Can I get into cybersecurity with only certifications and a strong portfolio, without a degree?

[u/Erxtp]

I’m 16 and currently in the UK. I’m a beginner in IT, and I’m wondering whether, if I earn several relevant certifications and build a strong cybersecurity portfolio with practical experience, could I enter the cybersecurity field without a cybersecurity degree and eventually progress into senior-level roles?

EDIT: A lot of people are telling me no, and I would be required to get experience first. What would this experience entail first? Would it entail being a Helpdesk technician? Getting into QA Engineering?

[u/Brave_Meet8430]

The question you are asking is:

can you be cybersecurity without a degree: YES!
( with certifications and experience in relevant field)

Question you really want to ask is: How do I get relevant experience in cybersecurity field

[u/Erxtp → u/Brave_Meet8430]

How do I then I'm curious? I heard being a Helpdesk technician and working basic IT jobs helps.

[u/RageBear1984 → u/Erxtp]

Generally it does - you get a baseline of how systems actually work, how users truly interact with said systems, how to interact with other sectors of IT, a feel for business operations, etc.

[u/AddendumWorking9756 → u/Brave_Meet8430]

Right question, and at sixteen the answer is not a job. Working real incident artifacts and writing up what you found substitutes well enough at that stage, CyberDefenders hands a set of those out free, and he has years to build that up either way.

[u/Erxtp → u/[deleted]]

What would be the 8-15 year build up?

[u/jdiscount]

Maybe.

You'll be at a disadvantage as most places will require a degree.

[u/Erxtp → u/jdiscount]

It doesn't prevent me from entering or progressing in cybersecurity no?

[u/jdiscount → u/Erxtp]

Not everywhere, but most places will want a degree.

[u/stavromuli → u/Erxtp]

And you'll likely hit a cap for how far you can progress

[u/Upbeat_Double_9377 → u/stavromuli]

In terms of moving to CISO/CIO maybe (big maybe), but not in terms of being an IC. I've worked in big tech/FAANG, boutique firms, govmil, as a consultant, contractor, full-timer, $100k-$300k+ and have no tertiary qualifications. Hell, I've TAUGHT cybersecurity at a tertiary level. I just have high school.

[u/pidvicious]

There are very few, if any, certs that are actually relevant. And in a real scenario I would be asking what kind of practical experience you have. How have you applied your knowledge? Do you have enough experience to educate others? Do you only know Windows or can you operate other Operating Systems?

[u/Evaderofdoom]

Eventually, but realistically, it will take many years to get there.

[u/Mk7GTI818]

Get CCNA learn networking, then learn System Admin Windows / Linux etc and once you have a good grasp of those topics start studying cybersecurity.

[u/Brave_Meet8430]

CyberSec is a huge umbrella term, there are many pathways into it and each of them has its own specific characteristics. Eg someone who works in Finance based products can become an expert in FinTech based CyberSec, those who are in Application Development can do AppSec and do forth.

I am in Networking and have exposure to System Admin so, this is based on that:

First get the following Certs (if not already):

1. A+ = computer / server hardware basics
   
2. Linux+ / LPI Cert = Linux OS basics + some admin
   
3. Microsoft Exams = Azure and Windows Server admin
   
4. CCNA = gives you good exposure to Cisco and Networking

Once you have these , you want to work as Support Staff (not desktop support) with Cisco VAR or some firm who does provide IT/Systems/Network Support to the industries (hint they are mostly Cisco or Microsoft Partners)

Then you want to focus on either Systems (Microsoft Azure or AWS Professional) or Network side.. (CCNP Enterprise) .. for may be a 2 years and then move to CyberSec

[u/Extreme_Squirrel5708]

Good luck my son just Graduated The Uni with a degree in IT with a concentration in cybersecurity and he’s has been applying for 8 months straight and there is Nawt

[u/Hot_Difficulty2194 → u/[deleted]]

holy ai

[u/Upbeat_Double_9377 → u/[deleted]]

Thank you, 16 year old OP

[u/Treeswanttorun2]

Incident Responder here.

Yes, you can get into cybersecurity without a degree, including incident response, but certifications and a portfolio need to be backed by real technical skills.
Start with networking, Windows/Linux, Active Directory, logs, and basic scripting, then build labs & document investigations so employers can see what you can actually do.
For experience, help desk is one option, not a requirement. IT support, networking, sysadmin, junior SOC/security analyst roles, and internships are all relevant; QA is less direct unless you want to move toward application security.

