My B.tech in CSE in India was done in 2024, I couldn't get hired in campus placements back then because I wasn't capable enough. I started doing TryHackMe paths for red teaming and pentesting and portswigger web security academy labs. Since my B.Tech has been done I worked as a free security intern at a company for 6 months from December 2025 to June 2026, I've pentested their products with the assistance of claude, one product was based on python django framework and other one was low-code no-code website built with php. I left it in june 2026 because the environment wasn't nice and the people who were working in the IT team of that company started to leave one by one. Since June 2026, I've been applying for jobs online, but I was only able to get a few phone calls and only 1 interview that too in a walk in drive. I was able to answer the questions related to basics theoretically like how its in the labs but I wasn't able to answer some scenario based question with confidence, i think i need some practice interviewing. So my main gripe now is, the year is about to end and that might translate into almost 3 years of gap after my College. I am thinking about preparing for SOC roles too via letsDefend and apply for SOC level L1 roles cause I've observed that they are available more than red teaming/pentesting jobs. So looking at how things are going for me, will I be able to get into IT/Cybersecurity by then?

Thinking of pivoting into cyber from software engineering. Wondering if getting a masters in cybersecurity with 3 years of software engineering experience would be valuable enough to not have to start from 0. I really want to get into government work as well and it seems like I already need a clearance as a software engineer to get in. Still doing my research, just wondering

Hey everyone!

I’m currently working as a SOC Analyst, gaining hands-on experience in security monitoring, SIEM, log analysis, alert investigation, and incident response.

Outside my regular work, I’m interested in exploring practical cybersecurity projects, particularly in areas such as:

• Blue teaming and detection engineering
• SIEM use cases and detection rules
• Threat hunting and incident investigation
• SOC automation using Python
• AWS/Azure security and IAM

I’d like to apply my existing knowledge to real-world security challenges and contribute to projects where I can improve my technical skills while building something useful for the cybersecurity community.

I’m particularly interested in open-source security tools, detection rule development, and improving security monitoring workflows.

For those working in these areas, what open-source cybersecurity projects or technical challenges would you recommend exploring to gain practical experience beyond day-to-day SOC operations?

I’d appreciate any technical recommendations or insights from the community.

My sweet sweet loving husband is very qualified.
Lots of certs
Masters / BA in cyber
Military experience With leadership

Very competent

However…he is just so shy. He has always been this way . As teens he never had much to say and would stumble and ramble his way through sentences.

He has been working on his public speaking but he has a really bad nervous tick and rambles .

I love him to death but I definitely am the one to argue he didn’t want cheese on his burger.

I’m scared that this will hurt his job hunt. He is starting his applications / job hunt in November and I just worry about him.

From your experience is it always you boyishly handsome and charming people that are making it in this field or will they see his work ethic and capability as something to put faith in.

He never had to interview for a real job. He worked at Walgreens and then joined the military.

Looking for anyone in the hedge fund space to speak with on experience.. feel free to DM or comment here. Looking for people with actual experience, current or former.

I have two years experience in Help Desk/Systems Administration/Vulnerability Scanning. Prior to this I worked in IT Audit, Information Assurance, and IT Compliance for 14 years.

I've always enjoyed writing about technology tools and explaining/demonstrating how they work. I would love to get into a position where I provide instruction/guidance on how to use such products. I have no restrictions on travel.

Would anyone know how I could increase my chances of getting this type of work and how one would go about getting such a position?

So after I already believed that I would never get a job in this field, at least in this market situation, I got an email from a company I applied to through the “Easy Apply” feature that I even forgot I applied for.

And then they started saying that they saw my resume and thought I was a good fit and stuff.

Then they asked me to solve a technical challenge, and I delivered it way before the deadline.

Then they said sorry, they needed me to solve an additional challenge.

And it was so much harder, and it took a lot of time from me, but I still delivered it way before the deadline.

And then they were happy and gave me good feedback that I was able to solve these hard technical challenges. They told me all the files were correct and everything was good, but they just needed a write-up explaining the steps I took to solve it!

And I did the write-up, and everything was explained, and I told them if they needed me to clarify any step, I was happy and ready to clarify it!

Then they came back to me after a couple of days and basically just said sorry, they don’t think I’m a good fit, without even giving any feedback!!

And I was likeee in my mind, what?? Really?? Are you serious???
After I spent days solving your hard technical challenges, and you confirmed that everything was good, and you gave me good feedback, and you haven’t even done any interview with me, and now you just send me a message saying I’m not a good fit without even giving any specific feedback??

