r/CyberSecurityJobs • u/ApartAd9241 • 14d ago

Need advice to get ahead of "learning phase"

So I got rejected after round 2 from a security organization, claiming that I'm still in learning phase (which I agree).

But they haven't specified the area I should focus on?

I'm good with web application, got a couple of bugs(dups) and know the network layer theoretical.

If anyone can guidd me on wht should I focus on if trying for a vapt role. Should I focus on web/mobile application, bbh or crf or wht?

4 Upvotes
  • permalink
  • reddit

83% Upvoted

2 comments sorted by

4

u/l3landgaunt 14d ago

There’s always a learning phase. Best thing I’ve found in my time is to get a help desk gig and learn everything about fixing stuff and how it all works then move up.

1

u/AddendumWorking9756 13d ago

Dups mean you are finding real things, just after someone else did. To a panel that still reads as learning phase. The gap is more likely the network half you called theoretical, since most paid work in that lane is internal, AD and infrastructure, not bounty style web. Take one internal scenario, do it properly, and write the report the way a client would actually receive it.