad to hear this .

[hearty tide]

Hey guys ,I got a question is possible for me to get any cybersecurity job without a engineering degree or any other degree

[whole frigate]

Thanks alot @keen tundra

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 4028)

[whole frigate]

Chances are there, what matters is your skills and your projects

Some companies do require a basic degree for filtering but there are opportunities out there that dont.

It depends on where you are situated

[hearty tide]

What kind of skill and project

[lone plume]

After i get the ejpt cert which would be the next best step? Oscp to get a job?

[fading panther]

Congrats.

[dry acorn]

crtp

[tidal panther]

Nice work brother, congrats! You studied something related to IT and got the first job or coming from somewhere else?

[whole frigate]

I studied compsci but got job related to support

[tidal panther]

Very cool👍🏼

[lone plume]

Is crtp gonna help me get a job tho? I thought ejpt already had red teaming too in AD?

[dry acorn]

it will help u land a good package

and is cheap too

[lone plume]

So i should go for that after ejpt? I thought they covered the same things with ejpt being a little more ?

[dry acorn]

yea ejpt is good too

look for industry req in your country

[lone plume]

Mostly what i see is oscp yk the basic

[dry acorn]

oscp is not basic bro

[lone plume]

I havent really seen ejpt or crtp i think but i want to get those to get better so i can tackle oscp

I mean basic as in the basic requirement for alot of jobs yk

[dry acorn]

OSCP best to solve HTB live boxes by yourself first

if u can do that then go for it

[lone plume]

I wanna go do that after getting my ejpt yeah

[dry acorn]

also do AD my friend just gave OSCP it had 40% AD

[lone plume]

But is it worth getting the crtp? Or should i jist practice for oscp?

Oh fr

I might aswell do crtp then since its AD focused

[dry acorn]

yes

[lone plume]

Alright i'll do that then thank you

[dry acorn]

sure

[lone plume]

Did ur friend pass? @dry acorn

[dry acorn]

yes both OSCP and OSCP+

he is hreat

great*

[wintry mesa]

can you share some projects and stuff of yours?

to enlighten us

[whole frigate]

Um sure

[lone plume]

Damn nice didnt they have oscp+ in the oscp exam now?

And btw what else did he gey alot cause 40% AD is alot

[dry acorn]

Web i guess

[wintry mesa]

i have some doubt guys.
I am a student and will be 20 this year. I really like cybersecurity and want to get a job in this field. I don't have much knowledge and so far everything I've learned is from self-experience. These days i am doing CTFs to get some knowledge but i want to do something which actually is future proof like cybersecurity engineer or something like that. Can any of you guide what should I do and learn for? (for example learn about this stuff or go for this certificate which may help) I really don't have much knowledge on how to land on a job. Your feedback will be appreciated

[whole frigate]

These are some, i did during my coursework and group projects

I had some Aws experience as well so i did some cloud projects as well

[wintry mesa]

thank you so much i will save it

[serene umbra]

Gave +1 Rep to @whole frigate (current: #822 - 6)

[whole frigate]

Sure not the only ones but if it helps you get you an idea

[wintry mesa]

yes! it did help in getting an idea

[lone plume]

Ah okey i heard that yeah

[dry acorn]

he said AD was very easy though

[lone plume]

i got little exp with AD tho so i think i'll try to do crtp first

[warm hinge]

Try to find what are the jobs in the cybersecurity in whole (red teaming, blue teaming)then understand each job's aspects and choose your desired job role. After all of this, make a roadmap, and start form the beginning make a solid foundations in networking, basic programing knowledge in (Python,javascript,html,sql,) shell scripting (bash,powershell), linux,hardwares etc. I believe jobs in cybersecurity are mostly future proof so find what you like and pursue what sparks you where you can be confident,contributed.

And continue learning… 😀

[wintry mesa]

thank you so much! really appreciated

[serene umbra]

Gave +1 Rep to @charred knoll (current: #348 - 18)

[warm hinge]

Happy to help you

[wintry mesa]

i've learned about various topics and stuff, right now i am at novice-intermediate level and want to know what factors can secure a good job? Is it a certification or projects? or achievements?

[warm hinge]

If you are new to IT then a bachelors degree or a entry level certificate can be helpful, keep in mind that cybersecurity is not an entry level job

IT helpdesk is one of the entry level jobs out there after helpdesk SOC analyst can be a entry level cybersecurity job to break into

[wintry mesa]

i am not really new to IT i am pursuing bachelors in computer applications (basically computer science)

ive good knowledge related to programming and coding. Not really expert but yea ive developed some games and programs (just for fun they aren't that bigshot)

[warm hinge]

By completing a degree or getting a cert doesn't guarantee a job but skill and true passion can be driving force to get one

These factors can only be a plus to get pass the hr door 🚪

[wintry mesa]

I see

[wintry mesa]

That makes sense but what's something that makes first impression on HR?

[warm hinge]

Start from helpdesk

[flat sedge]

HR doesn't care about impressions, they are about the keywords for the job that the hiring manager tells them

[wintry mesa]

I see

[flat sedge]

For entry level, attitude is more important than knowledge; you aren't expected to know things until you get past the junior level. Every role is going to be different though, entry level developer has a higher knowledge barrier than entry level help desk

Usually. Help desk for some companies is extremely technical, but that's relatively rare.

[dry acorn]

Sure

[wintry mesa]

Thanks that makes sense

[serene umbra]

Gave +1 Rep to @flat sedge (current: #11 - 824)

[distant pier]

Being timely and accurate in your communication with a recruiter.

[wintry mesa]

I see thanks

[serene umbra]

Gave +1 Rep to @distant pier (current: #19 - 518)

[wintry mesa]

all feedbacks are very unique and helpful

[urban void]

one of the best what i read today trully certf doesnt mean anything but skills hell yeah

[harsh anvil]

Hey guys, I need some advice from the UK based people 🙂
I have a Bachelor's degree in Comuper Engineering and have been working as a Cyber Security Analyst for a year and a half now. I am planning on moving to the UK so I'm wondering how hard would it be for a foreigner to land a job in Cyber Security there? Also as an EU citizen, is it possible to work remotely for an EU based company and live in the UK? I am open for all options so if anyone has some personal experience or anything you can DM me or just share here in case someone else might be having the same questions 🙂

[plain vector]

Hi I think to live in the UK and working remote for an EU based company is possible 50% - %50 bc most of the time at least it needs to be hybrid work in order to live there.

[broken idol]

Depends on the company, TryHackMe are 100% remote.

[subtle raptor]

Hello everyone! I'm slowley picking up skills from THM, but I'm going try to start working in bug bountries soon. Any tips/advice on how to get started?

[keen tundra]

Try to ask in #bug-bounty channel 🙂

[subtle raptor]

Thank you! I'll check it out now.

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 4037)

[harsh anvil]

So it could work if I find a fully remote company, but that leaves a visa problem then I guess. Since the UK doesn't have a digital nomad visa?
I wouldn't like to spam too much here though since the topic might not completely align with the channel so if anyone has any info on the topic you can DM me 🙂

[dusky storm]

Hello, fellas..
I don´t know if should put it here (correct me if there´s a better channel to send doubts)

So i´ll try to be straight as i can:
I´m a major in IT but have little to no experience in the area.
I´m learning only now to code, but barely got past tutorial hell in python.

I´m focusing on python as a language and doing CISCO and TryhackMe pathways to learn more about cybersec.

My main concerns, and i believe it´s the same for all beginners is:

• Should i try to first get a job programming and then migrate into cybersec? (it´s currently part of my plan since i don´t have funds to finance the certifications)

• A friend of mine tipped that the best way to get really good, really fast at programing is to do projects head on, in this case should i do projects focused to cybersecurity or just focus in landing a job programming for webdev/Cloud?

OR

Should i focus immediately on the path i want (SOC for example, and how would i do that?)?

[rugged delta]

You've got the right attitude and direction. I know certifications can be expensive, but they can be something you progress to. And while they can be a stated requirement or something a potential employer desires, the goal of learning the content for a certification should be learning how to apply the concepts for whatever organisations you'd like to work for. It's also good to make it a hobby, and something you do for fun, out of habit (through repetition and exploration) and for the fun of the challenge.

