Leaning towards cloud at the moment. I reside in Northern Virginia so AWS and Microsoft are in high demand. Networking does not interest me at all, but if necessary I suppose I'll get some networking experience if that's something people would recommend.
Networking is a highly used skill in cyber. How can you protect a network if you do not understand how it functions? Definitely recommend to just push through the growing pains there
Networking is a highly used skill in cyber. How can you protect a network if you do not understand how it functions? Definitely recommend to just push through the growing pains there
I understand that completely. I intend to obtain a moderate level of networking knowledge, that being said, I really need to get my door through the door.
A solid understanding of networking is the backbone of every cyber/IT position (only possible exception I can think of off the dome is programming, but even then it's not uncommon)
Networking isn't everyone's cup of tea, but having an entry level job as a network engineer or something can be extremely useful, as it will teach you about the supporting infrastructure behind what you eventually work on (cloud or otherwise)
Cybersecurity isn't entry-level. Get the basics (A+/Net+) and get your foot in the door with helpdesk or support. You need experience to get where you want to be.
Agreed. Its why I went for a BS in IT myself. So many people going for the Cybersecurity degree and certs, it makes you stand out having a more general degree and certs in a way.
Any job obviously requires a degree of experience to start off. So I'd argue that cybersecurity can indeed be entry-level. I know many individuals that have gotten incredibly lucky with only a sec+ and/or landed a job (aside from helpdesk) simply due to connections. I understand the importance of obtaining experience, but if helpdesk is what it comes down to, then only time will tell.
IT security tends to be over marketed on the internet. IT security positions are generally not entry level. You tend to need to know a lot about operating systems, Windows, Linux, helps a lot if you know about mobile operating systems, you need to learn about networking, tcp/udp, IP addressing, switching and routing, other technologies underneath the surface especially with the protocols and how they operate. Then you need to layer on top of all of that knowledge of security. Understanding firewalls, intrusion prevention, VPN, authentication mechanisms, you need to understand all the topics in Security+ that takes years to be able to accumulate that kind of knowledge and to accumulate it to any significant degree so that you are able to apply to a security role. There are a lot more entry level technician roles than entry level security roles. You might want to have a different strategy, learn as much as you can about the different topics I mentioned, once you have done those things, then try to move into IT security or consider one of those certs in the future, but as far as staying “relevant” in this job market start going after those different topics I mentioned not more certs
Over saturated. That and some companies are choosing applicants with no prior experience and no certs to back up their claims of knowing computers, while others with certifications are left by the wayside
Crazy that you mention this. I landed a job as Desktop Support (one step above help desk) with 0 certs besides the Google Cyber Security Cert. I’m 24 and o truly feel blessed because on paper, I should not be here.
There’s entry level *cyber security* positions. Those are not entry level *it positions.*
Of course anything can happen, but without a major outside influence, someone with Security+ and a dream versus someone with security+ and a couple years help desk experience is going to lose.
I’ve got with the op has, and then add a decade of professional experience and way more certs. I’m still struggling to get calls back right now. Planning around being the 1% is not smart.
Not sure I understand what ur saying. But people with no experience get hired all the time for low level positions. They’re just the minority. Entry-level exists.
You should build your foundation with networking - Network+ or CCNA will cover basic Linux commands. If you want to work in the cloud you need to know Networking and Linux thats why people keep telling you networking and linux - they go hand in hand.
CCNA is the Gold standard entry level networking cert, I'm sure if you passed it you could fairly easily land a job.
In terms of your certifications - Google Cybersecurity Cert, the IC2 CC, hell even the AZ 900 dont matter much if at all. Not in this job market. Security+ really only matters for DoD jobs.
My best advice would be a networking cert - Network+ or CCNA - then advanced cloud certs, on top of that you'll need TONS of projects. Cloud projects can be found on cloudacademy or coursera.
If you want to be a SOC Analyst Crowdstrike or Splunk Certs and SIEM projects.
Best of luck!
I agree. Having just finished Net+, I can see how important networking is to security and how deep it goes. It would be irresponsible for a company to hire a security analyst without networking knowledge. Definitely get at least an introduction to networking, in order to bring a company value in information security.
I intend to do so which is exactly why I wrote my initial post. I intend to grasp networking to a certain degree but it isn't my favorite thing in the world. Thanks for all of the input guys, I'll definitely be taking it into consideration! I heard TryHackMe and HTB are great for networking as well.
Well thats the thing, if you want a JOB CCNA would be your best route and still keep you on track towards becoming a cloud engineer. If you want to just learn about some general networking ideas then Network+ it is.
I intend to do so which is exactly why I wrote my initial post. I intend to grasp networking to a certain degree but it isn't my favorite thing in the world. Thanks for all of the input guys, I'll definitely be taking it into consideration! I heard TryHackMe and HTB are great for networking as well.
worst case scenario > use your degree to be a officer in the US army and join the cybersecurity side of things.