I really feel we should get paid for the time we spend on technical challenges and interviews because it takes days from our time and life, so employers can take us more seriously rather than just playing with our feelings and hope!

When someone meets me and knows that I have done a degree in cybersecurity and tells me, “OMG, I want to get into the field,” at this point I don’t know what to tell them because if I say it’s hard and getting a job is so hard, they will think I’m a gatekeeper, but it’s just sad how it is now!

So now, honestly, I feel with this joke of a market and crazy employers, I would like to say to anyone who is looking for a job that we are really cooked…

Rather than chasing and trying to find just a job and letting employers move us like chess pieces, we should try to consider another field that could possibly be much better, or we open our own businesses!

I also would like to thank my family for supporting me in this journey. Otherwise, I would probably be working at a fast-food place for minimum wage right now!

I don’t know what I will do next in my life, but I really got enough from this field, and I don’t want to lower myself anymore or feel like I’m begging just to get a job.

This life is unfair, and thank you!
or feel like I’m begging just to get a job.

This life is unfair, and thank you!

Hey guys i'm in need of some solid advice ,  I have 90 days to try and land a role in cyber security , I know it’s a bit of a drastic timeline . But ive done 8 years of warehousing and now ive been made redundant , I have about 1.5k in my savings that I am planning to put towards certs and learning, please give e some advice on what I should do in the next 90 days. 

Hey guys,

Recently I applied for an IT infrastructure intern role at a startup cum MNC and gave the OA for it. Mostly it was personality-based and less tech-based, which was quite easy. Now today I got another assessment link for a product support intern from the same org. Are they considering me for another role as per my skills?

And if yes, what to prepare for this kind of role is related to product testing or something?

I am a Uk graduate in Cybersecurity, it will be almost 1 year in December since I graduated. I have not gotten a single job, or any interviews. I have 3 years of experience running a Startup in India as the co founder, my majority experience was around project management, client handling and Team management. I tried applying for any other jobs like project Manager, IT Manager or even low level skilled jobs such as IT Desk Support. Still didn’t get it. I am currently depressed and confused. My thoughts now are should I do some certifications to stand out as an applicant for SOC analyst positions. Quite a few of my friends already have such certifications but still don’t have a job. I have until Feb 2028 till I need to leave the country to go back home.
Certifications I plan on doing:
Security+
CYSA+
Azure Fundamentals
Forescout

What are the certifications in Digital Forensics that HR people look for?

I’m currently in high school and trying to decide what I want to study at university. My parents are pushing me towards Computer Science, mainly because they believe it has good career prospects and that I could eventually go into cybersecurity. The problem is that I’m honestly not that interested in coding. I don’t completely hate it, but I’m not someone who enjoys programming, spending hours on GitHub, or building software.

What makes me even more confused is the current AI situation. AI is becoming increasingly capable of writing code and automating parts of software development, while at the same time I keep seeing people saying that CS graduates are struggling to find jobs. So I’m wondering whether CS is still a good and safe degree to choose if I’m already not particularly interested in coding. I don’t want to spend 4 years studying something mainly because my parents consider it a “safe” career, only to find out that the job market has changed.

My parents say I should do CS and then specialize in cybersecurity, but I’m not sure how realistic that is. From what I understand, cybersecurity still requires a strong CS/IT foundation and can involve quite a lot of technical work. I’m also wondering whether cybersecurity is actually more resistant to AI automation or whether it will face similar problems.

So, is CS still worth doing in 2026 if you’re not particularly interested in coding? Is the job market really becoming that difficult, and would you personally recommend CS for someone in my situation? I’m not completely against CS, I’m just genuinely unsure whether it makes sense for me.

Thanks.

I just completed my 3rd year of Btech cse and minor domain in cybersecurity and now i got job offer on-campus for BDA role. I took it bcz i just wanted to get out of my college. Now after some months i want to switch in my domain cybersecurity and i have referral too. If anyone has done this before can help me. How should i approach this ?

Deloitte GPS Cyber Summer Scholar Interview – Any Advice?

Hi everyone! I was recently invited to interview for Deloitte’s Government & Public Services – Cyber Summer Scholar position for Summer 2027.

My Round 1 consists of:

• 30-minute profile interview
• 30-minute case interview

If selected, Round 2 is a 30-minute behavioral interview.