You will eventually get there with the certifications, but as long as your intentions are to be better each day, to learn new things, to practice, to play; you're making progress in the right direction. It's important to have a good base of knowledge on things like networks, operating systems (some Linux and Windows admin stuff), coding (such as the Python you've been doing), and achieving the goals you've set. It's important to make progress, it's also important to take notes, get practice, and give yourself a break.

And yes, as for a job, many people will begin in roles in everything from programming or IT, or even helpdesk or tech support or QA and pursue the skills you need to be great at them. If you enjoy making learning a part of your daily processes and routines, if you get a kick out of breaking things and figuring out how to fix them, then you'll do fine. Make lots of mistakes, take lots of notes, learn from the things that don't do what you expected. And yes, certifications will benefit you, but other activities like progress in THM, your other courses, eventually trying things like CTFs, making a blog, having a home lab; can all benefit you

[dusky storm]

thanks man, that´s insightful

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 477)

[rugged delta]

There's a lot of information for you to juggle when pursuing something like cybersecurity. It's important to dedicate yourself to your goals, but take your time. Certifications are frequently a requirement by some organisations, but training/certification should be their responsibility/expense in most cases. The thing is, you need to demonstrate to them that you have the skills they require, so you may need to fork out for some level of training/certification yourself to get recognised, or to meet their requirements to demonstrate that you've learned certain things.

And frequently, the certification is a stepping stone, or one of many. Being active in your learning, taking advantage of things like the daily streaks or certificates from the learning paths on THM, the little indicators of progress when you're getting flags, completing rooms, doing lessons on your Cisco course and completing chapters, etc... One step at a time and you'll see it add up

[chrome spire]

Preciate ur msgs

[dusky storm]

much obliged man

ty

[plain vector]

I mean the law of the country

[broken idol]

Ah it didn't work.

[runic blade]

how do i connect with people in cyber industry as a cyber student?

[rugged delta]

You can verify here to chat with the community. They will be happy to discuss anyting you're curious about

https://help.tryhackme.com/en/articles/6495858-discord-how-do-i-verify-my-tryhackme-account

[runic blade]

oh i thought i had an account already

[rugged delta]

Your account on THM has a code you can use to verify with the Discord

[runic blade]

ohhh Okay i was looking for the token on discord lol

did i do it?

[rugged delta]

Yes, you're verified, welcome to the Discord

[runic blade]

sweet

recommended channel to make connections?

mentor wise, path wise

[rugged delta]

#1347596231551225887 if you would like to join a team for the Hackfinity challenge.
Each of the paths has their own channels, and if you're stuck with any of the rooms, there are channels on the list for room help and hints, as well as special channels for a lot of the site features, so dig in and have fun

[runic blade]

bet thx

[spare canyon]

Apologies if this is the wrong channel but could any cyber professionals speak to whether a networking class or cloud computing class would be more beneficial to take in terms of getting hired? I’m trying to choose the last elective for my degree.

[carmine sandal]

Question. Say you are starting from the VERY Start basically. To Get into Cyber Sec How long would you estimate if say everything goes perfectly right, Like you do training/certs > Help desk > Specific job in Cyber

Okay for the sake of simplicity Lets say, Incident Response

Just casue thats what ive been reccomended from the aptitude tests off 3 sites xD

Geographical Is Australia.

Cool thank you 🙂 Just cause yeah had a start on THM a year ago gotr stopped due to life stuff and now back to getting into cyber so Hopefully ill be able to do some stuff. Helpdesk realistically that hard to get into or just like a retail esc level of ease to get

Ohhh Thats why the Cert is there. Been wondering and asking about that and no one really gave me a clear answer lol

Thats fair. I am starter basically So i'll probs just go through the roadmap on THM and then go from there i guess, once finish that do the certs

True. And then atleast even if i fail and they do say hey look will give you a shot A. cool got a job but also B. if extra lucky they might front up for the cert lol

Interesting. Yeah cause i know for a fact my brains like Oh no i have to go Fast to make up for lost time but yeah that kinda also just reinforces that idea of. Take it slow, Make sure i understand everything and to take notes

yeah valid. Look either way commitment is fine on my end been in the same job basically for 8 years through 2 different places of the some company lmfao

albeit god i cant stand my job anymore lmfao people just are bleh xD

[pastel plank]

hello, looking to transition into cyber sec from a software development career (5+ years) ... any particular order for certs to go for? any other advice is also greatly appreciated

[tall frigate]

given your experience you might be able to get an interview with some SIEM projects and certs from THM. The certs my school programs offers me is A+, Net+, Sec+, CySA+, and Pentest+, but if you have that experience in software development you don't need all that imo. I'm presuming you want a SOC analyst role?

[hybrid egret]

Quick advice I’m net THM haven’t used any other resources started this one recently shall I smash all the labs before I progress to something else I’m a noob btw

[hot bear]

Hello ,
I recently switched majors from general cs to focusing more on cybersecurity, however the class load now projects me graduating by 2029. I’ve been doing school part time for about 5 years now and working full time. Does anyone have any recommendations on what to do to speed up my process so I can begin working in the field? Is there any certificate that would allow me to begin entry level work?

[modest mauve]

Does the SAL 1 cert help in any way towards the CySA+ cert? TIA

[keen tundra]

Complete Cyber101 path before moving to challenges 🙂
https://tryhackme.com/path/outline/cybersecurity101

[vagrant warren]

Sorry to bother you. Is there a thread that covers the must have certs to get a look in a jobs for newbies? I see some jobs posted want no end of experience and certs for a pretty low wage. That said in my many deep and meaningful career discussions with ChatGPT, they seem to be under the impression I could smash out CompTIA Sec+ and walk into a Junior Pen Tester Role or take the ISO27001 Lead Auditor training and exam and using my historical experience and that cert to move into a GRC role. Is there somewhere on this area that answers what are probably painful questions for those of you who have lived and breathed cyber for a while?

[keen tundra]

Well yeah Sec+ is one of the most recognized certs. in the industry but I don't think you necessarily needs certs. especially on the beginning of your journey . I don't feel that competent to give career advice but please wait a bit , somebody with more experience will soon answer to your question 🙂 .

[hidden sleet]

Good

[chrome spire]

Hows the job market

[whole frigate]

Networking hundred percent, its the very foundation. See if you can do some project or something to get a deep understanding of protocols and try to work with small office routers and server rack just to get an understanding, cloud computing is a great elective too but networking is like 1, then cloud

[nocturne yacht]

hey, I have programming experience and I'm interested in cybersecurity. so I'd appreciate any advice, how is the job market? how long does it generally take for someone putting the hours learning, to hit an entry job ?

[shut zinc]

Is the comptia pentest+ a certification for learning or for impressing hiring managers?

[pastel plank]

ya I'm thinking SOC analyst would be the best way to get my foot in the door while getting some more training/experience... I think ultimately I'd want to do pentesting

[radiant cave]

Honestly I think having as many as you can impresses hiring managers, as long as you can retain the knowledge and skills gained.

It really depends on the position you are seeking

Pentest is specific so if you want a pentest job then it’d be beneficial

[flat sedge]

it fills a niche. What it does for the company, is a demonstration of competency and expertise to fulfill compliance and business requirements. Most managers will not care about certifications you hold especially early in your career.

It can actually present a negative view to managers, if you have a lot of certs and not a lot of experience.

[radiant cave]

^ Good point as well, try finding startups. Demonstrating your knowledge is also key so find pentest projects you can add to a portfolio

[flat sedge]

How would you add a pentest project to a portfolio?

[radiant cave]

Videos/documentation

Say you score a bunch of bug bounty's around vulnerabilities, you can record or document the process. Adding that shows you understand how to do the job you're applying for, you'll still be tested but still.

[golden spoke]

the basic comptia ones will prob give u a chance to get into an entry role

but honestly im not sure if they do much beyond that

[radiant cave]

Well the only way to truly answer that statement is to question the people who read applications for cs jobs

[golden spoke]

like i feel like they matter very little past your first job

unless its a slightly more advanced one

like ccna for ex

[radiant cave]

Well they show that you are continuing to learn, and grow which is what most companies want

[golden spoke]

like ik for comptia a+ once u get that help desk experience its pretty useless

and for comptia network+ u might as well get ccna after first job which is better

[radiant cave]

Nobody really knows if the amount of certificates you have impact your first job, except for the people hiring you.