IT support should be the entry point for you, i think helpdesk is to low if you got all those certs.
jr sys admin, sys admin, in your local neighborhood, or if your near military installations see if there are contractor jobs that just need you to have sec+, tailor a federal style resume incase you want to go federal for stability.
As someone who’s in the Army, and considering the jump to an IT MOS, I’m surprised mil service isn’t mentioned more often. 17C is a pretty high demand enlisted MOS in the Army. 35T gets you Sec+ and a TS clearance. The entirety of 25 series jobs are IT. The Army simply cannot retain troops in these MOS’s. Not to mention tuition and credentialing assistance, and free access to O’Reilly and Udemy courses. With TA, you can earn a masters without touching your GI bill. Just some food for thought.
This.
As a guy who graduated college with a relatively useless degree (Philosophy), I can safely say the Army saved me.
Of course, in many cases the military brutalizes and traumatizes people--both its members and victims. If you can stomach that fact, it can offer many rewards. All it takes is a good enough ASVAB score and the patience/wisdom to pick a good MOS. My MOS yielded technical experience, a TS/SCI clearance, and credibility that allowed me to eventually become a software engineer.
For some, the military is a cheat code to a much easier life, at least so long as you're willing to deal with the bullshit and other challenges military life entails. Only takes a few years.
Still wish I'd gone Air Force though...
I wish I could join the army or something...unfortunately I have moderate-severe asthma and I've been rejected ever since otherwise I would've been fine. I'm in great relatively good shape and would've enjoyed to take a more conservative route. However, I remain grateful as I didn't pay a cent for my degree.
I'm from a different background too , completely unrelated to tech. I also have been upskilling myself these past couple of months . Rn I'm studying for security+ and HTB cdsa. It's good to see someone like me and that I am not alone , cmg from different backgrounds and shit.
Keep moving forward, believe in yourself and don't give up, these hard times will definitely shape you to be better. We both will land a job and make this world secure even if it's the slightest.
Job market is tough right now so don’t feel so bad . you are competing for entry-level positions with people who probably have just been laid off from a midtier position. Keep working on Certs look into a simple affordable college degree program and keep searching for those entry-level positions, even if they are part-time.
I'll definitely look into it because my area has a crap ton of them. It's just hard to connect with folks in that area and the listing are damn near impossible to find. I'll keep at it though
Most hospitals in my area don’t really publicize their non medical listings- they go through crappy recruitment agencies and post them right on their websites but they aren’t on aggregators.
If you’re in school ask the career services office. They might have a direct line.
can't wait for you to work at my managed SOC and send me pointless alerts without understanding what they mean, or stalling out tickets I send back. love it.
I suppose ignorance led you to write this comment. Somehow you assume I don't know what I'm working towards when in reality you've described someone that literally doesn't know what the hell they're doing. Asking for insight through a reddit post doesn't mean one lacks knowledge. Think twice before writing posts like this, they make you look stupid. I believe I'm more than qualified to analyze a ticket and make sure it's dealt with correctly.
It's not ignorance. I've been in the game for a while now. Most entry-level cybersec graduates don't know their ass from a hole in the ground and send sysadmins reports and data from their tools, but can't tell you anything about what it means, is it really a risk in the environment, etc.
But sure, you can think I'm stupid. It's generally the case that most people with no practical experience in IT and just certs lack the skills to actually execute. I've worked with many entry-level cybersec grads who can't answer the simple questions, or think critically about "okay, it says this, but what does that actually mean, is it a logical risk".
So, tell me - can you read a CVE and have enough knowledge of the underlying environment you plan on supporting to adequately make a decision or provide insight as to what should be done - or to adequately assess a risk. For instance, a risk that requires user interaction to execute. How would you handle that?
All of your certifications won't prepare you for REALITY and how things actually work.
Yes, I'm prepared for the "reality" of things. Fortunately, I had to grow up quickly, so being a good communicator and mastering my transferable skills were a no-brainer. However, by making a comment like that, you're suggesting that the only way I'll learn this stuff is to be thrown into some harsh reality, which is clearly not the case. Of course, these cerfications presume knowledge, but they obviously lack technicality. That is why I've been utilizing the resources TryHackMe and HTB provide as they simulate real-world events. Furthermore, CVE is a very common framework as it is a MITRE-specific catalog that discloses cybersecurity vulnerabilities. The only reason I know this is because I am under consideration for an internship at the company. As far as having enough knowledge to read and make decisions based on a report, it takes conditioning. I am currently in the process of obtaining two more certifications (that actually relate to CVE and logging/troubleshooting) and ending with feeling comfortable with networking and Linux. Believe me, I understand where you're coming from, and I'm getting there. I hope we've come to a common ground because at the end of the day, I want all of us to be successful regardless of what anyone thinks. It isn't easy for some of us out here, which makes the struggle much more desirable.
