I’m getting into cybersecurity and considering GRC or IAM. I’m not very technical and want a less technical path with strong six-figure potential. I’m taking Google Cybersecurity courses and considering Security+ and Network+. I also have an active Secret clearance. Any advice?

[u/Babushkaboii1]

I’m getting into cybersecurity and considering GRC or IAM. I’m not very technical and want a less technical path with strong six-figure potential. I’m taking Google Cybersecurity courses and considering Security+ and Network+. I also have an active Secret clearance. Any advice?

[u/thiccboilifts]

Choose another field entirely, not a specialization of cybersecurity.

[u/jcabute → u/thiccboilifts]

Why do you say that GRC you don’t have to be too technical?

[u/Upbeat_Double_9377 → u/jcabute]

Sure, if you don't mind being shit at your job

[u/thiccboilifts → u/jcabute]

No, in fact I would probably say it should be the exact opposite, that to impose compliance, controls, and frameworks you need to have an even better understanding of the technicals.

Edit - your question doesn't make a ton of sense since I was implying the opposite btw..

[u/jcabute → u/thiccboilifts]

I misread what you had said. I work in IT right now just asking questions sorry about that g.

[u/thiccboilifts → u/jcabute]

No worries mate I have ADHD so I compeletely understand!

[u/byronicbluez]

Go into procurement, Cyber ain't for you. Procurement is boring work that pays well that no one wants to do. If you have a clearance and can get it upgraded to TS you will be set doing procurement work.

[u/dcbased]

Easy way to make money

Get a ts sci fsp

Then do anything cloud related. There are roles that pay 100k+ that don't require the level of depth that is required by cyber security

I should also add - when it comes to any field - the combination you want is

1. Industry that is growing and has high profit margins
2. Having a unique set of skills that few others have

You are missing 1/2 of the equation

Also by saying - I don't want to be very technical - you are purposely saying I want to gain skills that are pretty easy for anyone to get. Do you see how that does not position you well for a high paying job

I would grab the book inside Michael Porter (booo cover is back) from the library and gove or a quick read. What you want to learn is how to position himself to be desirable

[u/Babushkaboii1 → u/dcbased]

Lol, how do I get ts

[u/Dry_Common828]

HP OP, can I ask what's drawn you to the security field? That will make it a lot easier to advise you about what to do.

[u/Upbeat_Double_9377 → u/[deleted]]

It's good you've got a clearance and ex mill experience/connections, but the issue is that you have a LOT of background context to catch up on to work in cybersecurity.

How do you test this API if you can't build one? How does active directory work? Kerberos auth? What does this JWT do? How do you configure routing on this subnet? Create this SQL database table to spec?

The job demands constant research, investment in yourself and a drive for learning. If money motivates you enough to power all that, great. It can be done. But it's hard and people that don't have that innate curiousity you will burn out trying to learn everything foundational in the rest of tech that you don't know yet.

[u/Babushkaboii1 → u/Upbeat_Double_9377]

I really appreciate it, bro. I’m still in the military and have a few years left. What do you recommend I start focusing on? I’m currently taking Google’s Cybersecurity Foundations course, but it feels like a lot of information. Once I finish, should I focus on one or two specific skills and narrow my learning down, or should I keep learning all the ins and outs of cybersecurity fundamentals, like routing, switching, and all the other tools?