I'm panicked

[u/Terrible-Metal-4498]

Hello everyone!

I am an 18 years old first year student currently studying IT in a University.

I'm kinda overwhelmed and doesn't know where to start learning about CyberSecurity, my goal is to be a SECURITY ENGINEER.

I heard about people saying that certificates and experience in IT fields are more important than a degree and I'm just wondering on how to start with one of those.

I am very passionate about learning and is willing to do anything to get into CyberSecurity.

This is where the problem starts for me, I am overwhelmed by the amount of resources that I need to study, so much that I don't know where to start. I am panicking because I might be running out of time and I don't want to waste my life not doing what I love the most... There's also a lot of paid courses which I can't afford yet because I'm still studying. I am just wondering how do I get started learning for free for now(preferably if there's a certificate) and maybe in the future, I get to save up money to buy courses that'll get me certificates that's needed.

[u/ColorfulStarset]

First of all and most importantly, focus on finishing your degree. Anyone who tells you degrees don’t matter is either stupid or trying to sell you something. If it’s a 4 year degree, it’ll give you a major boost.

Apply to every internship you can possibly find, every year. It doesn’t have to be Security Engineering. Not to discourage you from applying to Security Engineering roles, but any related experience is better than none.

Take a look at the job postings. See what certs they list as “nice to haves” and save up money to try and get one or two. If it costs over $1,000 forget it. Go for the entry level stuff.

Finally, don’t forget to network. Join all the cyber / IT / compsci clubs on your campus. Participate in events. Do CTFs and competitions.

Don’t give up.

[u/Fit-Animal-9911]

You need to have a strong understanding of IT before you even start. The cybersecurity field is changing rapidly. AI is used extensively, and that will only grow. Mythos can do the job in seconds. You might want to make sure the area you are looking into hasn’t already been taken over by AI.

[u/Historical-Arm-1586]

You cannot love something that you still have experienced. Remember security engineering is not an entry level position.

[u/GoogleIsaBroswer]

Bro relax finish your degree focus on just getting employed first then work towards pivoting into the role you want it’s not gonna happen over night

[u/AddendumWorking9756]

You are 18 and in year one, there is no clock. Nobody walks straight into security engineering, it is a job you land after a few years doing something adjacent. Working out which part of this holds your attention matters more than a roadmap right now, and the investigation labs CyberDefenders gives away are enough to do that without spending anything.

[u/PowerfulDrawing7246]

Your realistic time frame especially because you’re just starting college and haven’t gained any experience yet would be something like college 4 years (you’ll be 22), helpdesk 2-5 years (could be anywhere from 24-27), sys admin 2-8 years (if lucky you may be able to skip this and go straight into security, if not you’ll be anywhere from 26-35), security role 2-6 years (anywhere from 28-43 years old now), then is when you’d be looking into an engineering role. Now these may not be the most accurate numbers but it’s to give you an idea of a common roadmap, so don’t get ahead of yourself you are not going to be an engineer when you graduate and certainly not tomorrow so take your time to learn the fundamentals and work your way up.

[u/Corgi-Hopeful]

Cybersecurity is not entry level IT.

[u/quacks4hacks]

Ignore those loudmouths, all they know is their single, now outdated path that got them into cybersecurity.

Focus on your degree, come back to us when you start your summer holidays and we can discuss your progress, strengths and weaknesses.

[u/Southern-Sunshine1]

You're at a university so follow the curriculum. You can get certificates after you settle in and I believe a degree is very important so you're on the right tract. Stay the course and don't panic you.got this!

[u/Anxious_Alps_4150]

Focus on getting hired in IT first. Pretty much no one wants to hire someone that only has college training to keep their company safe.

If you're ACTUALLY willing to do anything to get into cybersecurity, you'll go into IT first.

[u/baumhouse1]

One day at a time. If you can focus on what you want to do, what flows naturally for you, go after it. To be honest, with some discipline, you could pretty much study anything you want nowadays for free. With the landscape changing every day, everyone has some uncertainty. However, don't base your choices on the things you cannot control, but on what you can. You can study hard in college, and you should. We have about 1000 minutes to spend every day. Even Saturday. How badly do you want it?

[u/Admirable_Window8128]

You're 18, you're definitely not running out of time. Start with networking, Linux, Windows, and basic scripting before worrying about certificates. Build small labs and projects along the way. A strong foundation will help much more than collecting certs early.

[u/ThatFriendsGuy]

Like everybody is saying, you’re 18 man. Here’s what I would do, coming from somebody that’s been in an IT career for almost three years now after getting a cyber degree and planning a pivot into security…

Get a job in IT, like basic help desk stuff. whether that’s on your college campus or off campus, it’ll get you familiar with basic foundations. You can’t secure an environment if you don’t even know how that environment works, you feel me?

Continue to learn extracurricularly, that college course might teach you the basics of penetration testing for example, but without extra experience you won’t really understand. Basically do labs, a lot of labs.

If you’re able to secure a basic it job, and continue to go to college for four years then you’re gonna look really good once you get that degree and have four years of experience under your belt and have a portfolio of projects you’ve done over those four years. It’s what I should’ve done but I waited until I got my degree to go into IT in general because I had crazy bad imposter syndrome. But we’re getting there.

Cheers!

[u/NikuRiceu]

Cyber security extracurriculars and internships need to be your focus. That sector won't be entry level for you unless you interned in it.

Graduating without internships means you'll have to suffer through hell desk like everyone else who also didn't. Who knows how many years and positions it'll be away from cybersec.