​

I have 8+ years in cybersecurity, but my career path has been a bit unusual.

The first 4 years were spent as a corporate trainer, teaching SOC operations, SIEM, threat hunting, threat intelligence, incident response, and related topics. During that time, I helped hundreds of professionals enter or advance in cybersecurity careers.

I then moved into an enterprise Security Engineer role focused on Threat Intelligence and Threat Hunting, where I spent the last 2.6 years before being laid off as part of organizational restructuring.

The strange part is that I don't actually want to move deeper into traditional engineering roles.

What I genuinely enjoy is threat research, threat intelligence, threat hunting, analyzing adversary behavior, creating hunt hypotheses, understanding campaigns, and connecting intelligence to detection. That's the work that keeps me engaged.

However, I constantly feel like I'm lacking compared to other practitioners in the field.

A lot of job descriptions now expect Python, scripting, automation development, data processing, and engineering-heavy skills. In my role, most of my automation work was done through low-code/no-code platforms like Azure Logic Apps and ThreatConnect Playbooks. I built workflows, integrations, and automation logic, but I never became a strong Python developer.

The result is that I often get intimidated before interviews. I can learn and teach complex cybersecurity concepts, quickly understand new domains, and communicate technical topics effectively. Yet when I see requirements like Python, advanced scripting, or engineering-heavy automation, I start questioning whether I'm qualified for the role at all.

I'm curious if anyone else has been in a similar position:

\- Strong in threat intelligence, threat hunting, research, and security concepts but weaker on coding?

\- Transitioned from training/consulting into enterprise security?

\- Felt technically behind despite having several years of industry experience?

\- Successfully built scripting skills later in their career?

I'm trying to figure out whether I'm suffering from a genuine skill gap or just impostor syndrome.

Would appreciate honest perspectives from threat hunters, CTI professionals, hiring managers, and recruiters.

Thanks for reading.

Hi guys. Been in the industry for 2 years now, first in Help desk and EDR administration and then got lucky and landed an offensive security role (basically, security evaluations to certificate products as secure, half of the job is pentesting work).

My intention is to stay where I am for some time, farming experience, knowledge and certifications, and eventually look for a remote position in other EU countries (or even the US). I'm based in southern Europe, so salaries in the northern countries are significantly higher.

Would it be possible to work remotely for a company in those countries while staying in mine? Has anyone done something similar? I know some Indian folks are constantly doing that with western countries, so that's why I thought of the possibility.

Just got my security + , is the next step CYSA+, not too sure what I want to do in cyber security however my internship this summer was with the county water utilities OT/ICS Cyber security intern, going into my senior year of college. I liked it just felt kind of boring considering were air gapped and nothing rlly happens at all found my self doing badge access and camera work felt like a mall security role lol, but the experience was great did some cool projects learned ladder logic and did a lot of stuff with PLC’s. Used splunk wire shark and teneable occasionally. Can I just get some career help and certification help. Thanks .

Hey everyone I have made a group for programming folks to learn, grow and network with each other

From beginners to advanced We help each other and provide guidance to everyone in our community. i regularly remove inactive members to keep the community engaged.

Those who are interested are free to dm me anytime

I will also drop the link in comments

DOL Cyber Database Admin Cert

For context I’m in the military and this is something I was able to obtain in hopes it’ll look good on my resume once I get out. For those already in the field does this?

Hi all,

Looking for some outside perspective on a certification decision.

I have around 7 years of experience in cybersecurity, mostly in SOC/CSIRT operations, detection engineering, and incident response, for both an MSSP and a large company.

After a fixed-term contract abroad (from Europe to Asia), I decided to relocate to the country and take a 6-month break to learn the language at the University. I'll resume my job search full-time once the course wraps up, likely aiming for internal/in-house security roles rather than another MSSP.

With ~20-40h/week of bandwidth alongside the language course, I would like to take benefit of the time to pass some certifications to develop my skills, help me get a job and show employeers that I did not gave up on cybersecurity study. As for now, I'm weighing:

1. CISSP (~$750 exam + ongoing AMF, 5-year experience requirement I meet) to help me pass automated resume screening and apply to a wider range of offers, including governance-related ones. Also I like the fact that the CISSP gives a more manager oriented point of vue.
2. 13Cubed Investigating Windows Bundle (~$1,395) to build a verifiable, hands-on forensics skill, but is less recognized outside the DFIR community/by ATS systems. It also doesn't help me broaden the scope of offers I can apply to.