I think a lot of people focus on certs and experience but if you dont have the personality the company is looking for then

[golden spoke]

both are important yea

need to interview prep

[radiant cave]

https://interviewsby.ai/

[golden spoke]

nah

i just mean that interview prep is important

i personally just used the practice video recording ones

[flat sedge]

Pentest and bug bounty are about 70% similar. I would be very hesitant to recommend a bug bounty portfolio to someone looking to get into pentest. Also the bug bounty NDA may actually mean that the candidate may not be allowed to disclose or discuss those findings with anyone who isn't their contact with the program.

[flat sedge]

Entry to IT - entry level to security is going to be much more dependent on the org and what their actual requirements are. Some are much, much stricter than no experience and Sec+.

[radiant cave]

And remember you dont always have to check all the listed requirements

[golden spoke]

yea they only give u a chance

and i heard security is not a beginner field as well

im sure SOC analyst is beginner friendly

thats the only one i know

[radiant cave]

Well, this image is going to be a bit contradictory to the 'break into cs' discussion but still makes a great point.

Comparative to other common tech fields

[chrome spire]

You think cybersec salaries will increase in the coming years?

[radiant cave]

grok says yes

here ya go

[fringe spade]

Yes, especially in Europe due to multiple regulatory requirements

[trail tartan]

Hlo everyone!
I'm new to this sector can any one tell me is this good for future means is there much scope with good amount of salary??

[kindred prairie]

I am currently pursuing the CompTIA A+ certification and plan to follow it up with Network+ and Security+. Additionally, I am considering learning Python to strengthen my programming skills (which have long faded since community college). My goal is to secure an entry-level IT position while continuing to build my expertise. After completing the CompTIA certifications, I intend to focus on hands-on learning platforms like TryHackMe and HackTheBox, as well as preparing for the OSCP (Offensive Security Certified Professional) certification.
Does this sound like a solid path for someone aspiring to become a red team cybersecurity professional?

[clear owl]

Hi, I'm holding 2.5 years of experience as cyber security engineer, currently looking for new opportunities. It would be gratefull if anyone could provide any reference for any current open positions. I have worked in Anti-phishing, Anti-spam and Threat Hunting projects, I have CEH certification from EC-Council, Currently preparing to get SOC and ComptIA Security+ certifications.

[keen tundra]

Try to check out #jobs-board 🙂

[clear owl]

Thankyou🙂

[chrome spire]

W grok

[chrome spire]

Yea but id skip the A+ if you have a good grasp of how computers work tbh. If you can build a pc and repair em I would just skip to network+ its way more relevant and cheaper and arguably easier. Others might disagree with me tho

But if your up for the challenge def go for the ccna instead

[tall frigate]

are you taking the certifications through a university or independently?

[nocturne yacht]

Hi ! , I'm interested in cybersecurity but what turned out from my search, is that cybersecurity isn't an entry job and the best way to pursue it, is by starting from an IT help desk or similar positions.
so my question now, how can maximize the chance of hitting that goal ( mainly remotely or getting a visa ) so I can work while learning more in cybersecurity and being able to afford certifications and get experience at the same time

[rugged delta]

Yes it's true that a lot of people in the industry spend a while starting in jobs like help desk or tech support or another area of IT as they progress. You would be expected to learn a lot of IT-based skills, such as Windows/Linux administration, perhaps some coding (with perhaps Bash or Python to start), and how networks operate. You can learn a lot of these skills through THM as you progress, and build up your cybersecurity knowledge as you go. As you gain skills and confidence, you can pursue certifications related to the areas you wish to work in.

Most people entering cybersec would start in a SOC, after acquiring the necessary skills. The THM SOC Level 1 and 2 paths on THM provide a good introduction to the skills you'll need. Certifications like the new SAL1 from THM, the BTL1, etc., can be beneficial in demonstrating your skills. You should look at roles in the places you would like to work and see what qualifications they're requesting for particular roles. Cybersecurity requires a broad range of skills and hopefully you'll develop them here as you progress

[nocturne yacht]

thanks, this helps a lot

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 482)

[tranquil sparrow]

Good evening. Just a random beginner seeking some tips or guidance.

I have almost finished the JR penetration tester path on THM. Of course with all previous paths for networking and pre security, yet i feel totally lost and i need to get started with bug hunting soon.

Question is: do i really need to master a programming language to begin with? If yes, what's the best language to boost my start.

And i didn't go to any tech university, is there any background that i need to learn besides the THM path? Like cs50 or something or am i good to go?

Thanks in advance.

[hardy harbor]

Hey everyone. Looking for some career advice here. A pentest company is offering an opportunity to join their team with the condition that I need to complete one of the following certs by EOY: OSCP, eCPPT or CPTS.
What would you suggest, in terms on time, cost and difficulty, considering that I have little to none experience in Pentest.

[worldly whale]

Are they paying?

[hardy harbor]

If passed. But what would be the best choice, for both scenarios, if they don't or if they do.

[worldly whale]

Oscp, will be best if you ever decide to switch jobs

Cpts is good knowledge wise

And eCPPT is pretty shit nowadays

[hardy harbor]

Thank you for answering. 👍

[serene umbra]

Gave +1 Rep to @worldly whale (current: #824 - 6)

[rapid pecan]

can i get job in this without any certification

[worldly whale]

In theory

[fringe spade]

eCPPT is indeed really really bad, I attempted the exam, the environment didn’t work not once, but twice and I just gave up…

[kindred prairie]

Independently

[tall frigate]

Do you have a bachelors degree & are you in the US?

[kindred prairie]

No. I have an associates and I am in the US.

[tall frigate]

I highly, highly, recommend you look into the cybersecurity program at WGU. Im enrolled, have completed much of the coursework (A+, Net+, Sec+ certified, they pay for 2 vouchers per exam and you get access to certmaster which is like half the cost of 6months of WGU tuition if you were to go through compTIA) and have landed a job in networking.

[kindred prairie]

Thanks. I’ll look into it.

[serene umbra]

Gave +1 Rep to @tall frigate (current: #257 - 28)

[tall frigate]

My pleasure, feel free to add me if you want to discuss it further.

[tranquil sparrow]

Anyone. Please 🥲

[fringe spade]

Hi, in cybersecurity/pentesting having deep programming knowledge is not really a requirement, although having some basic programming skills, like the ability to read and debug code is definitely mandatory, but you don't have to be able to write advanced programs.

[fading panther]

I also just graduated from WGU's cybersecurity program. The certmaster material is dense and not the easiest to follow sometimes imo but they also give access to udemy training as well as a couple of different books to review from

[kindred prairie]

Awesome, thanks for sharing

[serene umbra]

Gave +1 Rep to @fading panther (current: #1811 - 2)

[fading panther]

No problem, I'm also available to DM if you have any other questions

[tranquil sparrow]

Thanks! So which programming language would be most beneficial for me as i want to begin bug hunting?

I had some telling me i have to study php and MySQL. But i can't confirm nor deny

[serene umbra]

Gave +1 Rep to @fringe spade (current: #288 - 24)

[fringe spade]

No problem 🙂 Bug hunting as in web applications? Then definitely JavaScript, Python, SQL and PHP would cover most of the stuff. If I were you I’d start out with Python, easiest to learn and can help you automate a lot of task.

Also, remember that bug bounty hunting is really competitive and it’s hard to make a living out of this.

[tranquil sparrow]

And i need only the basics of those. Not to go too deep in there.

Last question as i am not so familiar with programming: when to know where to stop? What's a good point in programming?

I know it's hard, i just need to start then i will proceed to get a job or even oscp. I am just trying to shoot my first shot yk.

[empty sigil]

Hey everyone!

My name is Juan Rendón, and I’m an Ecuadorian cybersecurity professional currently based in Seattle, WA. I recently completed my Cybersecurity Technologist degree, earned the Google Cybersecurity Certificate, and I’m now working towards the Security+ certification.