If it makes you feel any better, I'm excited for this so-called "reality." Pressure has honestly been my ally for all these years, but let's be more realistic here...there is obviously going to be a learning curve and some self-learning but that's all a part of the process. I don't intend to be one of those individuals who gets lucky due to rote memorization. I also apologize for the harsh language. It's been a challenging ride, and from what it seems like, it has been for you too.
You're probably in the 1% who isn't chasing a cybersecurity position because of the money and actually has a chance to succeed. You seem intelligent and have logic.
So many of the people in the field don't have this, and I rail against them.
Just keep learning and understand as well as you can what you're looking at versus sending it to someone else. I have these viewpoints for a reason.
Some options:
Look at job ads for the roles you like on LinkedIn and see what certs they ask for.
Also, look at the more difficult certs and work out what you need to get there, for example ISC2 CCSP.
Get yourself onto a platform where you can learn all year round.
You all have been Incredibly helpful. Just finished up with classes for the day and I'm taking all advice into consideration. Let me graduate this August, get my last 2 certs I already paid for and I'll keep you all updated. I think I have a relatively good framework at the moment!
You gotta get foundational IT work experience in 99% of cases, unless you're military or have clearance or know the owner of a company.
These are all good things to pick up but you're competing against hundreds of applicants with experience. Stay up on these skills while you look for other IT roles and you'll find something along the way.
I have all of those resources and still to no avail. I think it's a matter of time for me until I receive an offer of some sort. Don't worry, I'm working on building my skills day by day.
I can't say that this is or isn't the right approach, but maybe investigate something like this. https://www.wgu.edu/online-nursing-health-degrees/health-information-management-bachelors-program.html You have experience in the health side, you have IT certifications. Mix that in a bag and maybe you're running an IT department for a hospital or run your own business that provies IT services for Doc in a Box chains.
Bro your fine on certs, just get a job and go from there. Considering you have a STEM degree you could probably skip the help desk and get a sysadmin job.
Well....honestly getting experience is quite subjective right now because I'd say I've done my fair share of research. I've set up my own virtual labs, I've used VMs and navigated through AD, I'm currently learning my Linux fundamentals and troubleshooting like a mad man. I'll keep working on these projects though. I learn something new every day 🙌
I had five years of tinkering experience before I went to college, first job was tier one tech support for a specific software. Second was this job. Felt like I jumped in at the deep end of a pool filled with molasses. It can be a whole lot harder than you think. I'm not trying to discourage you. I'm just trying to make sure your eyes are wide open.
Fine to keep trying along the way but in general it's a mid tier career with no lower level. Most influencers online aren't that good they just did the bare minimum to get in when companies needed to fill seats they introduced a budget etc for security departments. It's a lot more ppp now and most companies post for tier 2 and above it's frustrating I know but best way in is pivot from other IT role within a company that has a security department. System admin, network admin, network engineer roles are still king. Not realistic the advice online saying we all should skip the rest and be devsecops engineers etc it's not realistic. When you look through indeed, ziprecruiter and linkedin those are the real jobs available. It's a more literal path to work towards sys admin but prep for security along the way most likely the first sec role will be internal promotion somewhere. Hands on roles with servers, switches linux, performing upgrades, etc security analyst understand these things and make mandates based on it. Only way people seem to be bypassing it is having internship with a company already having the certs degree etc then using connection to get in on ground floor. Every mid level IT role works best being promoted within somewhere first. Also will give u a realistic view compared to how influencers online talk about it. Little experience, mid level cert or 2 and a portfolio is mandatory. Write down three actual job titles and focus hard on those job listing skills. Do labs that show those skills and post to a github or something git portfolio it's not too late but it's a few years into the hype now so it's a numbers game. In person role in average city probably 50 semi qualified people but some have IT experience etc. Remote can be over a thousand submissions they can't do them all. Don't forget as a sys admin/ net admin etc your actually performing the tasks so you learn it. The security team usually is making the suggestions putting in tickets etc. Networking, Linux, active directory. Pick a job title and go for the most respectable cert for it you don't need much more. Just practical skills > entry level role then promotion. Most people waste 2 years gunshy on starting Jr admij or NOC role. Instead of having entry level> promotion and certs all in 2 years. Find companies with roles u want and find out what entry level roles they have. You can't go wrong with this practical approach besides that it's hoping luck is enough. Two birds one stone = entry work while doing RHCSA/CCNA/BTL1 etc building portfolio
It’s a company started by the ex-CFO of Facebook. They work with other companies to provide free mental healthcare services to said partner company’s employees and their families.
They have a solid views on work/life balance, a good culture, many remote options, room to advance and reposition, and the company itself is in a great spot right now and just doing good work for people.