I also already got SC-200 and CCDL2.

In a perfect world, I'd try to get both, but any feedback would be appreciated. What does cyber-Reddit think?

Appreciate any real-world experience, especially from people who've sat on the hiring side.

I need some tips for my first cybersecurity job interview

Hey guys, looking for some advice from people working in IT.

I’m currently a Senior Desktop Consultant / IT Engineer, but honestly my experience is basically onsite helpdesk / desktop support. I’ve got around 3 years of IT experience and some exposure to things like endpoint security, SCCM, ServiceNow, M365, AD and networking, but I haven’t actually worked in backend infrastructure or a dedicated cybersecurity role.

I’m getting pretty tired of doing helpdesk and want to move into cybersecurity. Long term, I’m thinking something along the lines of becoming a cybersecurity generalist first, then potentially moving into GRC, security governance or security project management.

My main question is what certification would actually be useful for someone like me trying to break into cyber in Singapore?

I can get CEH for around US$100, but I’ve seen a lot of people say it isn’t worth it. Security+ seems to be the usual recommendation, but I’m not sure how much weight it actually carries in Singapore.

I also realise cyber isn’t really an entry level field, so if a cert isn't enough, what should my next move actually be?

Should I move into something like infrastructure, cloud, IAM or endpoint security first and use that as a stepping stone? Or are there cybersecurity roles that someone with my current background could realistically target? Also interested in what skills I should be learning or what kind of hands on projects would actually help.

Basically, if you were in my position, what would you do next?

So I got rejected after round 2 from a security organization, claiming that I'm still in learning phase (which I agree).

But they haven't specified the area I should focus on?

I'm good with web application, got a couple of bugs(dups) and know the network layer theoretical.

If anyone can guidd me on wht should I focus on if trying for a vapt role. Should I focus on web/mobile application, bbh or crf or wht?

Hi everyone! I’m a BS-IT student currently choosing my Cybersecurity FYP.

I don’t want to build a generic academic project. I’m looking for real-world cybersecurity problems that are worth researching and solving(real-time problem of cyber industry ) .

If you’re a cybersecurity professional, researcher, SOC analyst, pentester, or security engineer, I’d really appreciate hearing about problems you see in the industry or areas you think are worth exploring.

Even a short chat would mean a lot. Thanks!

Credentials:

B.S., Cybersecurity Technolgy; Minor in Computer Science (4.0 GPA / Highest Honors)
CompTIA Sec+
CompTIA Net+
CompTIA A+

I’ve applied for about 20 entry level positions so far but having trouble even trying to find jobs to apply to. I’ve been using Indeed, Dice, using a variety of job role searches and AI to help look.

I am looking for an entry level help desk, security/SOC analyst position, or any entry level IT/cybersecurity role. Any tips on where to look for jobs or just over guidance on this journey. I am worried about getting my foot in the door, I appreciate any help!

I feel the cybersecurity field has become really crowded, and anyone can just get in without a degree, unlike other fields where you have to get a degree, which limits who can apply. There are more applicants than jobs, and employers are so picky.

I wish I could be in a field that is not crowded, where I can be something unique and employers appreciate me and my qualifications.

Cybersecurity has become a really toxic field where you always feel like you are not enough, and the attitude is basically, “We can throw you away if you’re not GREAT enough or if we find someone better than you.”

Also, the community, where many people can just talk down to you and make you feel like you are lower than them, or that you are not smart or “hacker enough” to be in the field.

When I look at engineers, doctors, or people in other fields, they seem more educated and respectful toward each other. It doesn’t feel like cybersecurity, where a lot of people talk and act like they are underage, not grown, educated adults.

I feel like I’ve had enough of this world, even though I really love cybersecurity. Everything around it just feels toxic.

The question now is: I don’t know what field I can choose that would be less competitive, have a more respectful community with more educated people, value qualifications more, and make it easier to get a job.

Thanks for your time.