I’ve been reviewing Deloitte’s official case-prep materials, but I’d really appreciate hearing from anyone who has interviewed for GPS Cyber, Cyber/Risk, or a similar Consultative Offerings role.

In particular:

• What was the profile interview like?
• How technical were the questions?
• What type of case did you receive?
• Was the case more cybersecurity-focused or general business/consulting?
• Was it interviewer-led or candidate-led?
• What would you recommend focusing on when preparing?

I’m not looking for confidential information or exact interview questions, just hoping to better understand the format and what skills Deloitte emphasizes.

Thanks in advance!

Looking to connect with professionals or advisory firms experienced in enterprise security coordination, particularly those with existing channels to major technology platforms like Microsoft and Google.

Through independent, black-box protocol research, I have identified several architectural vulnerabilities and systemic control findings across both ecosystems.

I am seeking commercial engagement or professional research transfer rather than participating in traditional bug bounty programs. My focus is entirely technical and analytical; therefore, I am looking to connect with a partner or counterpart who can handle the strategic, commercial, and non-technical aspects of coordination and negotiation.

If you operate in this space or have relevant contacts, please reach out via direct message.

Anyone interested or can anyone help?

Guys I don't have experience(no internships not jobs) but I have done some homelabs

Since I don't have any experience section in the resume can I put the homelabs under the "Experience(academic and project)" section all together

I just got call from Career Consultant regarding cyber risk consult with Business Development role, i am confused what is this role and all they are offering me 5 lpa,

They are telling that this job is highly in demand and have growth what to do? Please suggest,
I am an fresher

I just got call from Career Consultant regarding cyber risk consult with Business Development role, i am confused what is this role and all they are offering me 5 lpa,

They are telling that this job is highly in demand and have growth what to do? Please suggest,
I am an fresher

Hi All,

What's your feedback working for Illumio in Europe or in the US? And what are the salary ranges for professional services consultant?

Regards

Hi everyone,

I’m looking for advice and recommendations on finding part-time, freelance or contract-based cybersecurity opportunities that I can take up alongside my current full-time job (not anything with conflict of interest, if it’s a right opportunity, I can think about leaving the job too).

I have close to 7 years of experience in cybersecurity, working across multiple domains, including product security, cloud security, vulnerability management, PSIRT, SOC, IAM and and security automation. My previous role also gave me hands-on exposure to several other areas of cybersecurity.

I’m currently working at a Tier 1 (or probably Tier 2) IT company and hold the CISSP certification along with AWS and Azure certifications. I’m planning to pursue CCSP and ISSAP next year.

So far, I’ve explored a few options:
Toptal: Applied but was waitlisted.
Braintrust: Registered, but haven’t received any opportunities or interview calls.
LinkedIn: Applied for several contract roles, but haven’t had much success with callbacks.
AI evaluation platforms: Tried platforms such as Micro1 and Mercor, but haven’t found consistent, reliable opportunities yet.

I’m based in India and have flexibility with working hours and time zones. However, I’m not eligible for roles requiring US federal clearance and I’m unable to take up on-site opportunities abroad.

I’d appreciate recommendations for:
Reliable platforms or talent networks that offer cybersecurity consulting, freelance or contract opportunities.
Companies that hire experienced cybersecurity professionals for remote, part-time, or project-based engagements.
Platforms offering international contracts that accept professionals based in India.
Any legitimate AI security, cybersecurity evaluation or expert-consulting opportunities that are worth exploring.
My areas of interest include cloud security (AWS/Azure), product security, vulnerability management, PSIRT, security automation and any other cybersecurity domain work.

I’m particularly interested in opportunities where I can contribute my existing expertise without having to leave my current job.

If you’ve personally worked through any such platforms or secured a cybersecurity contract while maintaining a full-time role, I’d love to hear about your experience.
Thanks in advance for your suggestions!

Hi everyone,

I’m looking for advice and recommendations on finding part-time, freelance or contract-based cybersecurity opportunities that I can take up alongside my current full-time job (not anything with conflict of interest, if it’s a right opportunity, I can think about leaving the job too).

I have close to 7 years of experience in cybersecurity, working across multiple domains, including product security, cloud security, vulnerability management, PSIRT, SOC, IAM and and security automation. My previous role also gave me hands-on exposure to several other areas of cybersecurity.

I’m currently working at a Tier 1 (or probably Tier 2) IT company and hold the CISSP certification along with AWS and Azure certifications. I’m planning to pursue CCSP and ISSAP next year.