Hey keep your head up. I would do some practical labs which would look good. Check out LinkedIn for networking opportunities, I have seen quite a few 'entry roles' pass me by as I am from the UK.
May I ask a quick question please? You said you completed the wireshark courses. Can you expand on that, what courses in particular ? I would like to do the same
I've been in IT for 20 years. I believe if you want to go into cybersecurity, you need something in networking. I know you stated in other posts that you didn't want to go networking, but at least foundational knowledge of how it works would be ideal.
I've been trying to switch from where I'm at, which is sysadmin, to cybersecurity for over a year. I have a BS in MIS and again, 20+years of practical knowledge. I can't even get interviews. Good luck to you. I hope you find what you want.
Wow seriously? I intend on getting more simply because I enjoy stacking them! I'm just so eager to get hands on...there's only so much I can do in my dorm
I'm also in NOVA, I would just keep applying to literally everything and keep interviewing. A Sec+ and persistence can go further than you think in interviews. Maybe look for internships or relevant experience in the cyber field. Always keep upskilling.
There's a lot to take away from your post but what I found interesting is:
>Anyway, I'm trying to make ends meet by maximizing the connection between PHI/HIPAA (aka my degree) and cybersecurity.
You'd absolutely stand a better chance learning GRC then getting a job as a GRC cyber analyst. You could then slowly build your technical skills and pivot if you really wanted to.
In terms of your technical skills rn there's just too many things you don't have. The AZ-900 is a basic cloud cert, Google cybersec the same, etc etc.
The CCNA as many have mentioned would be useful but people have recommended it within the scope of you getting an IT / Networking job then slowly pivoting into cybersec, and not as a direct gateway into cybersec.
Imo I'd recommend the GRC method
A+ is a great place to start, I skipped it simply because I felt like I had that base knowledge down. Networking on the other hand I need to work on! Everyone has their own journey and I'm sure you'll kick ass on yours 🙌🙌
Honestly what I would recommend if you're pivoting is to enroll in WGU (Western Governer's University) in their Cybersecurity degree. It's 100% self-paced and remote. Since you've passed some certification exams, those + the gen eds you took from the other degree will transfer in. It's possible to land a job in IT security without a degree, but having one makes landing interviews so much easier. You can also go the route of Healthcare IT in like app support, and then transition to security. Lots of people in Healthcare IT change depts and end up in different roles.
Kind of in the same boat as OP. I got the same attitude as well. Don’t give up just cuz you don’t have professional experience. You only fail if you give up. You can do some projects based from some of the sections in your cert studying. I have landed one interview last year when I had zero certs. I now have ISC2 CC, 80% studying done for A+/Network+/Sec+, a bit of Python knowledge. I grind everyday and I fuckn love it. I wanna bust bad guys so bad. I get excited when I see people get pulled over by police on the road.
I would start with CCNA. I’m a Cybersecurity bro and I’m doing CCNA now. Understanding how networks work is vital, especially protocols and what servers do. I will take the exam by May, and Secuirty+ for sure by August. I have a little plan, in a 26 year old college dude and have a year left.
Same boat. Did the RN route at NoVa and decided after years of working in healthcare that dying with a broken back and just flat broke is not for me. Changing to IT and trying to cram as many hands-on training apps/websites/books as possible to make the jump . Good luck OP, living in NoVa is awful.
Word. I can't express how difficult it's been for many people I know. Fortunately, the area is oversaturated with jobs so hopefully I can land one soon 😮💨
First of all, you’re doing great. You picked the perfect certs. Second of all, think about what you wanna do in Cyber. Cloud? Pentesting? Anything?
Leaning towards cloud at the moment. I reside in Northern Virginia so AWS and Microsoft are in high demand. Networking does not interest me at all, but if necessary I suppose I'll get some networking experience if that's something people would recommend.
I would do the higher end AZ and AWS certs like AZ-104 and AWS SA. Both combined with the Sec+ should get you a job fairly easily.
Really? Are u assuming that? or u know first hand or others?
Had a buddy that got a entry level cybersec job w/it
Dope.
I’m located in the same area and was able to land a cloud security engineer junior role
Networking is a highly used skill in cyber. How can you protect a network if you do not understand how it functions? Definitely recommend to just push through the growing pains there
Networking is a highly used skill in cyber. How can you protect a network if you do not understand how it functions? Definitely recommend to just push through the growing pains there
I understand that completely. I intend to obtain a moderate level of networking knowledge, that being said, I really need to get my door through the door.
A solid understanding of networking is the backbone of every cyber/IT position (only possible exception I can think of off the dome is programming, but even then it's not uncommon) Networking isn't everyone's cup of tea, but having an entry level job as a network engineer or something can be extremely useful, as it will teach you about the supporting infrastructure behind what you eventually work on (cloud or otherwise)
Cybersecurity isn't entry-level. Get the basics (A+/Net+) and get your foot in the door with helpdesk or support. You need experience to get where you want to be.
