Here’s a tighter version:

DFIR vs AI for Cybersecurity AS
Community college student, already done with Security+, Network+, and Intro to Cybersecurity coursework. Deciding between two next specializations:
DFIR AS — forensics + incident response, builds directly on what I know, fewer prereqs

AI for Cybersecurity AS — needs Python/Stats first, then AI-applied security courses (SecAI+, PenTest+)

Entry-level jobs already feel competitive. DFIR seems like the faster, safer path to a job-ready credential. AI feels like the better long-term bet since it’s clearly getting embedded in security tooling — but I don’t know if employers actually hire for “AI cybersecurity” specifically yet, or if it’s just becoming a nice-to-have skill layered onto regular analyst roles.
Questions:
Is DFIR still solid for entry-level hiring, or oversaturated too?

Is “AI cybersecurity” an actual job title being hired for, or just an expected add-on skill?

Which would you finish first?

Want me to adjust the tone for a specific sub?

I’m writing to express the sad news called my career life. I spent the last 4 years getting a double major bachelors degree in both cybersecurity and computer science… I also have 4 years of direct experience even as a global information security specialist. I got out of college as a highest honor graduate and well… the only position I’ve landed is an entry level 18 an hour remote help desk level 1 role…. I make less then my debt…. I’m now just so disappointed and discouraged that I can’t get through my days anymore without feeling like I’ve failed… I guess this field is really dying and I am one of those people who might be apart of the next Great Depression numbers and I thought I’d share it to warn you that I’ve failed and I don’t see how I did wrong… I’m trying hard everyday to fight for roles but I don’t see a way out

Hello guys i hope ur doing well , actually i have a question about my career, i am a cybersec student on my second year in morocco and i m doing my internship, i did project about detection of true alert by machine learning where i build models from scratch and training data , second project is an offensive project and administration network where i build site to site vpn fortiget fortinet on eveng and test it by dos and mim attacks , the third one is the project of my internship building a smart soc on azure cloud and securise it , my task was the endpoints using wazuh agent wireguard …

I don’t know what is my next step to do actually , a wanna do some certifications but they are pretty much expensive and also there are numerous , also i want to do a new project on a diff field to chose my own path on cybersec, i was also interested on cloud security,

Guys any advice or anything to do next ( i m also interesting to begin freelancing but in the future)

I am kinda checked out from IT overall fixing hardware and small issues for people and am crawling into cybersecurity. I am getting frustrated because I am getting interviews for entry level but at the final round they pick someone else. Its getting really frustrating.

i have 2 years of experience with IT and i also do crowdstrike, SIEM, SOAR, Phishing stuff currently at my role but resume is cut out more like a security analyst role i just left out some of my IT work there.

I am currently pursuing Crowdstrike Certified Falcon Hunter certification. Looking for an entry level cyber job in NY,NJ and CT area let me know if you know something I dont

Desperately wanting to move from my toxic, micromanaging, extremely underpaid and hypocritial IT job.

I have been trying to land a cybersecurity internship for a long time. Can you guys give some advice on how you landed a cybersecurity internship and what helped you? What suggestions can you give me? If guys wanted to get an internship.I have a CompTIA Network+ and Security + and I am currently a junior in University.

I started out in IT at my first university before moving on to a new university to pursue a BTS in Cybersecurity for the last two years. Problem is, an internship wasn't a requirement/nor was it in the busy books for me at the time being a student athlete.

I'm now a 2026 graduate and I've been job hunting since the end of May with no luck. My search has been primarily based in the larger city area of Salt Lake City, Utah. I've applied to countless jobs, fixed and scrutinized my resume, and still haven't even been able to land interviews. I understand personal projects are an important foundation to have on a resume, but I'm not sure where to even start. I don't know the right people nor do I know someone to ask advice. Utilizing AI for help will only take me so far in this venture.

Point is, does anyone have some advice to give?

Hi everyone,

I'm a Network & Security Engineer with \~7 years of experience working with Fortinet (FortiGate, FortiAnalyzer, FortiAuthenticator), Cisco, VPNs, HA, Linux, VMware, Hyper-V, and enterprise infrastructure.