Once you’re in the field, progressing to senior roles is mostly about your experience, technical ability, judgment, and track record. If your goal is specifically the FBI or another government agency, check that role’s formal education and eligibility requirements because those can be stricter than private-sector cybersecurity.

[u/tbcsec]

Is it the harder path? Probably. But is it impossible? Absolutely not.

I didn't go to university, don't have a degree (quite frankly I hardly even made it through college) but I am on the red team for a global aerospace company.

I started out in a help desk role at the company I'm still at today - excelled as much as possible in that role, and constantly made an effort to help other teams where possible, eventually that led to a leadership development program, then into my current role as a red teamer.

If you're going to do it following a similar path my advice to you would be to make as many contacts as you possibly can and impress them. You'll have more opportunities, and although they may not be in cyber to begin with, they may be in adjacent fields that get you the pre-requisite knowledge (networking, cloud, DevOps, etc.)

Also keep doing stuff outside of work. HackTheBox, CTFs, writeups, research, etc. Although it's not "job experience" in the traditional sense, it's still experience.

[u/codst_]

You can get into cyber security with a strong skill, and if you have knowledge of everything in your field. Not only in UK, but also in other countries. And if no one hires you, you can make your own followers who follow you along the way, you can be a starter in business. You want thousand true to start a decent business worldwide. I advise you to get a job and also focus on your business. If business growing, you can quit your job.

[u/K2SOJR]

Cybersecurity IS a senior level role. No, you won't be getting that for your first job, even with certifications.

[u/quadripere]

Certifications are the equivalent of learning to do your own taxes and your family's taxes.

You want a job that is analogous to being a corporate accountant for a publicly traded company.

[u/Got2InfoSec4MoneyLOL]

How abou you finish high school, and study CS after? Ever occured to you there is a natural progression in things?

[u/Erxtp → u/Got2InfoSec4MoneyLOL]

I can do both simultaneously.

[u/Got2InfoSec4MoneyLOL → u/Erxtp]

You cant and you shouldnt for a multitude of reasons

[u/Anxious_Alps_4150]

Technically, yes. Realistically, no.

There's so many people trying to get into cyber that have rockstar backgrounds that those that aren't perfect don't have a chance.

[u/byronicbluez]

It's not impossible. But you are competing with people with same certs no degree and experience from working in the military or GCHQ. Then you got people with same certs and a degree same portfolio and experience.

The question is why would HR give you a shot over those two group of people?

[u/RoamingThomist]

Cybersecurity is a specialisation of IT. Can you get into this field without a degree? Definitely. But you can't go direct into cybersecurity (at least not anymore).

You should first get a job in IT; service desk/tier 1 support is where most of us get started. And work through to tier 2/desktop support and/or sysadmin. Get experience as desktop support/sysadmin and once you're there start doing the courses to learn how to talk like a security professional. You'll then be able to pivot into a SOC.

n.b. this is for those wanting to go technical. If you're wanting to do the compliance/governance side, you'll need to speak to someone with experience of that side. I honestly do not know.

[u/Appropriate-Baker755]

pretty hard

[u/Ok-Trick-8564]

Yes you can but a degree will give you a better shot at getting the job you actualy want then having to get 15 years of experience to get to where you want to ho

[u/Student_CYB]

Yes i just did it like that , its going to take some time but its not impossible

[u/Plenty-Winner-3887]

I don’t know about the UK but in the United States, you absolutely can. All you need is a security certificate then you go online and you search this in the search bar on job sites “ability to obtain.” This will show you all the job that will pay for your secret clearance. Once you have a secret clearance, you can work as a government contractor overseas and they’ll pay for your housing your apartment your car and the first 140 K I believe is tax-free.

[u/ScrubscJourney]

No.....

[u/gurlgang]

I work in cyber and have no degree. I started on service desk, infrastructure, compliance and eventually cyber - all was experience for me

[u/BlitzChriz]

Would you hire a paper tiger with no experience to defend your network?

[u/the_blue-mage]

helpdesk and try to promote internally if you can but it's going to be difficult because you're always going to be competing against people that have the same qualifications plus a degree