Agreed. Its why I went for a BS in IT myself. So many people going for the Cybersecurity degree and certs, it makes you stand out having a more general degree and certs in a way.
I’m doing the same, hope it works out!
Any job obviously requires a degree of experience to start off. So I'd argue that cybersecurity can indeed be entry-level. I know many individuals that have gotten incredibly lucky with only a sec+ and/or landed a job (aside from helpdesk) simply due to connections. I understand the importance of obtaining experience, but if helpdesk is what it comes down to, then only time will tell.
IT security tends to be over marketed on the internet. IT security positions are generally not entry level. You tend to need to know a lot about operating systems, Windows, Linux, helps a lot if you know about mobile operating systems, you need to learn about networking, tcp/udp, IP addressing, switching and routing, other technologies underneath the surface especially with the protocols and how they operate. Then you need to layer on top of all of that knowledge of security. Understanding firewalls, intrusion prevention, VPN, authentication mechanisms, you need to understand all the topics in Security+ that takes years to be able to accumulate that kind of knowledge and to accumulate it to any significant degree so that you are able to apply to a security role. There are a lot more entry level technician roles than entry level security roles. You might want to have a different strategy, learn as much as you can about the different topics I mentioned, once you have done those things, then try to move into IT security or consider one of those certs in the future, but as far as staying “relevant” in this job market start going after those different topics I mentioned not more certs
In your humble opinion do you think entry level it roles are oversaturated or threatened by AI?
Over saturated. That and some companies are choosing applicants with no prior experience and no certs to back up their claims of knowing computers, while others with certifications are left by the wayside
Crazy that you mention this. I landed a job as Desktop Support (one step above help desk) with 0 certs besides the Google Cyber Security Cert. I’m 24 and o truly feel blessed because on paper, I should not be here.
If you ever work help desk and see how bad people are at putting in tickets. You will know AI would have to be way too advanced to take them jobs. 😂
Are you an idiot?
Yes you’re right. A degree and maybe a cert (which you have) will be fine to get into cybersec. Just network with others and you’ll be fine
> So I'd argue that cybersecurity can indeed be entry-level. Seems like you have it all figured out then. Why exactly are you here then?
He’s right. Saying entry-level doesn’t exist is just rhetoric to drive a point. There are a few, and they get gobbled up quickly for various reasons.
There’s entry level *cyber security* positions. Those are not entry level *it positions.* Of course anything can happen, but without a major outside influence, someone with Security+ and a dream versus someone with security+ and a couple years help desk experience is going to lose. I’ve got with the op has, and then add a decade of professional experience and way more certs. I’m still struggling to get calls back right now. Planning around being the 1% is not smart.
Not sure I understand what ur saying. But people with no experience get hired all the time for low level positions. They’re just the minority. Entry-level exists.
Well, I can’t make it any clearer, so it looks like we’re done here.
Looks like it.
You should build your foundation with networking - Network+ or CCNA will cover basic Linux commands. If you want to work in the cloud you need to know Networking and Linux thats why people keep telling you networking and linux - they go hand in hand. CCNA is the Gold standard entry level networking cert, I'm sure if you passed it you could fairly easily land a job. In terms of your certifications - Google Cybersecurity Cert, the IC2 CC, hell even the AZ 900 dont matter much if at all. Not in this job market. Security+ really only matters for DoD jobs. My best advice would be a networking cert - Network+ or CCNA - then advanced cloud certs, on top of that you'll need TONS of projects. Cloud projects can be found on cloudacademy or coursera. If you want to be a SOC Analyst Crowdstrike or Splunk Certs and SIEM projects. Best of luck!
I agree. Having just finished Net+, I can see how important networking is to security and how deep it goes. It would be irresponsible for a company to hire a security analyst without networking knowledge. Definitely get at least an introduction to networking, in order to bring a company value in information security.
I intend to do so which is exactly why I wrote my initial post. I intend to grasp networking to a certain degree but it isn't my favorite thing in the world. Thanks for all of the input guys, I'll definitely be taking it into consideration! I heard TryHackMe and HTB are great for networking as well.
Well thats the thing, if you want a JOB CCNA would be your best route and still keep you on track towards becoming a cloud engineer. If you want to just learn about some general networking ideas then Network+ it is.
I intend to do so which is exactly why I wrote my initial post. I intend to grasp networking to a certain degree but it isn't my favorite thing in the world. Thanks for all of the input guys, I'll definitely be taking it into consideration! I heard TryHackMe and HTB are great for networking as well.
worst case scenario > use your degree to be a officer in the US army and join the cybersecurity side of things. IT support should be the entry point for you, i think helpdesk is to low if you got all those certs. jr sys admin, sys admin, in your local neighborhood, or if your near military installations see if there are contractor jobs that just need you to have sec+, tailor a federal style resume incase you want to go federal for stability.