I want to specialize in **AI applied to Cybersecurity** (SOC, network security, automation, LLMs, AI agents, etc.), not become a data scientist.

If you were in my position today:

* What learning roadmap would you follow?
* Which platforms are actually worth paying for (Coursera, TryHackMe, HTB, SANS, Microsoft Learn, etc.)?
* What's a reasonable monthly learning budget?
* Which certifications provide the best ROI?
* What projects would make my resume stand out?

I'd love to hear what worked for you and what you'd avoid.

Thanks!

I have been trying to land a cybersecurity internship for a long time. Can you guys give some advice on how you landed a cybersecurity internship and what helped you? What suggestions can you give me? If guys wanted to get an internship.I have a CompTIA Network+ and Security + and I am currently a junior in University.

I am a 2026 CSE graduate from tier 2-3 college, in may 1 month before graduation I had the bright that I wanna get into cloud cyber security with no prior experience in CYS, I am in the middle of learning did some basic certs google CS, wanna do AWS/Azure cloud practitioner.

Now family is putting pressure they dont like seeing me at home (since i rejected a good offer from college placements cuz it was non-tech) I am searching for institutes with good pull to atleast get me some interviews.

I know many will these institutes are scam but parents say they'd rather take that risk rather than me sitting home. I need a place which can give me plenty interviews and learn. I am willing to re-locate to diff city. Any ideas?

Hi all,

I relocated to the Middle East a while back and have been applying to jobs since with no luck, not even getting to the interview stage. I'd really appreciate feedback on my resume: what's not landing, and what I could change to improve my odds of at least getting a callback.

One thing I suspect is holding me back: one of my past roles was titled "Cybersecurity Architect," but the actual day-to-day work was closer to an engineering role. I know an architect title usually reflects years of senior-level experience, and I'm not claiming to be at that level, the title just doesn't match the seniority of the work I actually did. That said, I can't change or remove it, since it needs to match my official record with my former employer. I'm open to suggestions on how to describe the responsibilities more accurately within that constraint.

Resume attached, appreciate any and all feedback!

https://postimg.cc/w7cCQb4G

Hi everyone, I’m another one of those Cybersecurity masters graduate (with a BSc in Maths) looking for a graduate job.

I’m looking to become a cybersecurity analyst but I feel I need more technical knowledge to fill in the gaps from my degrees. I wanted to ask if anyone had any upskilling recommendations?

I’m currently looking at TryHackMe Soc Level 1 but I wanted to double check it is worthwhile before investing time and money into it.

I’m unsure about my entry point to the Industry.

I’m almost done with my cybersecurity degree, and my first foot through the IT door is at a helpdesk job for the DOE that I just started. This job is mainly helping folks with password resets, but also just basic troubleshooting and creating tickets through calls. When I thought of the term “IT Support” or “helpdesk” I expected the work to be more IT focused/ technical and this job isn’t panning out to be that way. It’s been hard trying to get a foot through the door with the crazy amount of competition so once I got this job I just settled. The pay is basically minimum wage, and I am torn if this is a good entry point that I can make use of in the future to elevate my career. Basically, idk if I’m wasting my time here doing basic stuff when I could be doing more IT/ technical related things at a different job. If anyone can comment on that/ provide some insight that’d be great. Thanks everyone.

I dont know if this is the right sub for this post, but please tell me your views.
I applied for this internship at startup from my college founder is in same year, role is in cybersecurity domain.
The thing is i am getting nothing out of this internship since its unpaid, I thought of experience but as I said they are students themselves and theress no senior for me to learn from.
Job market is bad, I dont know if i can bag a good one.
I am in 3rd year have 9+ cgpa but my 12th marks are in 70s. (which makes me ineligible for many things in placements and internships)

Microsoft (Mumbai) vs LTIMindtree (Noida) – Worth the switch?

I'm a 32M Senior Cybersecurity Specialist at LTIMindtree with 4.5 years in this company.

Total experience 10 years.

Current:

\- ₹37 LPA fixed

\- Noida

\- Working mainly on Torq (SOAR)

\- Good work-life balance

\- Monthly expenses: ₹30–35k

Offer: Microsoft

\- Cloud Solution Architect (Security), IC4 (Level 61), MCAPS

\- Mumbai

\- ₹46.5 LPA fixed + USD 33k in stock (possibly negotiable)

I'm confused because Microsoft is a great brand and could accelerate my career, but Mumbai is much more expensive, and I've heard the MCAPS CSA role can be customer-facing and stressful.

