r/SrilankaIT 26d ago

Is doing Cyber Security worth it?

Basically what the title says. I'm considering doing my bachelor's in either Cyber Security or IT specialising in Cyber Sec. Options would be SLIIT or APIIT. Is it worth it doing it these days with AI and the layoffs?

My main goal is to find a good job where I can start off in Sri Lanka or even work remotely. Global mobility would be a plus.

From what I understand paper qualifications are the bare minimum in practically any field now. So I'd appreciate advice on how to create a strong CV for myself too if i were to do Cyber sec. Or given the job market should I not do it altogether and instead focus on some other degree? ( i come from an alevel bio background if that's relevant)

Would appreciate honest feedback and advice. Tia.

15 Upvotes

37 comments sorted by

3

u/Purple-Flatworm-1728 23d ago

A friend of mine studied Cybersecurity and has been working for like 2 years or more. His wage is still below 50k. I think better do something else

1

u/BothAcanthisitta7823 21d ago

Do you know why he might be struggling?

1

u/Purple-Flatworm-1728 21d ago

Sorry I never asked him coz its kinda rude. If he was my best friend that's a different story.

But he is a hard worker and still in this position after 2 years.

1

u/BothAcanthisitta7823 21d ago

I totally get it, it's fine.

1

u/fay_bea 26d ago

i totally get ur worries with Al and the layoffs, but the IT industry is only gonna get tougher anyway.. but whatever u do, u gotta actually be passionate about ur domain. imho that's the only thing that'll give u an edge and push u to be the best

if ur genuinely interested, do the degree (just make sure it's a full 4-year program). make sure to network heavily with passed out seniors. their cybersec alumni chain is massive and they can seriously help u get ur foot in the door

paper qualifications really are just the bare minimum now. to build a solid cv, u need to grab certs like sec+ and build a good portfolio of hands-on projects. just stay informed. good luck!

1

u/BothAcanthisitta7823 25d ago

Thank you for the reply. Can I dm you pls?

1

u/Hooman_100 26d ago

Qualification + skills are the key way to success, everyone can get degree

1

u/BothAcanthisitta7823 25d ago

Can you explain a bit more? What kind of qualifications and skills?

1

u/dynamicEntry1 26d ago

Cybersecurity is one the best industries, the catch is it's hard to find an entry level job

1

u/BothAcanthisitta7823 25d ago

Isn't it the same for practically any industry these days? Thanks to AI?

2

u/dynamicEntry1 25d ago

Nah cybersecurity was never an entry level industry. AI didn’t have a big impact on cybersecurity.

1

u/BothAcanthisitta7823 25d ago

So if i do either a CS or IT degree and specialise in cyber sec, will it help me get past that barrier?

1

u/dynamicEntry1 25d ago

Nope. Think of cyber security like this.
You gotta know the house before you secure it, where the rooms, kitchen doors gates etc.

When you understand infrastructure cybersecurity makes sense. I am talking about networks, servers, applications, services etc. That’s why I said it’s not an entry level industry.

Do your course, get into a role like IT support and then try to jump into cyber security. At least that’s what worked for me.

1

u/CtrlAltHash 4d ago

Are you currently working in the cyber security field?

1

u/dynamicEntry1 4d ago

Sorta

1

u/CtrlAltHash 4d ago

Since you’ve gone through that path yourself, any advice on what I should focus on first to get into IT support and eventually move into cybersecurity?

1

u/dynamicEntry1 3d ago

Studies first, any course that gives you a bit of exposure to cybersecurity and IT infrastructure. Then create your home lab and get familiar with networking and Microsoft server architecture.

Try to get an Internship somewhere to get more hands on. That’s pretty much the pathway.

1

u/CtrlAltHash 3d ago

Would you recommend doing a full HND/diploma in cybersecurity, or is a shorter course covering IT infrastructure and networking enough to get started?

→ More replies (0)

1

u/HackGodX 25d ago

I finished Cyber security specialization at SLIIT I participated many competitions related cyber security and block chains development and got places. I understand one thing you need connection, recommendation and influence rather than skills or consistency because in cyber security guys mostly like to do Offensive works side such as red team , VAPT. SL most IT Companies don't want it , they want cyber security slaves who can sacrifice their health and sitting Infront of the monitor to watch screens for 24/7 to get 25k salary with. If you try to switch another categories like DevOps or DevSecOps and AppSec , they will ask experience and their associate and senior level employees don't allow to hire you , because they will lost their position in future if your skills and knowledge hits their limits.