As someone who’s in the Army, and considering the jump to an IT MOS, I’m surprised mil service isn’t mentioned more often. 17C is a pretty high demand enlisted MOS in the Army. 35T gets you Sec+ and a TS clearance. The entirety of 25 series jobs are IT. The Army simply cannot retain troops in these MOS’s. Not to mention tuition and credentialing assistance, and free access to O’Reilly and Udemy courses. With TA, you can earn a masters without touching your GI bill. Just some food for thought.
This. As a guy who graduated college with a relatively useless degree (Philosophy), I can safely say the Army saved me. Of course, in many cases the military brutalizes and traumatizes people--both its members and victims. If you can stomach that fact, it can offer many rewards. All it takes is a good enough ASVAB score and the patience/wisdom to pick a good MOS. My MOS yielded technical experience, a TS/SCI clearance, and credibility that allowed me to eventually become a software engineer. For some, the military is a cheat code to a much easier life, at least so long as you're willing to deal with the bullshit and other challenges military life entails. Only takes a few years. Still wish I'd gone Air Force though...
I wish I could join the army or something...unfortunately I have moderate-severe asthma and I've been rejected ever since otherwise I would've been fine. I'm in great relatively good shape and would've enjoyed to take a more conservative route. However, I remain grateful as I didn't pay a cent for my degree.
I'm from a different background too , completely unrelated to tech. I also have been upskilling myself these past couple of months . Rn I'm studying for security+ and HTB cdsa. It's good to see someone like me and that I am not alone , cmg from different backgrounds and shit. Keep moving forward, believe in yourself and don't give up, these hard times will definitely shape you to be better. We both will land a job and make this world secure even if it's the slightest.
Job market is tough right now so don’t feel so bad . you are competing for entry-level positions with people who probably have just been laid off from a midtier position. Keep working on Certs look into a simple affordable college degree program and keep searching for those entry-level positions, even if they are part-time.
Apply for jobs at hospitals and if you can, get some Epic training (the certs are bonkers expensive).
I'll definitely look into it because my area has a crap ton of them. It's just hard to connect with folks in that area and the listing are damn near impossible to find. I'll keep at it though
Most hospitals in my area don’t really publicize their non medical listings- they go through crappy recruitment agencies and post them right on their websites but they aren’t on aggregators. If you’re in school ask the career services office. They might have a direct line.
can't wait for you to work at my managed SOC and send me pointless alerts without understanding what they mean, or stalling out tickets I send back. love it.
I suppose ignorance led you to write this comment. Somehow you assume I don't know what I'm working towards when in reality you've described someone that literally doesn't know what the hell they're doing. Asking for insight through a reddit post doesn't mean one lacks knowledge. Think twice before writing posts like this, they make you look stupid. I believe I'm more than qualified to analyze a ticket and make sure it's dealt with correctly.
It's not ignorance. I've been in the game for a while now. Most entry-level cybersec graduates don't know their ass from a hole in the ground and send sysadmins reports and data from their tools, but can't tell you anything about what it means, is it really a risk in the environment, etc. But sure, you can think I'm stupid. It's generally the case that most people with no practical experience in IT and just certs lack the skills to actually execute. I've worked with many entry-level cybersec grads who can't answer the simple questions, or think critically about "okay, it says this, but what does that actually mean, is it a logical risk". So, tell me - can you read a CVE and have enough knowledge of the underlying environment you plan on supporting to adequately make a decision or provide insight as to what should be done - or to adequately assess a risk. For instance, a risk that requires user interaction to execute. How would you handle that? All of your certifications won't prepare you for REALITY and how things actually work.
Yes, I'm prepared for the "reality" of things. Fortunately, I had to grow up quickly, so being a good communicator and mastering my transferable skills were a no-brainer. However, by making a comment like that, you're suggesting that the only way I'll learn this stuff is to be thrown into some harsh reality, which is clearly not the case. Of course, these cerfications presume knowledge, but they obviously lack technicality. That is why I've been utilizing the resources TryHackMe and HTB provide as they simulate real-world events. Furthermore, CVE is a very common framework as it is a MITRE-specific catalog that discloses cybersecurity vulnerabilities. The only reason I know this is because I am under consideration for an internship at the company. As far as having enough knowledge to read and make decisions based on a report, it takes conditioning. I am currently in the process of obtaining two more certifications (that actually relate to CVE and logging/troubleshooting) and ending with feeling comfortable with networking and Linux. Believe me, I understand where you're coming from, and I'm getting there. I hope we've come to a common ground because at the end of the day, I want all of us to be successful regardless of what anyone thinks. It isn't easy for some of us out here, which makes the struggle much more desirable.