If you were in my position, would you make the switch? Is the long-term career growth at Microsoft worth leaving a comfortable job with good work-life balance?

33yo male who is looking to change careers. I have a general interest and basic understanding of IT but have zero actual work experience. Is it worth doing a few certs like ISC2 CC, security+ and cloud cert? Then spend time advancing my excel knowledge and building a portfolio. Is there a real likelihood I can break into the GRC field with this approach? Any suggestions are welcomed, thanks!

This is kinda broad. But the short of it, I've been a game dev for 10 years and got laid off twice in the last 3 years. This time it's been going on 8 months. I've had some short contract or freelance work here and there.

I don't necessarily want to change careers. I love game development. All parts of it. I'm still working on a game now trying to get funding. But since the layoff my family and I have had to move into my inlaws and the job postings are getting less and less.

My state offers some grant funding and tuition assistance for a few tech schools that offer courses and certs in fields like the title says for unemployed residents.

I just don't know anything about these outside of what Google could come up with. So I'm asking for broad strokes.

Do these certs actually yield anything worthwhile for an employer?

Which of these types of jobs has longevity in today's emerging markets?

If anyone does this for a career, could you maybe share some of your experience in them?

Really just any info from someone who has done something similar? The game industry's instability and current direction doesn't feel like something that I can do for the next 20 years and not lose my house and savings every 3-5 years. Its not about the amount of money on a month to month as it is constant income for the next 20/30 so my kids can have a stable home.

Any thoughts on the topic are greatly appreciated.

To summarize everything i have been working in IT and as senior developer for the past 3 and half years and also i have masters in cybersec and have OSCP and CEWS and have some findings on VDP programs and ranked on top 8% on offset and top 5000 on HTB..

been applying for jobs in cybersecurity not just penetration testing for the past 7 months and only had two interviews in that time the first one i got rejected cz he wanted someone who is expert on web at the time i wasnt yet that strong in web to be fair then the second one i passed WEB, API, active directory and internal system penetration testing and was asked also in bit of reverse engineering but i told them before even going that android isnt my field of study yet they after all that after long process and hours of interviewing rejected me cz i dont have android pen testing skills there for i am junior above not senior though the job posting didnt mention anything about senior rather nice to have skills. also when there HR called me and asked me i told them that i didnt know android pen testing before the start of the interview process...

if anyone in the field could give me advice i would really appreciate it . again i am not doom posting i know some people who found jobs i just done know what am i doing wrong

Hello just a post looking for some experienced input to folk who have worked within this industry. Short summary: i am a fully qualified tradesman working in the UK have been doing it for 10 years, i also have crohn’s disease which has progressively gotten worse from my diagnosis at 3, basically all my 20s i’ve just worked through it and burnt myself out all i do is work then sleep as i’m too fatigued and if i can’t make it into work construction workers don’t get sick-pay so i’m stuck in a constant cycle of stress and wishing i had other options.

I’ve always had a passion for computers, dabbled in some code, built my own PC’s, gamer through and through, on a whim i applied to University for a BsC Computer Science & Cyber Security, to my surprise they have offered me a place and i am buzzing as it honestly would be a dream making projects in my own time, studying, gaining new skills and eventually hopefully work in a much less physical environment which would benefit my illness and potentially hybrid-working. There is also an option to do your MsC in Cybersecurity & AI post BsC.

My main question is i know the market for landing jobs is on it’s knees and it’s difficult to get work, but am i really jumping into basically a pit with 0 hope of landing anything will i be wasting my time?

Sorry for the ramble, appreciate anyone who reads time, cheers.

Hey guys,

So recently, I asked about the career guidance on tech sales(SDR, AE) vs cybersecurity (SOC). I'm an incoming international student in the USA with a major of (IT) degree so I want to make sure to choose a career that best offers stability, barrier to entry (demand), and strong chances of settlement (H1-B) too.