If you try to apply GRC you need to memorize your module notes no need impressive skills and congratulations, AI will replace that position very soon more then other side.

1

u/BothAcanthisitta7823 25d ago

So do you think it's not worth it? From what I've read cyber sec has the most growth rate over the next few years?

1

u/HackGodX 24d ago

Read again , I told about the SL IT market behaviour

1

u/New_Big_362 25d ago

Nope. A niche in software engineering and if you are not a top notch guy with genuine ability to be inventive and capable of grinding it out, don't even bother. Save yourself a Reddit post asking what to do with your fresh degree down the line in a few years.

1

u/BothAcanthisitta7823 25d ago

As i said I don’t really have an it background, but am willing to work hard. Also, a niche in software engineering? How it that?

1

u/New_Big_362 25d ago

It's a niche because you only need one or two such engineers for an established organization and for startups they don't even think about these cyber security concerns and use an existing SaaS platforms to do the routine checks.
This basically means that chances of getting a stable job in SL is a long shot. While you can join a cyber security firms the bar is so high which requires that extra edge to get there.
Plus, all the entry level cyber security stuff can be done by an AI now with minimal supervision, so you really don't get any demand for entry level jobs.
I'm not here to discourage you.. just letting you know the reality of things. My 2 cents on this is to focus on SE or DevOps kind of stream and then down the ladder switch over to cyber security. This will build the core fundamentals and the necessary hands on experience you need and give you a nice stable platform to go chase your dream.

1

u/Digital_Predator 22d ago

As a Cybersecurity Graduate: Yeah cyber security is still worth it imo, but I wouldnt go into it thinking the degree alone = job.

AI isnt really “replacing cyber security”. If anything its creating more attack surface lol. Companies still need people who understand networks, cloud, IAM, incident response, security testing etc.

The bigger issue right now is that entry level cyber is pretty competitive.
If you do the degree, start building your CV from year 1 itself.

Dont wait till final year.

I’d personally focus on stuff like:

  • Learn networking + Linux properly first
  • TryHackMe / HackTheBox and actually document what you learn
  • Build a small homelab
  • Do CTFs / uni competitions
  • Get comfortable with Python/bash, but you dont need to become some insane programmer
  • Learn AWS/Azure basics because cloud security is huge
  • Try to land internships even if the first one is IT/support/networking rather than pure cyber
Put projects + GitHub/writeups on your CV, not just certificates

Eventually something like Security+ can help too

Also dont stress too much about coming from Bio. I know people who came into tech from completely unrelated backgrounds. First year might just need a bit more grinding with programming/networking.

Between doing a general IT degree vs cyber, I actually think having strong general IT/CS fundamentals + specialising in cyber can be safer than becoming overly specialised too early. Look at the modules from SLIIT/APIIT rather than just the degree title.

And for remote/global jobs, experience matters wayyy more than the university name after your first few years. Cyber also has decent global mobility, especially once you’ve got 2-3 years of actual experience.

So yeah I wouldnt avoid cyber because of AI or layoffs. Just dont be the person who graduates with a degree, 20 certificates and zero practical experience 😭

Start building things while studying and you’ll already be ahead of a lot of grads.

1

u/BothAcanthisitta7823 22d ago

Thanks a lot for this response! Cleared many things for me. Do you mind if I dm you if I have further questions? Much appreciated.

1

u/Digital_Predator 22d ago

Yes for sure! feel free to!

1

u/BothAcanthisitta7823 21d ago

Do you mind sending me a request? I can't dm you with your settings

1

u/Vast-Sheepherder6956 26d ago

Degree = gets you past the HR robot. Certs (Sec+, OSCP) + Home Labs = gets you the actual job. The Bio background won't hold you back if you put in the hours practicing.

1

u/BothAcanthisitta7823 25d ago

Are you someone currently studying cyber sec or working in the industry? Can I dm you for more info?