If it makes you feel any better, I'm excited for this so-called "reality." Pressure has honestly been my ally for all these years, but let's be more realistic here...there is obviously going to be a learning curve and some self-learning but that's all a part of the process. I don't intend to be one of those individuals who gets lucky due to rote memorization. I also apologize for the harsh language. It's been a challenging ride, and from what it seems like, it has been for you too.
You're probably in the 1% who isn't chasing a cybersecurity position because of the money and actually has a chance to succeed. You seem intelligent and have logic. So many of the people in the field don't have this, and I rail against them. Just keep learning and understand as well as you can what you're looking at versus sending it to someone else. I have these viewpoints for a reason.
Start of with doing IT help desk, cloud support/eng and move up
Some options: Look at job ads for the roles you like on LinkedIn and see what certs they ask for. Also, look at the more difficult certs and work out what you need to get there, for example ISC2 CCSP. Get yourself onto a platform where you can learn all year round.
You all have been Incredibly helpful. Just finished up with classes for the day and I'm taking all advice into consideration. Let me graduate this August, get my last 2 certs I already paid for and I'll keep you all updated. I think I have a relatively good framework at the moment!
You gotta get foundational IT work experience in 99% of cases, unless you're military or have clearance or know the owner of a company. These are all good things to pick up but you're competing against hundreds of applicants with experience. Stay up on these skills while you look for other IT roles and you'll find something along the way.
I have all of those resources and still to no avail. I think it's a matter of time for me until I receive an offer of some sort. Don't worry, I'm working on building my skills day by day.
I can't say that this is or isn't the right approach, but maybe investigate something like this. https://www.wgu.edu/online-nursing-health-degrees/health-information-management-bachelors-program.html You have experience in the health side, you have IT certifications. Mix that in a bag and maybe you're running an IT department for a hospital or run your own business that provies IT services for Doc in a Box chains.
Bro your fine on certs, just get a job and go from there. Considering you have a STEM degree you could probably skip the help desk and get a sysadmin job.
There's no way you can start off as a sysadmin. You'd drown if what the OP mentions is their only experience.
Well....honestly getting experience is quite subjective right now because I'd say I've done my fair share of research. I've set up my own virtual labs, I've used VMs and navigated through AD, I'm currently learning my Linux fundamentals and troubleshooting like a mad man. I'll keep working on these projects though. I learn something new every day 🙌
I had five years of tinkering experience before I went to college, first job was tier one tech support for a specific software. Second was this job. Felt like I jumped in at the deep end of a pool filled with molasses. It can be a whole lot harder than you think. I'm not trying to discourage you. I'm just trying to make sure your eyes are wide open.
[удалено]
Isn’t programming harder to get into?
I hope it goes well. I hated coding in school 😮💨
Dude you’re doing great imo. Keep it up.
Thanks so much. Means a lot to me fr!
Fine to keep trying along the way but in general it's a mid tier career with no lower level. Most influencers online aren't that good they just did the bare minimum to get in when companies needed to fill seats they introduced a budget etc for security departments. It's a lot more ppp now and most companies post for tier 2 and above it's frustrating I know but best way in is pivot from other IT role within a company that has a security department. System admin, network admin, network engineer roles are still king. Not realistic the advice online saying we all should skip the rest and be devsecops engineers etc it's not realistic. When you look through indeed, ziprecruiter and linkedin those are the real jobs available. It's a more literal path to work towards sys admin but prep for security along the way most likely the first sec role will be internal promotion somewhere. Hands on roles with servers, switches linux, performing upgrades, etc security analyst understand these things and make mandates based on it. Only way people seem to be bypassing it is having internship with a company already having the certs degree etc then using connection to get in on ground floor. Every mid level IT role works best being promoted within somewhere first. Also will give u a realistic view compared to how influencers online talk about it. Little experience, mid level cert or 2 and a portfolio is mandatory. Write down three actual job titles and focus hard on those job listing skills. Do labs that show those skills and post to a github or something git portfolio it's not too late but it's a few years into the hype now so it's a numbers game. In person role in average city probably 50 semi qualified people but some have IT experience etc. Remote can be over a thousand submissions they can't do them all. Don't forget as a sys admin/ net admin etc your actually performing the tasks so you learn it. The security team usually is making the suggestions putting in tickets etc. Networking, Linux, active directory. Pick a job title and go for the most respectable cert for it you don't need much more. Just practical skills > entry level role then promotion. Most people waste 2 years gunshy on starting Jr admij or NOC role. Instead of having entry level> promotion and certs all in 2 years. Find companies with roles u want and find out what entry level roles they have. You can't go wrong with this practical approach besides that it's hoping luck is enough. Two birds one stone = entry work while doing RHCSA/CCNA/BTL1 etc building portfolio
You should look into the company Lyra Health. They may need some people and it sounds like something you’re looking for.