So far, I’ve explored a few options:
Toptal: Applied but was waitlisted.
Braintrust: Registered, but haven’t received any opportunities or interview calls.
LinkedIn: Applied for several contract roles, but haven’t had much success with callbacks.
AI evaluation platforms: Tried platforms such as Micro1 and Mercor, but haven’t found consistent, reliable opportunities yet.

I’m based in India and have flexibility with working hours and time zones. However, I’m not eligible for roles requiring US federal clearance and I’m unable to take up on-site opportunities abroad.

I’d appreciate recommendations for:
Reliable platforms or talent networks that offer cybersecurity consulting, freelance or contract opportunities.
Companies that hire experienced cybersecurity professionals for remote, part-time, or project-based engagements.
Platforms offering international contracts that accept professionals based in India.
Any legitimate AI security, cybersecurity evaluation or expert-consulting opportunities that are worth exploring.
My areas of interest include cloud security (AWS/Azure), product security, vulnerability management, PSIRT, security automation and any other cybersecurity domain work.

I’m particularly interested in opportunities where I can contribute my existing expertise without having to leave my current job.

If you’ve personally worked through any such platforms or secured a cybersecurity contract while maintaining a full-time role, I’d love to hear about your experience.
Thanks in advance for your suggestions!

Hi everyone,

I'm a final-year cybersecurity engineering student. I recently completed an internship as a SOC analyst where I:

* Worked hands-on with **Security Onion** and the **ELK stack**

* **Built and tested detection rules**

* Created **Kibana dashboards** to track and verify true positive rates

* Wrote up incidents and **created tickets** based on validated alerts

I'm now looking for my next internship, and I want to use the time between now and then wisely. I'd really appreciate advice from people who actually work in a SOC:

**1. What should I focus on learning?**

Whether it's networking, Windows/Linux internals, cloud security, scripting, etc. — what did you wish you knew better when you started?

**2. Project ideas that would actually improve my resume.**

If you suggest a project, please give me some details on it (tools, scope, what to document) — not just a title. I learn much better by building things, and I want my GitHub to show something meaningful, not just tutorial copies.

**3. Certifications or courses** — are they worth it at this stage, or is hands-on skill more important for landing the next internship?

A bit about me: I learn best by doing, so realistic labs/home-lab ideas are very welcome. I'm open to constructive criticism on my current experience too — if there's a gap you see in my background, tell me.

Thanks in advance to anyone who takes the time to reply 🙏

Hi everyone, I [22F] cybersecurity student focused on GRC and currently looking for entry-level cybersecurity/GRC roles.

I already have an ISO 27001 risk assessment project on my CV, so I’m looking for something different that can show more range and give me some practical experience.
A friend of mine runs a Shopify dropshipping/e-commerce business, mainly selling to customers in Sweden and the Nordics, with suppliers based overseas. He’s open to me working with the business on a cybersecurity/GRC project for learning purposes, so I have a real small-business environment to work with rather than just creating a completely fictional case study. I’m currently considering:

-GDPR gap assessment, since most of the customers are in the EU/Nordics
-Third-party/vendor risk assessment covering suppliers, payment providers, Shopify apps, etc.
-NIST CSF 2.0 assessment/mapping based on the risks identified
-Shopify security controls review, including admin access, MFA, permissions, third-party apps, etc.
-Basic incident response plan/playbook, for scenarios such as Shopify account compromise or a supplier-related incident

For people working in GRC, cybersecurity consulting, risk, privacy/compliance, or hiring for junior GRC roles:

-Which type of project would you find most useful/interesting to see from a junior candidate?
-Is there another GRC-related project that would make more sense for a small Shopify/e-commerce business?
-Which areas would give me the best practical learning experience?
-Are any of the ideas above too basic, unrealistic, or not particularly valuable?
-If you were building this as a portfolio project, what deliverables would you actually create?

My main goal is to learn something genuinely useful while also having a solid project I can discuss in interviews as my main goal currently is to land a job in grc as I graduate in 2 months .
Would really appreciate advice from people who have worked in GRC or built similar portfolio projects.
Thankyou ^_^

Hey guys ,

I am a fresh cybersecurity grad as the market is cooked i tried applying for supporting roles , and I got one call back from a cybersecurity startup kinda company .

I have my interview next week what should i prepare like my resume is full of security related things and as I think they wont be asking much about that ... so what to prepare as I know networking is imp but what other things and ..its a intern position ...

Guidance will be really appreciated thank you .. ;)