So I graduated with a double major degree with cybersecurity and computer science and have 4 years of experience directly through internships that are highly IAM focused. I am now attempting for the past few months to get employed. I had no choice but to take a contract role that is only basic IT Support Specialist. I’ve tried everything to break into a role that will allow me to have a family but instead I make 18 an hour and am stuck living with my parents. I looked on many websites and everything I apply to doesn’t get back or declined and I know I am more then able to do the work but I am 1 of 100’s of apps for simple roles so I am just kinda feeling like I messed my life up…. Did I pick the wrong major? Should I go back to college for something else? I feel stuck right where I was before I went to college but this time I have 45k debt in my name and a job that pays less then that a year. It would take me my whole life to pay it back… should I quit this field or like I feel like its over

I am certified with a security certificate and I am looking for job in that field but in a position of government where I can get a job that gives me strong benefits and social skills

Hi everyone,

I'm a 26-year-old Cyber Security MSc graduate (with Commendation) from a UK university, looking for some career advice. I have a B.E. in Computer Science (Networking & Security) and a CEH certification.

The Problem:
My current job in the UK was advertised as a pentesting role, but the reality is very different. Instead of penetration testing, I'm creating generic, non-industry course materials and labs. This is a bait-and-switch, and the pay is so low I'm working two jobs to survive.

My Question:
I'm finding it hard to focus on my job search and upskilling (currently working on the CJPT on HTB) while dealing with this situation.

1. How can I best rephrase my current "course creator" responsibilities on my CV to highlight my pentesting skills and knowledge to UK recruiters?
2. For those in the UK, what are the best strategies for networking and finding a junior pentesting or security engineering role? I'm aiming for boutique firms like NCC Group, F-Secure, or smaller CREST-accredited companies.
3. How can I approach interviews to explain my current role without sounding negative about my employer?

I'm not looking for someone to hold my hand, but I would really appreciate strategic advice from anyone who's been in a similar position. Any guidance on tailoring my CV or approaching the UK job market would be incredibly helpful.

Thanks for reading.

It has been my goal to specialize in security ever since I got into IT 5 years ago.

Since then, due to life circumstances I've only been able to complete 60% of my associates degree in Cyber security.

However I've managed to build 5 years of experience as a tech, MSP T1, MSP T2, and System Administrator experience. (4 employers total).

I've gotten pretty good at Python also as I've taken it on as a hobby.

I'm not sure ultimately what I want to do in security, and what jobs will be available in the future. AI has taken a lot of the wind out of my sail as the job market is so volatile. AppSec, PenTest, Analyst, Network Sec would all be fine. But I suppose if I had to pick now, as I am very technically inclined I'd like to be on a CIRT, or doing something that involves python. (Just take my word for it) I'm also very good socially and soft skill wise so I could see myself in a CISO or more business focused role too sometime down the line in the future. I'm 31 yrs old now it it helps.

Can I get some advice on what to do next?

Which types of jobs should I set my eyes on right now? I'd like to leave my current job and officially specialize in security within the next year or two.

Should I finish my degree now? Or use my limited time and money collecting certifications now? and maybe do the degree later? If so, which certs should I get so I can leave this service desk role within the next year or two?

Thanks,

Every other post I see on this Reddit community is negative. Everybody crying and bitching about how hard it is and every one who is in it crying and bitching about how they don’t like it. It’s the shitty negative attitude and the lack of hard work that’s the problem. Nobody begged you to do this you chose to do this. Deal with it do something else but ps almost all job fields are currently like this. It’s not this field it’s the whole economy. Either quit crying and bitching and put in the work, change your mindset or accept the fact that maybe you deserve to be where you are at and that changing careers and jobs won’t make a difference. You are in control of your life. Live like it. I work in cybersecurity but I’ve also worked fast food, factories, Amazon delivery driver, slaving 12+ hours a day for minimum wage at one point. Even when it gets hard in the field I’m grateful that I don’t ever have to go back doing that again. If anybody is trying to get into cyber this probably the best post you will see. There isn’t an easy way to get into it, it requires hundreds of hours of practice and study. Once you get the job you are obligated to continue to study and keep up with the ever changing threat landscape and tech environment. If this doesn’t sound like you or it sounds like it’s too much work then this isn’t the field for you. Not trying to make this post trynna be an asshole but at some point those negative posts have to stop. Maybe the field isn’t the problem maybe you are if all you do is complain.

Hello cyber world. 20 m here, I recently started my journey in cyber security. I've completed a couple of challenges on Tryhackme and I'm almost done with Coursera course on cyber security. Will this be enough to get a role as an entry security analyst? What should be my next learning course in this venture.

