Entering Cybersecurity Space

[alk005]

I’m a 3rd-year business major, but lately I’ve been really drawn to cybersecurity. After seeing friends with small businesses get hit by data breaches, it made me realize how real these threats are—especially with AI and LLMs becoming more powerful. I want to explore how I can pivot into this space and use my background to make an impact.

Anyone else made a similar switch or have advice on where to start?

[Spirnia]

I’ll provide you with a few website links which I recommend you follow-up on.

These will be your leads!

I hope you find value in them!

Follow-up on them.

ISC2.org:

- Become an ISC2 candidate: https://www.isc2.org/candidate

- Learn about the CC certification: https://www.isc2.org/landing/1mcc

Reddit.com

- Join Reddit cybersecurity-related communities such as: ISC2, CompTIA, Resumes, SecurityCareerAdvice.

CompTIA.org

- Learn about their introductory certification offerings: Tech+, A+, Network+, Security+.

Discord.com

- Join legitimate cybersecurity Discord groups: CertificationStation.org (new name CyberSecStation).

TryHackMe.com

- Join and choose a path to study.

ACM.org

- Join as a college student.

LinkedIn.com/Learning

- See if your local library provides you with free access.

- If not, check out the course offerings and decide whether you’d like to join for a monthly fee.

Udemy.com

- See if your local library provides you with free access.

- If not, check out their course offerings and decide whether you’d like to try out their top-rated courses.

- Always wait for a sale. Don’t pay full-price!

Coursera.org

- See if you like any of their course offerings from Google, ISC2, and/or IBM.

YouTube.com

- Join cybersecurity-related channels: CertificationStation, CompTIA, ISC2TV, Pearson VUE, PowerCert Animated Videos.

Best wishes!

[akkem]

Start with IT Fundamentals if you are not familiar:
- Operating systems (Windows, Linux)
- Networking (TCP/IP, ports, protocols)
- Basic command line skills

Explore Cybersecurity Domains:
- Security operations
- Vulnerability management
- Cloud security
- Penetration testing (ethical hacking)
- Governance, risk, and compliance (GRC)

Start with entry-level certifications:
- CompTIA Security+
- (ISC)² Certified in Cybersecurity (CC)

[Spirnia]

CompTIA IT Fundamentals+ is extremely outdated and is being replaced with CompTIA Tech+.

I would also like to add the following websites which I had forgotten about earlier:

- https://niccs.cisa.gov/workforce-development/cyber-career-pathways-tool

- https://www.cyberseek.org

- https://www.brighttalk.com

- ONET Online: onetonline.org

US Department of Labor:

- https://www.bls.gov/ooh/computer-and-information-technology/

- https://www.bls.gov/ooh/computer-and-information-technology/information-security-analysts.htm

Podcasts:

- Cybersecurity Headlines

- Cybersecurity Today

- SANS Internet Stormcenter Daily Cyber Security Podcast

- Cyberwire Daily

- Get Hired with Andrew Seaman

SANS Cyber Academy: https://www.sans.org/cyber-academy/

[Spirnia]

Additionally, you may find this list of training providers handy.

I have personally used all of the providers listed here, at sometime, over the last eight years.

(In alphabetical  order)

Boson

CBTNuggets

Cybrary

HowToNetwork

LinkedIn Learning 

MeasureUp

O'Reilly

Pluralsight

ProfessorMesser

Skillsoft

Udemy

[emb021]

Adding to the several posts by @Spirnia I would add the following:

NETWORKING with cybersecurity peers is important.  Look for local chapters of ISSA, ISC2, ISACA, et al and join as a student member.  Chat with the members and learn about what they do and how they got there.  Keep in mind that networking is a LONG TERM activity.  It can take several years to pay off, but I know of several people (myself included) that got their jobs due to networking.

Attend local infosec events.  Look for BSides conferences to attend.  Many have lower pricing for students and some are even held at local colleges.  Many of these will have career or job tracks.  Consider attending "hacker summer camp" in Las Vegas (Black Hat, BSides Las Vegas, Defcon).

Look for ways to get experience with companies via internships.

[alk005]

Hello, and thanks so much for the advice! I really appreciate the breakdown; it's super helpful. However, I've got a few follow-up questions if you don't mind:

Do you think I should go with the CompTia Security + or the ISC Certified in Cybersecurity first if I want to work in risk/vulnerability management eventually? Or does the order not matter? Also, would YouTube videos suffice in learning the IT fundamentals? Any specific sources for recommending them?

Thank you for your time!

[alk005]

Wow, thank you so much for taking the time to put all of this together! This has been invaluable. I will definitely make sure to start working through these resources step by step. I really appreciate how you organized your recommendations. Also, I'm curious: out of everything you've listed, were there 2 or 3 resources that made the biggest impact on you when you were starting out? Id love to know which ones helped you the most or maybe learn more about your personal study path for your early days

- Thanks again for your guidance

[alk005]

Hi Mr Brown,

Thank you for sharing this! I really appreciate your taking the time to offer such actionable advice. There was plenty of advice that I would have never considered, like joining local chapters, so I appreciate that. When you were just starting out, how did you approach networking events? I want to make the most out of those kinds of opportunities without coming off as awkward or even too forward.

Thanks again for the insight!

[emb021]

@alk005 First off I would say that with any networking is that this is a long term effort.  Don't go to an event expecting to getting a job.  You are working to making connections.  This is something that may not pay off for months or years later. 

Note people and their jobs.  Collect business cards if any have them.  Think about making your own.  I used Vistaprint to create my own personal business card.  Make sure you have a good LinkedIn account and expect to connect to other's accounts.

Chat and get to know others.  While its great to connect with people who are doing what you want to do, don't overlook other people who may be at your level or are doing something a little different.  Find out about the other person, and let them know a little about yourself.

But never be pushy.  

Hope this helps.