Before transitioning into tech, I spent over a decade in public administration as an analyst and assistant, managing compliance, documentation, and operational processes. Moving to the U.S. pushed me to adapt quickly, working in high-paced hospitality roles in New York City and later relocating to the Seattle area.

Now, I’m actively looking for my first opportunity in tech, ideally in cybersecurity, SOC analysis.

I’m passionate about security, problem-solving, and continuous learning, and I’m here to connect, learn, and contribute to the community. If you have any advice, job leads, or just want to chat about cybersecurity, feel free to reach out!

Looking forward to engaging with you all!

[keen tundra]

JS and python 🙂

[tranquil sparrow]

Thank you for your advice. But the question still is the same: when to know where to stop? I will be learning python first as everyone is recommending it. But i am not a fan of programming, so i wanna know what's a good point to stop programming and keep focusing on other aspects of pentesting.

Like, is learning oop enough? Also, is there a specific resource you would suggest or should i just do my typical googling 😅

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 4102)

[keen tundra]

codeCademy and freeCodeCamp on YT are great resources for beginning 🙂

[tranquil sparrow]

I see. Thanks for your time. I will begin and worry about stopping later 😅.

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 4105)

[warm hinge]

I am wondering if my experience might help people here

I would love to help people remove barriers

I feel that I am experienced yet, that also comes with some jaded behaviour, so am willing to listen also

a two way street 😄

[lone plume]

anyone here done cpts?

[left hatch]

Hey Guys anyone here got knowledge about CTF's, if yes Can you guide me right now to setup and practice for CTF's in TryHackme

[rugged delta]

You can go to #start-here to learn about how to get started, verify your THM account with Discord, etc. You can use the AttackBox to partake in challenges/walkthroughs and other content. You are also encouraged to install a penetration testing distro such as Kali Linux using a Virtual Machine, like VirtualBox

[mystic cosmos]

Hey everyone!
I wanted to share a bit about my journey and get some advice from those who’ve been in the field longer.

I’m currently working in a NOC role, but I’ve realized that it’s not what I truly enjoy. I’m more passionate about network engineering and security, so I’ve been grinding on my own—studying CCNP ENCOR, doing labs on Cisco DevNet Sandbox, and practicing Linux.

The challenge I’m facing is that I don’t have mentorship or hands-on experience in engineering tasks, and most companies here in my city seem to focus on NOC rather than deep networking or security roles. I also have university commitments, so balancing everything is tough.

Right now, I’m exploring ways to transition into a proper network engineering role—I’ve been refining my resume, looking at job listings, and even considering cold emails to companies. But I want to make sure I’m on the right track and not wasting time.

I’d really appreciate any insights or personal experiences you can share. Thanks a lot in advance!

[rugged delta]

It sounds like you're making some good progress. If you want to be taken seriously as a network engineer, the Cisco certifications are widely recognised. Working in a NOC can open opportunities to work on a lot of the technologies in a network, from switches/routers/firewalls to servers, virtualisation and cloud platforms. While their certs are very much focused on Cisco's own products, there is a lot of knowledge of open/standard technologies which you might come across. Learning some coding skills would help where automation is widespread.

When it comes to job applications, look at the skills/certifications being requiested, and use an ATS checker to check your resume/cv against the role. As you are working in a NOC, it would be worth your while seeing what training/certification support/opportunities your employer provides and taking full advantage of it

[mystic cosmos]

I totally understood your perspective but actually my current role is in an isp and it is not an international one. So the actual operations they are performing are at layer2 and they have a separate noc for layer 3 operations. Also I am not getting much mentorship and attention there because everyone is most of the time chilling with their friends or basically busy in completing their rotational shifts which includes resolving tickets about connectivity issues which include (as far I see) vlan, ports, etherchannel, svi configs. So I feel like even after I spend much time there and learn that then tbh it wouldn't be a much bigger deal because these stuff can't fullfill my thirst for security side learning which is the sole reason I started with networking. The only thing keeping me back from resigning is that I have no experience if I leave this and then the hurdles would much increase in finding a more engineering suitable job. That's the reason I am grinding ccnp atm and also I have learnt Python at my uni so just have to look some more in network automation. I must try to grab an enterprise network engineering role where I would be able to do some hands on stuff and play with security including ids ips firewalls and polishing my documentation skills. Now enterprises don't post these critical jobs on social sites so that's why I was approaching them through cold emails. And tbh this time I would be specifically applying to multinational firms and banking sectors because I hope they must not have noc roles disguised in network engineering lol.

[winter parcel]

honestly I spent almost one year in IT support and is the job where I learned the less. depends on your experience, IT helpdesk would be just plug cables to screen and push trolleys. best case for me was run a script prepared by someone else that you don't have even the possibility to see.
So I hope to get some skills from THM while it seems more a platform for someone that already is a FullStack Developer with some knowledge of data.

[whole lynx]

I want to do something in my life idk how to do it .my dream is to me a ethical hacker but there no roadmap for me
I m doing bachelor is CS have basic knowledge of Linux web programming languages .Is there is anyone how show me path to the cyber security
I know All the basics

[merry blade]

search networkchuck on youtube, he made a video on that

[amber sail]

Hey everyone, as it stands I was planning on working towards the sec+ cert, but was taking a look at the cybersecurity sub Reddit and saw this roadmap mentioned: https://roadmap.sh/cyber-security

This suggests getting an understanding of operating systems, hardware, etc, which I do have a decent understanding of, but probably not to the full extent that say would be present in A+.

I was just wondering, as someone with no IT background if it's more worth it go for A+ and Sec+ or stick with sec+ and skip A+ and just learn as I go kind of thing

[radiant cave]

A learning path I’ve come across is learning either software or full stack development before fully going into cybersecurity. This gives you the upper hand in creating applications or websites that you’ll like be protecting in a cybersecurity job. You’ll be able to security test your own projects, etc. Having that experience can also open more job opportunities or better pay if you only seek cybersecurity jobs.

tldr is you’ll find a lot of value in doing development prior to cybersec certifications etc

[amber sail]

Thanks for the response - I know there's sites like freecodecamp, but are there any in particular you'd recommend?

[serene umbra]

Gave +1 Rep to @radiant cave (current: #2762 - 1)

[radiant cave]

If you like freecodecamp the odin project may be another option; alternatively you can try coursera or udemy but those may come at a cost and may not be fully free. Really just depends on your learning style and budget.

Codecademy is another option in the freecodecamp style of learning, but personally I don't like them as they are very fremium; looks like a lot of courses are free then you get stuck with paywalls, etc.

But if you're end goal is strictly cybersec I wouldn't spend any money to learn simple development stuff and just go with freecodecamp; but if you want the certifications for those fields too why not

oh well yea you get free certifications with codecamp so there ya go

[amber sail]

Thanks for the info, much appreciated 👍

[serene umbra]

Gave +1 Rep to @radiant cave (current: #1816 - 2)

[radiant cave]

yea no problem, best of luck

[gloomy prism]

Is anyone here a network engineer or an entry-level network engineer? I'd like to ask some questions about the job. Is that ok?

[tall frigate]

Im in an entry level networking role, maybe i can answer your questions.

[gloomy prism]

Will a 2-year degree be enough to get a networking job or do I need a cert alongside the degree I'm going to school for Networking and cyber defense I have no certs and no internship experience. Also, will a CCNA be enough because im trying to study for that while still in school.But my teacher recommends me to wait before I graduate .

Since i see a lot of people online say Certs are more important.

[tall frigate]

Certs help the entry process a lot, when hiring managers and recruiters are reviewing resumes, but it’s possible to get a networking job without one. Though, your chances of getting an interview are much slimmer without something to demonstrate your competency in networking. A CCNA will help, absolutely, many organizations use cisco hardware and software for their networking systems. You should probably wait to apply for networking roles until you have the CCNA, unless you’re in dire need of a networking job right now and don’t mind having lower chances of getting a foot in the door. If you really sell yourself on your resume and kill the interview you could get one without a cert, but you have to show that HM/recruiter you’re knowledgeable on your resume.

[gloomy prism]

If you don't mind me asking what do you do in a networking job is it a lot of hands? like touching hardware and wires?