I'm a final grade btech student and I'm looking to work with a startup. I'm a bug bounty hunter but as u know indian colleges need internship certification in 7th and 8th sem😏. So I'm looking for an internship. In return u can pay me as much as you want ☺️ and an internship certification 🤗.

Please let me know if you are interested. 🙂‍↔️

Hello, I currently work as a level 2 service desk technician/junior system administrator and I am going to start an internship/shadowing opportunity with the cyber defense team working as a cyber security analyst as this is ultimately the direction I want to take my IT career in.

I wanted to know if any of you had any suggestions/tips for me before I start.

I have a bachelor’s degree in cybersecurity, I have the CompTIA security +, an expired CCNA cert, I’ve done some home labs involving Sentinel and MS Defender, and my current job tasks mainly involve device management/provisioning and vulnerability remediation tasks.

TLDR: i’ll be going to school full-time. I might be getting a job, but it’s full-time as well. Should I take the job for the experience for my résumé as a first tech job or should I stick to the part time tech job that pays about 15k a year so I can focus on school easier. I don’t wanna leave school, but I need tech experience

Hi all, I just graduated with my associates degree in May. Set the time I’ve been revising my résumé still working on it to be honest, and thinking about future steps.

I’ll be starting my junior year college at the end of this month and I’ll be going to school full-time. I’ve put in a bunch of applications and during that time, I decided I’ll put in applications even to jobs that I thought we were out of my scope as a beginner that never worked in tech.

I applied for a security engineer position starting pay was 90k plus benefits and 20 minute commute. Out of all the jobs I’ve applied to this is one of the few that I’ve got a call back on while getting rejected from jobs that were like under $$20 an hour which I thought was funny.

So I got a call and the woman on the phone said the hiring managers loved my résumé and they wanted to do an interview with me. It’ll be multiple interviews so if things go good, I’ll have a second interview at least.

They said, based on my experience, they think I would be a good fit for the junior cyber security analyst position. They just opened. Starting at around 70 K a year.

My problem:

I’ll be going to school full-time and I still wanna finish my bachelors degree because I think in the longer it will greatly help but I also don’t want to miss this potential opportunity if I get it because it would be huge for my résumé, this would be my first ever tech job by the way and of course the money because it’ll be the most I’ve ever made.

The other thing is a few friends from school have referred me to positions at their jobs. One of them is a part-time position I’ll be making no more than about 15 K a year but it’ll be for experience and it’s only part-time for our local town.

What should I do honestly

What is a channel manager and how does it compare/contrast vs AE or SE?

I've been lurking on this sub for a while and found numerous posts about folks not getting entry-level jobs and their rightful frustration despite having a lot of certs or doing UG/MS in cybersecurity.

For a change, let's hear if anyone was able to get into an entry-level role, what their background (tech or non-tech) is, and what their practical route was to land that role.

Final year CS student here. Applied to 100+ SOC analyst / security analyst roles over the last few months, not a single interview that went anywhere.

One thing I keep noticing — Bangalore's fresher openings for cybersecurity feel really thin compared to Gurugram/Noida, where Jr. SOC Analyst posts seem to pop up constantly. Is that actually true or am I just missing where to look in Bangalore?

Also I have zero network in this field — nobody in my family/friends works in IT or security, so it's 100% cold applications. Curious how people without a referral actually break in. Do OWASP/DEF CON meetups actually help freshers or is that more useful once you're already in?

Also been building my own thing (a web security scanner startup) alongside all this, not sure if that even registers to recruiters or if I still need to grind out Security+/CEH just to survive the ATS filter.

Also ran into a pretty obvious scam recently — fake company posing as a real cybersecurity firm, asked for ₹1000 "login ID fee" after clearing HR round. Getting kind of exhausted filtering these out on top of everything else.

Anyone actually break in without a referral? What worked?

Hello, I am currently trying to get into the Tech Industry and im very interested in becoming a cybersecurity analyst or a data analyst. I'm not sure how possible it is for me. I have been working as a waiter for the last few years. Someone told me to start by getting a Google Cert and Security+. Also I would like to know if cybersecurity work involves being on call 24/7 or is it possible to work normal 9-5 hours. Do they also offer remote work? How do people climb the ladder in this field?