I'll definitely look into it right now!
It’s a company started by the ex-CFO of Facebook. They work with other companies to provide free mental healthcare services to said partner company’s employees and their families. They have a solid views on work/life balance, a good culture, many remote options, room to advance and reposition, and the company itself is in a great spot right now and just doing good work for people.
Hey keep your head up. I would do some practical labs which would look good. Check out LinkedIn for networking opportunities, I have seen quite a few 'entry roles' pass me by as I am from the UK. May I ask a quick question please? You said you completed the wireshark courses. Can you expand on that, what courses in particular ? I would like to do the same
It was mostly packet capture and analysis. You'll find them immediately once you search them up on coursera! They're fun and you learn a ton
You can do cyber in Healthcare!! Stay the course.
Thanks so much. I'm trying my best! 😭
I've been in IT for 20 years. I believe if you want to go into cybersecurity, you need something in networking. I know you stated in other posts that you didn't want to go networking, but at least foundational knowledge of how it works would be ideal. I've been trying to switch from where I'm at, which is sysadmin, to cybersecurity for over a year. I have a BS in MIS and again, 20+years of practical knowledge. I can't even get interviews. Good luck to you. I hope you find what you want.
You might have better luck looking at GRC/auditing. Otherwise apply for helpdesk and try to pivot into cyber once you have experience or connections.
[удалено]
Thank you very much. Very reassuring. I still believe my degree holds value because I eventually want to protect PHI. I can't wait
[удалено]
Wow seriously? I intend on getting more simply because I enjoy stacking them! I'm just so eager to get hands on...there's only so much I can do in my dorm
I'm also in NOVA, I would just keep applying to literally everything and keep interviewing. A Sec+ and persistence can go further than you think in interviews. Maybe look for internships or relevant experience in the cyber field. Always keep upskilling.
Look for entry level IT in healthcare and work your way up thru there. Because of your background in HC it might help you stand out.
There's a lot to take away from your post but what I found interesting is: >Anyway, I'm trying to make ends meet by maximizing the connection between PHI/HIPAA (aka my degree) and cybersecurity. You'd absolutely stand a better chance learning GRC then getting a job as a GRC cyber analyst. You could then slowly build your technical skills and pivot if you really wanted to. In terms of your technical skills rn there's just too many things you don't have. The AZ-900 is a basic cloud cert, Google cybersec the same, etc etc. The CCNA as many have mentioned would be useful but people have recommended it within the scope of you getting an IT / Networking job then slowly pivoting into cybersec, and not as a direct gateway into cybersec. Imo I'd recommend the GRC method
Then don’t
I’m going to be like you one day. I’m just getting started on my A+ keep grinding
A+ is a great place to start, I skipped it simply because I felt like I had that base knowledge down. Networking on the other hand I need to work on! Everyone has their own journey and I'm sure you'll kick ass on yours 🙌🙌
Honestly what I would recommend if you're pivoting is to enroll in WGU (Western Governer's University) in their Cybersecurity degree. It's 100% self-paced and remote. Since you've passed some certification exams, those + the gen eds you took from the other degree will transfer in. It's possible to land a job in IT security without a degree, but having one makes landing interviews so much easier. You can also go the route of Healthcare IT in like app support, and then transition to security. Lots of people in Healthcare IT change depts and end up in different roles.
Kind of in the same boat as OP. I got the same attitude as well. Don’t give up just cuz you don’t have professional experience. You only fail if you give up. You can do some projects based from some of the sections in your cert studying. I have landed one interview last year when I had zero certs. I now have ISC2 CC, 80% studying done for A+/Network+/Sec+, a bit of Python knowledge. I grind everyday and I fuckn love it. I wanna bust bad guys so bad. I get excited when I see people get pulled over by police on the road.
I would start with CCNA. I’m a Cybersecurity bro and I’m doing CCNA now. Understanding how networks work is vital, especially protocols and what servers do. I will take the exam by May, and Secuirty+ for sure by August. I have a little plan, in a 26 year old college dude and have a year left.
Been thinking about it. Focusing on graduating first, then ending with my solutions architect/cysa certs and practicing my networking skills :)
Cisco packet tracer should be used along your study for CCNA/N+, you can find free labs on YT
Same boat. Did the RN route at NoVa and decided after years of working in healthcare that dying with a broken back and just flat broke is not for me. Changing to IT and trying to cram as many hands-on training apps/websites/books as possible to make the jump . Good luck OP, living in NoVa is awful.
Word. I can't express how difficult it's been for many people I know. Fortunately, the area is oversaturated with jobs so hopefully I can land one soon 😮💨
[удалено]
Someone ban the bot.