[tall frigate]

From what I know and where I’m at, it depends on your role and what your organization does. In my org there are network techs and network engineers, (then the managerial roles) generally techs are more physical oriented and engineering are more software/logic oriented. For my organization its the techs that touch the hardware/wires, while the engineers monitor the overall topology of the network and much more i dont know about. For example, it will be pretty standard at any organization to be hands on with switches, routers, WAP’s, ethernet cables, IDF’s, MDF’s, protocol analyzers, tools to diagnose/locate said hardware, etc.

[keen tundra]

You have a roadmap on THM also , check it out
https://tryhackme.com/hacktivities

[amber sail]

Mm yeah I'm also working through that but I imagine just going through those won't get me through the door by themselves (although I'd bet they certainly help)

[strange crypt]

i want to pursue my carrer in the field of cybersecurity can any one help me for a guidence from where should i start

[keen tundra]

You can start with this path
https://tryhackme.com/path/outline/presecurity

[strange crypt]

Thank you

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 4136)

[jagged abyss]

Off Sec and Pen Test Intern role, they ask for how much salary; what would y'all say?

[fringe spade]

Pretty hard to tell not knowing the other conditions i.e your experience, location, company, responsibilities etc etc

[dawn walrus]

Hey everyone! 👋
I’m Aadel, from Belgium 🇧🇪. Currently doing my master’s at Université Libre de Bruxelles, yesturday we had our first intro class to cyber.

While exploring the field a bit, I came across the Threat Intelligence Analyst role. At first, it kinda feels like a data analyst but focused on cyber threats? Not sure if I’m off here. Also, I keep seeing roles like SOC Analyst, Cybersecurity Analyst, and Threat Intel Analyst but honestly, I’m a bit confused about how they’re different.

Anyone here working in those fields who could shed some light? Would really appreciate it! and any people from Belgium around? Would be cool to connect 🇧🇪

Thanks a lot 🙏

[fallow basalt]

hi all i am from pakistan

[tall frigate]

hello, where in pakistan?

i know someone in Okara

[gilded jasper]

@tall frigate this is what they offer in the core study area

[tall frigate]

those are definitely important study areas for cyber, are you ok with getting a diploma instead of a degree?

because if you wanted a degree, you would need to go to another university after that.

im researching the gmi diploma rn

[gilded jasper]

I wanna get a diploma, then get a degree

[tall frigate]

right on track then ")

[gilded jasper]

have you researched about it?

[tall frigate]

Only to the extent that it is a diploma versus a degree, which tbh I don’t really understand because I am in the US and we only have degrees for post secondary education

[left hatch]

I am competing a CTF right now anyone willing to help and join

[keen tundra]

Try to ask in #room-help 🙂

[broken idol]

I don't think that's THM

[rugged delta]

I understand where you're coming from. I once worked for a telecoms company where we were dealing with mostly the layer 2 anc connectivity for their major clientls.cables and fibres from NY to London to anywhere in the world and local links too. It was a lot of fun making connections there though and the tech I got to see was during a time of rapid advancement in networks and server tech too. Always projects to be finding out about and working your way into if you could... While you're in that job, try to maintain it. It's much easier to get a job if you're already working

[vapid thunder]

Hey guys, may sound like a stupid question,

but how much would CTFs actually like, help me getting a job in this field?

Does doing a lot of them and achieving good results mean a lot to employers?

[fresh herald]

To people that have a job in cybersecurity would y'all go to a university for studying cybersecurity or stick to community college? Rn I'm trying to decide between UTSA and ACC

[rugged delta]

Doing CTFs can improve your abilities to use your pentesting skills, but they tend to be quite game-based a lot of the time. They can be serious challenges, and a lot of fun. And if you score well, it can demonstrate to a potential emploer your engagement with developing your skillset. However, CTFs differ from pentesting, in that the objective of CTFs is to complete the challenges outlined. The objective of a pentest is to produce a report based on finding and testing all the vulnerabilities within a scope. Being able to gain and elevate access is a desirable outcome, but the objective is to be able to explain your findings to a client so they can reproduce them and then rectify the issues as per their processes.

Many employers who integrate cybersecurity into their business practices do encourage partaking in CTFs and other training, such as THM and may suggest resources like PicoCTF, Pwn.College, HackerOne's Hacker101 or PortSwigger Academy; to learn good hacking practices, and to be more effective in ethical hacking, CTFs, Bug Bounties and pentesting as your skills grow (these 4 are free resources provided by their academic and enterprise creators)

While partaking in CTFs, it's not always necessary to mention your achievements in detail on your cv/resume. And usually you would include it in a professional development or hobbies/pastimes section or mention and offer to discuss it in an interview

[rugged delta]

You'll learn a lot by learning how to get better at CTFs, and this video is probably good inspiration for why you should. This is what led to the formation of PicoCTF in Carnegie Mellon University
https://www.youtube.com/watch?v=6vj96QetfTg&t=218s

[vapid thunder]

Thank you so much

[vapid thunder]

One more little question, what exactly is like, the skill ceiling? For instance, I'm currently doing a masters in cs but I'd be worried I wouldn't be able to compete with people with like, a million times my experience

Would it be like, wasting my time as a cybersec noob?

[violet quiver]

hello! may i send u a dm?

[balmy tangle]

how's today's job market treating everyone 😄

[rugged delta]

So, as an academic going into the professional world with a masters in computing, you'd be expected to take on the same kind of low paid entry level jobs as most professionals in a lot of scenarios, or else go into programming or IT for a little while to gain experience. With a masters it's expected you wouldn't want to stay in a junior position so your goals would likely be gaining skills and promotion to a more prominent role (something quite achievable in a few years if you work at it). A company would probably want you to stay on a promotion track if they're providing training resources for you but your direction would need to align with theirs.

As for certifications, there are a number of them you might be expected to acquire, either by your own hand or aligned with an organisation's goals. They might, for instance expect you to have Linux/Windows/Networking/basic security skills/knowledge, maybe hold the Security+ with ambitions for OSCP/CISA/CISM/CISSP at some point in your future. Having an academic qualification reduces the typical 5 year path for CISSP to 4 years. You should really look at roles in your locality and see the skillsets and qualifications they would like you to pursue, and see if that aligns with where you want to be in a couple of years.

For instance, when you do get a cybersecurity role, it'll most likely be in a SOC environment, and doing things like the relevant THM Learning Paths and certifications (SAL1 just released recently), or perhaps the BTL1, another well recognised SOC certification. While it's typically expected that an employer should be paying for your training/certifications, sometimes you'll need to take the first steps yourself (the price of the BTL2 is more focused on what an employer can afford, for instance)

[soft meadow]

Hey folks! Is there anyone here who was a developer for many years and then started working with offensive security?

I'm 35 years old and I've been a web developer for many years, I consider myself a senior (and I currently have this job). But thinking about the future and the absurd growth of AI, I don't see a promising future for this area. I'm considering moving to the cybersecurity area, specifically pentesting/red team. When I was a teenager, I was a script kiddie and did some bad things lol, I always liked this area. I think this area won't be replaced by AI, at least not in the next 5-10 years. I'm confident that I can learn all the stuff but I'm unsure if I could get a job due to "switching profession".

[rugged delta]

I know a lot of people are concerned about developments in AI, and the uncertainty for the future, but as it stands, you should still be able to find some rewarding roles. With regard to pentesting/red teaming, yes it's a highly competitive area to work in, and can be quite rewarding. It also opens up the doors for a lot of other roles within the cybersec industry, as a lot of the skills are transferable. When speaking of pentesting/red teaming, it concerns ethical hacking, so you won't be encouraged to perform any activities without prior written authorisation from the client, and in line with the specific scope of the work you'd be doing.

While AI is still finding its feet, it is a topic being spoken about frequently in the cybersecurity industry these days, and it might see more widespread use in facilitating the work that professionals do. Becoming familiar with it in the coming years would be a good idea. As for pentesting/red teaming roles, they would generally require you to be very comfortable tin things like Linux/Windows admin, understanding/working with coding, networks, etc. It's a gradual but consistent endeavour, and even seasoned ethical hackers practice and learn new things all the time. Try Hack Me is a great place to learn a lot on the path to your dream job, but there are lots of other roles to consider that benefit from those skills

[keen tundra]

Just doing CTFs probably won't get you a job but they are a great way to test and in some cases prove your skills 🙂

[neon pulsar]

Hi @vapid thunder! 🙂 Indeed, @keen tundra is right: CTFs are a great opportunity to ensure that what you've learn is truly acquired and anchor in your memory (while having fun with your friends during CTFs 😉 ), but this is not really the best way to get a job.