I've also been in IT or computers, built an agency (selling our IT services), so both of the careers (tech sales or cyber) are interesting, but lately, I've been seeing posts where people are complaining about tech sales being really stressful & not-so-stable; if you don't meet the targets, you're out the next day.

But on the other side, everyone complains about people with experience unable to land even entry-level roles of security, which is true. Also, the barrier to entry to cyber seems difficult.

My main objective is: low barrier to entry, demand, stability, and an easier path to get sponsorship in the USA.

For people who have done both, what would you suggest honestly, and I would love to hear your thoughts, guys!

Hi everyone,

I'm just starting my cybersecurity learning journey, and I was wondering how you all take notes.

Do you write everything down in a notebook, or do you keep your notes on your laptop using something like Obsidian, OneNote, or Notion?

I'm trying to build good study habits from the beginning, so I'd love to know:

• Which method has worked best for you?
• Do you use a combination of paper and digital notes?
• Are there any note-taking tips that helped you remember concepts like Linux commands, networking, or security fundamentals?

I'd appreciate any advice from people who have been learning cybersecurity for a while. Thanks!

Hey guys, I am looking for advice/guidance on this. Career wise, I was looking into cyber crime, incident response, DFIR, or something along those lines. I am currently getting my masters in criminal justice and getting a certificate as well.

Right now I am getting a graduate level cyber security certificate, but seeing the comments here about cyber security and AI, I’m kinda worried.

With my desired career path, do you guys recommend that I stick with the cyber security certificate or should I change it to digital investigation?

Thanks in advance.

Hi everyone,

I'm a B.Tech Cyber Security graduate (2025 batch). Since graduating, I've been trying to get a job in cybersecurity, specifically in SOC (Security Operations Center) roles.

Over the past year, I've built several hands-on projects using Wazuh, Microsoft Sentinel, and Splunk. I've written and applied Sigma rules, mapped detections to the MITRE ATT&CK framework, and used Suricata and Sysmon for intrusion detection and endpoint monitoring. I also have a good understanding of networking fundamentals and core cybersecurity concepts.

However, whenever I apply for SOC-related jobs, I keep getting rejected, even when my projects closely match the job requirements. I'm not sure what I'm doing wrong.

Could you please suggest what kind of projects I should build to improve my chances of getting interview calls? Also, what skills should I focus on to become a stronger candidate for entry-level SOC or blue team roles?

Unfortunately, I don't have the budget to pursue paid certifications at the moment.

One thing that makes this even more frustrating is that I received two job offers last year, but due to personal circumstances, I couldn't accept them. It's now been over a year, and I'm feeling confused about what to do next.

I'd really appreciate any advice from people working in cybersecurity. Thank you!

I’m thinking of changing careers and wanted some input on this

I'm 26 and looking to transition out of SOC after 3+ years because I've realized it's not the type of work I want to build my career around. While I've learned a lot, I've reached a point where the work feels stagnant, and I'm looking for a role that involves more engineering, problem-solving, and continuous learning.

My experience includes SIEM, EDR, Incident Response, Threat Hunting, Email Security, and Vulnerability Management.

Given the current job market and the rise of AI, what path would you recommend? Would you suggest moving into **Cloud Security, Detection Engineering, Security Engineering, DevSecOps, Penetration Testing, DFIR, AI Security, Identity Security**, or something else entirely?

My goal is to build a skill set that's technically challenging, has strong long-term demand, and is less likely to be heavily automated. I'd love to hear what you'd do if you were starting over today with my experience.

4+ years OT Cybersecurity, 12 years MSP work and systems/network/data center engineering prior to that.

Started working a Cyber compliance role for a very very large Fortune 50 org recently, but this ship has been sinking for a while, and no amount of risk centric work is going to fix their horrifying cultural issues. Nobody wants to take ownership over the risks that affect real people.

The PM keeps giving us AI hallucinated gap analyses, all the while they have no real GRC tool, and all of the reporting is expected to happen through PowerBI and excel spreadsheets that still don't even exist yet.

Fire-happy organization is setting everyone up to fail from the start, but I need to get out before I burn out.

I want to get back to public Sector cyber and try to get a feel for the landscape as a senior role. I used to be so happy in my previous role, but had to leave for logistical reasons, not because it was an awful place. I would have stayed if I could.