I'll recommend you to choose some learning paths, following the rooms as they are displayed on THM, improve your knowledge and skills and learn and practice as much as you can trough the huge amount of rooms and CTFs available on THM, until you feel ready to get SAL1 certified! 😉

[oblique fable]

Hi

[neon pulsar]

Hi @oblique fable! Don't hesitate to ask question in here about CS careers: lots of great people are going to provide you awsome answers! 😄

[oblique fable]

Thx

[serene umbra]

Gave +1 Rep to @neon pulsar (current: #1817 - 2)

[oblique fable]

I have no questions for now.

[neon pulsar]

Enjoy your learning journey on THM them: hope you'll have as much fun as I do. 🙂

[rustic shuttle]

I’m developing a AI program using Python would anyone recommend a different coding language?

It seems to be the best so far for it

[fickle grove]

Suggest to post this in #programming instead.

[fallow basalt]

hi all

[soft epoch]

Arise

[odd crater]

Hello everyone I'm new here

[white badger]

Study partner/guide for oscp, anyone interested please ping

[keen tundra]

Welcome 🙂 👋

[rugged delta]

I'm sure you'll find lots of interested parties between here and the OffSec Discord. It's good to get a little help on the way with these kinds of things sometimes, but it is also very much a solo adventure; a chance to really test yourself against a big challenge

[plain vector]

hey everyone Im planning to implement AI to my learning path. Im thinking about IBM AI engineering certificate program to start, and my question is that does anyone of you started or already implementing AI on cybersecurity I would like to get advices from you guys thanks.

[mystic drum]

@flat sedge @dense dagger I would love your input on my updated resume. I incorporated your feedback from the last one. Juun - I wasn't comfortable formatting my resume with LaTeX as you suggested, but I included everything else you mentioned.

Guys, if you have any feedback for my resume, please send it my way. Thank you!

P.S. Resume is for generic Security Engineer Position

[serene umbra]

Gave +1 Rep to @flat sedge (current: #11 - 827)

[sand mortar]

Hi, does anyone know cybersecurity like careers that require a deep understanding of cryptography and rely on it a lot?

if possible i want answer from someone that had experience or something similar , not llm generated answers

[ornate wasp]

It's an extremely difficult journey.

[ornate wasp]

I have a masters in cyber and a sec+ cert. Honestly , they don't mean anything. The key is hand on experience like tryhackme for starters. Also a linkedIn account and start networking.

[stark frigate]

I don't have experience, but I saw space X hiring an applied cryptologist for starlink. I guess that's a proper profession.

[dense dagger]

Yeah, it looks better compared to before. I have no comments .

[ornate wasp]

Question all. Is there a command to get out of a command that was run but is stuck?

got it

[trail ivy]

^C at most
press Ctrl-C and it will cancel the command.

[ornate wasp]

Thank you!

[trail ivy]

No problem

[keen tundra]

ctrl+c in linux terminal

[high thicket]

recently got selected for the Black Hat Asia 2025 student scholarship, but I really want to know if attending such conferences is actually worth it.

I’m from a developing nation where job opportunities are usually only accessible to students from top colleges, while the rest of us have to struggle our way up.

I just want to know if it’s worth going and if it could actually help me stand out from the crowd.

Apologies if I said anything wrong just looking for honest advice, and I’ll definitely take it into consideration!

[prisma torrent]

Black Hat conferences are renowned.. i don't know anything about potential career opportunities but as an organisation it has merit.

[dapper depot]

If it is fully covered by the scholarship then why not? I don't know if going would help you stand out but it would be worth it for the networking opportunities in my opinion.
Developing nation in Asia, conference is in Singapore. I assume you're only a few hour flight away maximum. Worth it!

I see now that travel and hotel are the responsibility of the attendee so that is something to consider although Singapore can be very affordable.

[languid prism]

Anybody have any suggestions for getting my foot into the door for cybersecurity jobs?

[rugged delta]

Yes, Black Hat gives student scholarships to promising students making their way into the field. It's a widely recognised achievement, and you'll have lots of attention having that on your cv/resume. Being on the scholarship means you're going to have access to the top orgs in the field on your visit, and make a lot of connections while having a lot of fun

[rugged delta]

If you're interested in a role in cybersecurity, there are a number of ways to pursue them. You might get a degree in Computer Science, IT, Cybersecurity or a related field. Certifications also can help, but the most important thing you need to work in this field is a desire to learn new skills. There are a lot of job opportunities, and you will need to dedicate yourself to gaining the skills needed to be able to perform in the field. Simply having a certification or a degree might only be seen as an indicator.

Spending time learning in Try Hack Me can encourage you to improve your skills and find the kind of roles you'd like to pursue. There's a broad volume of knowledge you can acquire and a lot of ways to put it to use. You can take a look at the Individual success Stories on the THM blog here:
https://tryhackme.com/resources/success-story

I'd also suggest reading some of the interviews from the Tribe of Hackers books, which are collections of interviews with professionals in various roles in the field. If you're new to cybersecurity, you can go to #start-here

[languid prism]

Thanks for the suggestions. I have started toward that goal. I have an MS in Information Security and Assurance. I am working my way through the learning now. I am on the SOC Analyst 1 path (I think that is the right name)

[serene umbra]

Gave +1 Rep to @rugged delta (current: #21 - 484)

[rugged delta]

Good going, keep it up. You'll find a lot of interesting things on the path

[languid prism]

How much does these rooms actually help prepare you for the Sec+ certification?

[stoic cave]

Professor Messer's material on YouTube and Jason Dion's quizzes will give you a good idea of where you stand

[languid prism]

I had no idea about that. Thanks for pointing me in the right direction.

[serene umbra]

Gave +1 Rep to @stoic cave (current: #20 - 502)

[stoic cave]

You're welcome

[hushed relic]

Hey, i wanted to ask if anyone here had gone through the paradox of choice between Red Teaming and Blue Teaming?
Lately, I v been struggling to pick a side… I really enjoy both offense and defense, but I cant seem to commit to just one path

[rugged delta]

Well luckily for you, red and blue teams are actually working towards the same goal; the defence of the organisation. It's okay if you haven't picked a particular path at this stage, there's a lot of material to understand, and it actually helps if, over time, you learn some of the requirements of both sides of the fence. A lot of people going into red teaming/pentesting will have spent a while working on a blue team; and vice-versa, plenty of red teamers bring their skills to improve the effectiveness of the blue team by improving the rate at which attacks are recognised.

There's a lot to learn, and it's beneficial if you spend a little time on each side. Eventually you'll find yourself spending more time with one over the other and just naturally gravitate that way, at least for a while

[cedar viper]

Has anyone ever done the GT OMSCybersecurity?

[high thicket]

alright then 🙂 thx for your advice i hope i can make most of it

[serene umbra]

Gave +1 Rep to @dapper depot (current: #323 - 20)

[high thicket]

i see, thx for your kind advice man!! i really appreciate it 😄

[dapper depot]

the tickets aren't cheap to blackhat. i think like 2k SGD. seems worth paying for the flight and a few days in a hotel. let us know how it goes if you decide to take the trip 🙂

[high thicket]

i actually am right now ill be heading there on 31st

im most keen on AI summit and how it impacts in our cyber field

[dapper depot]

absolutely. that will be very valuable i imagine.
seems the conference is at marina bay sands but public transportation is really good there so don't get roped into a nearby expensive hotel unless you are good with that.

ive been to singapore a number of times so if you have any questions feel free to dm 🙂

[gloomy mortar]

where does SAL1 fit in this roadmap? https://pauljerimy.com/security-certification-roadmap/

roughly of course

is it near CCD, BLT1, or HTB CDSA?

just out of interest so no worries if can't tell

[cursive pendant]

can we generally use google translate during a certification exam ?

[keen tundra]

@unreal arrow

[unreal arrow]

Is this for SAL1?

[cursive pendant]

nope i actually interested by the both certifications VHL and OSCP

[gloomy mortar]

You can also do 1 of them and switch to another later on as an upskill. I want blue team for my job but knew it didn't sit right with me and so am red teaming first and enjoying it. It will always come in handy for adversarial mindset etc.

[gloomy mortar]

was only just worried I wouldn't get in blue team if I went red first. Silly worry

[warm hinge]

Can anyone give me a work
I need to earn money

[cedar viper]

Black hat is the best I went to blackhat MEA and it was an amazing experience
I was a complete noob but it was still awesome and I networked and participated in a war game it was soooo cool

[cedar viper]

It was a mind blowing experience

[cedar viper]

Dude it’s impossible that it’s that expensive

Omg

It actually is

That’s crazy

[cedar viper]

It’s worth it since there were so many competitions/CTFs/wargames you have an opportunity to win even if you’re not amazing

So you’ll leave an impression and you can meet with allll the cybersecurity companies etc

If you go I recommend you meet up with your friends/other scholarship students because idk it’s easier as a group to do things

[cedar viper]

Bug bounty isn’t a traditional job you can literally make an account on HackerOne or something and look for bugs rn

[undone shore]

It's generally not a "job" at all

Treat bug bounty as a hobby which might bring in some extra cash. Don't expect to make a living doing it.

Some people manage it, but they are by far the exception, not the rule.

[high thicket]

damn bruh unfortunately im doing it as a solo person 😦

all of the comments on this arre making me more excited

^^

[cedar viper]

You can try to get in contact with one of ur fellow students or something
So you guys meet together at lunch etc

[high thicket]

i guess so

[river ice]

do you guys think i can put thm as "experience" in my cv or naahh?

right now im not looking to apply for jobs, it's just an assignment for my university

but im writing it as if i was applying for jobs

[wintry stone]

That’s a good question honestIy I would as you do a lot of good work on thm and also it shows companies dedication

[fading panther]

I have been advised by a couple of people to put it under hobbies or projects as it isn’t “real-world” experience in a live environment

[river ice]

all right that makes sense thanks

[serene umbra]

Gave +1 Rep to @fading panther (current: #1378 - 3)

[fading panther]

Of course

[river ice]

i don't have a hobbie section in my cv, how do i make it clear that thm is a learning platform and not a web platform i made myself?

[fading panther]

have you completed any of the learning paths on THM (like Soc 1, Jr Pen tester etc)?

[river ice]

im about to complete jr pentester

only like 10 questions left and thats it 🙂

i have also completed the basic web explotation path and two begginer paths

[fading panther]

So I am currently applying for Soc analyst roles, I am transitioning from a career in retail management so I need to show employers that I have "experience" using the tools that I would use in a SOC. I completed the Soc lvl 1 path and have it listed as a project with some of the tools that I have used as part of that path

gimme a second and I'll grab a screenshot of it

[river ice]

all right

[fading panther]

I DMd it to you

[river ice]

thanks, i like the way you worded the title

cause i was only thinking "Try Hack Me" as a title

and that could lead to some confusion 🙂

[fading panther]

Im just using it as a way to hopefully strike up a conversation with a recrutier. Reminds me I need to update it to add my SAL1 cert onto my resume now lol

[river ice]

congrats on getting SAL1

[fading panther]

thank you, was honeslty a fun exam to take compared to all of the comptia ones

[serene umbra]

Gave +1 Rep to @river ice (current: #1821 - 2)

[river ice]

also i have some experience as back end developer, i have worked for 2 companies, but i feel that i will give the wrong impression by listing that under the experience section, still, is the only real world experience i have

[fading panther]

why do you think it would give the wrong impression

[hexed ice]

Showing no work experience would be worse. Focus on the skills that you built in these jobs that translate well into cybersecurity

[river ice]

cause a recruiter might think im applying for the wrong job

but yeah, some work experience in the it field is better than showing no experience

[hexed ice]

nah put it as the headline, make it clear with certificates and your cover letter

i was in a similar situation but i was a front end dev!

[river ice]

cool

[fading panther]

I agree with @hexed ice . You know how the backend works and shortcuts devs taking levaing vulnerabilites exposed for someone on the red team to take advantage of

and if you can articulate that in an interview youre golden

[hexed ice]

absolutely!

[river ice]

thanks @hexed ice and @fading panther for your advice

[serene umbra]

Gave +1 Rep to @hexed ice (current: #2774 - 1)

[river ice]

very valuable

[hexed ice]

[fading panther]

you've got this, don't sell your experiences short

[granite sable]

hey chat i'm looking for a job role as a security analyst/intern to start my career in cyber security field. i have done my master's in cyber security and a CEH v13, CPT . Please let me know if there is any opening for these roles. It will be highly appreciated.

[cedar viper]

I did it solo too and it was awesome I just felt like it would’ve been better as a group

[white cloak]

https://crowdstrike.wd5.myworkdayjobs.com/en-US/crowdstrikecareers/jobs lots of analyst openings and most are remote

[dawn field]

I’m currently working through the Google Cybersecurity Certificate and would love to find a study buddy to...Still new

[tribal herald]

Hi guys. I’m currently interested in this field for the kind of skills you can acquire. I am by no means have any knowledge or background in cybersecurity or tech. I’ll probably have to start from the ground up but don’t know where to start. Any tips?

[keen tundra]

You can start with the path below . To learn more about Discord check out #start-here article 🙂
https://tryhackme.com/path/outline/presecurity

[high thicket]

Ohhh

[warm hinge]

Start by understanding what cybersecurity actually is and know more about what jobs are in this field, for example try tryhackme's career quiz
Then start from the beginning. A solid foundation is vital in hardwares,operating systems,networking,Linux,scripting(bash,powershell),basics of programing langs like (python,javascript). Try hackme have tons of modules you to get familiar with concepts but don't just rely only on it. Continue learning you will find the way when you take the first steps 🚶‍♂️ ✨️

[torpid shale]

Hey everyone! 👋 I’m a junior Cybersecurity major at university, minoring in Information Technology and Computer Science. I’m looking to break into Cloud Security Engineering, as I see it's a high-demand field. I know it’s competitive, so I want to make sure I’m taking the right steps.

Does anyone have any advice on how to get started? Would interning at a data center be a good move, or are there other recommended paths to gain relevant experience? Any insights would be greatly appreciated!

Thanks in advance!

[keen tundra]

You have a THM roadmap on the link below 🙂
https://tryhackme.com/hacktivities/

[torpid shale]

Thank you for the link, so if I get started and go on the security engineering path, that could lead me down that path with hand on experience?

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 4221)

[boreal tusk]

Opinions about this?

https://blog.ecapuano.com/p/so-you-want-to-be-a-soc-analyst-intro

[cedar viper]

Is the ine ICCA cert valuable?

[keen tundra]

I would recommend you to start with Pre-Security path for the beginning 🙂

[torpid shale]

Thank you for the feeback!

[serene umbra]

Gave +1 Rep to @keen tundra (current: #1 - 4224)

[gloomy mortar]

Oh well, I'm a wizard! (0xA) Harry I'm away for my yeezy's to celebeb!

[keen tundra]

Congrats 🙂 🚀

[olive relic]

What’s up y’all. I’m very new to Cybersecurity and decided to start my learning on Tryhackme.

I’m thinking my goals are going to hopefully align with learning everything blue team. Looking for any tips, advice, resources etc. that I should know about. Anything is appreciated.

[gloomy mortar]

https://tenor.com/view/metal-gear-metal-gear-rising-metal-gear-rising-revengeance-jetstream-sam-i-should-commit-tax-fraud-gif-16436631914686732084

great times!

It's a fine dinner cloth!

[hybrid tinsel]

Anyone here has installed Tails Linux before?

If yes, did you face something like systemd-journald.service failed to start?

[keen tundra]

Try to ask in #infosec-general 🙂

[keen tundra]

You have a roadmap on THM , check it out 🙂
https://tryhackme.com/hacktivities/

[cedar viper]

Yes but I couldn’t fix it

[storm sinew]

Hello team, I just got my first job as a Level 1 SOC Analyst, and I am very happy! I would love to hear any advice from those who are already in the industry.

Until now, I have only practiced in simulated scenarios on TryHackMe, but this will be my first real experience. I would really appreciate any recommendations or tips you may have.

Thank you in advance!

[dusk wedge]

It really depends on the type of soc work your doing i guess.

[drifting depot]

Congrats on the job, what other experience did you have, what certifications did you get and how hard was it finding a job?

[storm sinew]

None at the moment, I just prepared for the right questions at the interview, and made a good resume for it, all my practical skills comes directly from tryhackme rooms, hope to do well.

If you have any advice for me, I’d really appreciate it.

[drifting depot]

I wish I did, I was looking for advice from you. LOL.

[drifting depot]

Well I can give you some general advice.. Treat the job like it's the golden ticket. Your probably going to get stressed and think they are asking to much of you but just remember that is managements job. They are always going to ask more than they think you can do and pretend like it's the end of the world if you can't do it. Give it your best and realize that's all you can do. Never be late, and be willing to learn something new everyday. Many people out there trying to get their foot in a door. Treat the job like it's your golden ticket, it might not be where you stay forever but it might just be the step you need to get where you want to be.

[hollow rivet]

Hello everyone, I'm nearly done with high school and am planning to enter college for computer engineering. Is my course a good choice or should I consider other courses instead? I'm really confused rn 🫠

[dense dagger]

Look at the curicculum, the people that teach it, how they teach it, and check if they produced graduates that work in IT/InfoSec

[keen tundra]

Can you please change your profile image 🙂 ?

[hollow rivet]

Oh, okay 👌

[dusky light]

I just got through my first internship as an Information Systems Intern. What Job titles would be good for me to pursue?

[bleak plaza]

All, can you help me with an average income as begginer in CS but part-time?

[radiant pecan]

Hi! I'm new here. I've worked as a web developer for two years and I completed some of the easy learning paths in THM. I was wondering if there are pentesting jobs focused on web pentesting rather than general pentesting, so I can focus on that field instead of learning eeeeeeeeeeeverything.
I hope this message is in the correct channel. Thank you!

[rugged delta]

A lot of the skills used in web app pentesting are typically encountered in bug bounties. While it's not always a reliable source of income, experience in bug bounties can certainly help your career. As well as PortSwigger Academy, HackerOne's Hacker101 is an excellent intro to this sphere. Check out #bug-bounty to discuss this topic further

[bleak plaza]

if you are working remotely country isn't improtant anymore and about experience is for a begginer. The reason for my question was that i want to know if i can be about average in my contry regarding the monthly income. Thank you for your response!

[serene umbra]

Gave +1 Rep to @cunning warren (current: #2778 - 1)

[fringe spade]

Even when working remotely your country matters, especially in cybersecurity. There is a lot of legal restrictions when it comes to working abroad, most commonly associated with handling your customers data

Also for beginners, it’s quite hard to get remote jobs, as employers often prefer onsite training for new employers and might not even allow you to work in a hybrid environment for the first months/a year.

[fickle grove]

What are your interests? Also, job titles can mean totally different things across organisations so keep that in mind. Better to read and check the job description.

[fickle grove]

Haven't taken it but would suggest comparing the topics covered in the course material with what is/are covered in the Web App Pentesting path.

You might want to look at Portswigger's Web Security Academy as it is free anyway.

[ancient prairie]

maintain a technical blog with professional-standard reporting, have a lab environment to get hands-on experience with tech stacks, try volunteering/interning, get creative with your past job experience by highlighting soft-skills - someone will take a chance on you eventually, good luck!

[noble mortar]

Hello everyone,

I’m nearing the end of my unemployment period and am in the process of transitioning into cybersecurity. I’m actively looking for my first role in this field. Below are the certifications I’ve obtained:

• OSCP (Offensive Security Certified Professional)
• CCNA Cyber Ops
• CCNA (Cisco Certified Network Associate)
• CARTP (Certified Azure RedTeam Professional)
• CRTE (Certified Red Team Expert)
• Sektor7 (in progress)
• BSCP (in progress)

Practical experience:

Currently ranked 23/8945 in HackTheBox season 7
"Pro Hacker" rank, globally ranked 553
Pro Labs: Zephyr, Dante, Rastalabs, Offshore

RootMe 5305 points, rank 1165

Altered Security Red Labs platform: ranked 24th

I am motivated, curious, and ready to apply my skills to new challenges. If you have any advice, opportunities, or leads to share, please don’t hesitate to reach out, it would be a great help!

[gilded cargo]

Hello, i'm looking for a good organism in france to train and pass the CISSP Exam. Any tips ?

[rough sequoia]

Hello if you have a response can you share it pls, im interested too 🙂

[fringe spade]

Those bootcamps are quite often money grabs, maybe try to learn from the books (especially the OSG) and do some practice tests on LearnZapp/Boson

[hardy pine]

anybody can have a coupon code for a monthly subscription

[chrome spire]

How hard is it to land remote jobs with high salaries? Is it not very common?

[chrome spire]

You seem set asl

[noble mortar]

Probably not enought if i still find nothing 🤣

[hollow falcon]

Inquiry, and this for those that actually have exp with what I'm about to mention.

Say, you get hired to conduct a pentest for a client. However, after a couple of days or weeks, don't matter, demostration purposes. Let's say that after conducting a pentest you find no vulnerability, whether it be due to the client's security implementations or an insufficient skill level.

What do you say and report to the client in this situation?

[chrome spire]

U have a oscp

Ur fine

U seem over qualed on paper tho

Idk

But u got no work experience

But im sure ul be good

Just market urself well

Would doing SWE be better to get into cyber? Ion mind swe but its a bit boring

[hollow falcon]

Thank you

[serene umbra]

Gave +1 Rep to @hallow sparrow (current: #54 - 168)

[noble mortar]

I've OSCP, CRTE, CARTP in pentest/redteam, doesn't seems enought for HR

[hollow falcon]

Last question; promise I'm not trying to be annoying.

In your honest opinion (doesn't have to be long.), what would you say distinguishes a Cyber-security Specialist and a Pen-tester?

Would you say they're the same?

Ah, understandable.

Understood! Does social engineering count in these engagements or are clients mainly looking for non-human related vulnerabilities?

Understood, and thank you again

[serene umbra]

Gave +1 Rep to @hallow sparrow (current: #54 - 169)

[undone shore]

Yeah, that's not true at all.
It's very possible to get tests which legitimately have no findings.

You just note in the executive summary the reasons for that, and move on.

[hollow falcon]

Huh, now I'm curious

[undone shore]

e.g., an application which is tested annually for compliance, but hasn't had any feature updates.

[hollow falcon]

Ah

[undone shore]

Or a test where the client have requested a tiny scope.

[hollow falcon]

Guys, please don't confuse me. Lol jk

[undone shore]

Or a client who have their own security professionals working with the development team.

Or just outright developers who know their shit.

[hollow falcon]

True! Understandable

[undone shore]

Lots of reasons why a test may have no findings.

Be that as it may, your blanket statement that "no findings == skill issue" is still utter crap lmfao

[hollow falcon]

Okay, would there be some data regarding successful engagements vs. unsuccessful I can get a link to?

Articles?

[undone shore]

How do you define success?

[flat sedge]

This has been the case for several of my engagements. Ironically, 2 of the findings I considered informational ended up paying a few hundred $ as part of a bug bounty

[undone shore]

Nope smh
Your lack of experience is telling there Zumi. Just because tests in your specific niche nearly always have issues, doesn't mean that will always be the case.
Yes, there are some test types where chances are you'll always find something. OT, for example, or hardware, sure.

And yes, the majority of tests will include something, even if it's scraping the bottom of the barrel.

That doesn't mean every test will though. It doesn't mean that it's impossible to have a test with no findings. It definitely doesn't mean that there's a knowledge gap if you do fail to find anything.
That last opinion is outright misleading. It just compounds the CTF player problem.

I will not agree to disagree on this. You have made a blanket statement, presenting an opinion as fact, which is just outright incorrect. Again.
By all means feel free to go and get that verified though 🤷‍♂️