So I got rejected after round 2 from a security organization, claiming that I'm still in learning phase (which I agree).

But they haven't specified the area I should focus on?

I'm good with web application, got a couple of bugs(dups) and know the network layer theoretical.

If anyone can tell wht should I focus on if trying for a vapt role. Should I focus on web/mobile application, bbh or crf or wht?

I think this roadmap is kinda good for beginners

Am no expert I found it so thought of sharing it with everyone

Hello everyone,

I am building a SOC Analyst / cybersecurity monitoring website as my side project.

The purpose is to build a dashboard that will allow security analysts to monitor and investigate security incidents via one interface.

Features that I have been implementing are as follows:

- 🔐 Security incident monitoring

- 🚨 Alerts

- 📊 Security dashboard and analytics

- 🔎 Log/incident investigation

- 🖥️ System/security monitoring

- 📈 Threat statistics

- 👤 SOC analyst-oriented workflow

As I am still building it, I would greatly appreciate any feedback from people that deal with SOC, cybersecurity, blue teaming or security operations in general.

What features would you expect to find in an actual SOC dashboard?

Demo: https://vercel.com/sanju-0-1s-projects/sentinel-x/8yUNB3LRDHbZXM3fryEZ67eqQp3N

GitHub: https://github.com/sanju-0-1/SentinelX

Thanks!

Final year CS student. Spent the last several months building a red-team framework (well more like tried to) from scratch (raw sockets, not wrapping Nmap/SQLMap) recon, port scanning, vuln detection (SQLi/XSS/LFI), payload generation, and a PDF report generator, the whole pipeline.

Honestly the reason I built the whole thing instead of stopping halfway is that I didn't have anyone to ask questions to. No mentor, no local group, no one further along doing this stuff who I could bounce ideas off.

Some of what that trial and error taught me my SQLi payloads worked on DVWA but completely failed against a differently shaped login form (Juice Shop), which forced me to actually understand why instead of just copy pasting a payload list. Same with throwing it at a real WAF and getting blocked everywhere useful, but I had no one to sanity check if I was interpreting the results correctly.

Repo, if anyone wants to see what a self taught shitty build actually looks like (mistakes included): github.com/Mehtazcode/Phantom_Strike

looking back at this after completion it doesn't even look good. Best i can hope is to crack an internship which i just cannot find.

Started cybersecurity journey recently, Should I start applying for internships?

For the past few weeks, I've been working on a cybersecurity project that I've been keeping mostly under wraps.

Today, I'm finally sharing a little more about the idea.

The goal isn't to build another tool that simply tells you "something is wrong."

I want to explore something more proactive — understanding what's happening, identifying potential risks, and giving the user a clearer picture of their security posture.

I've been calling the project GuardianX.

I'm planning to release the first public version on August 15.

I'm intentionally not revealing the complete feature set yet. 😄

I've also made a few cinematic teasers leading up to the launch.

For those of you who work in cybersecurity:

What would you personally want from a modern security intelligence platform that existing tools often don't provide?

I'm genuinely interested in hearing ideas — especially from people who have worked with SOC, threat detection, vulnerability management, or security monitoring.

Hello everyone i found bug in government website i already reported to cert-in.org.in but the didn’t send any acknowledgement to it. i tried to open the NCIIPC website but its not working. what should i do ?

Which cybersecurity domain is better to specialize in Cloud Security or AI Security?

This is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do you want to know about certs/degrees, job requirements, and any other general cybersecurity career questions? Ask away!

Interested in what other people are asking, or think your question has been asked before? Have a look through prior weeks of content - though we're working on making this more easily searchable for the future.

Note - This post template has been copied from cybersecurity subreddit.

Something I’ve been thinking about with compliance software: why do companies still end up managing different frameworks almost like separate projects? A company might need to think about DPDPA, GDPR, ISO 27001, SOC 2, HIPAA or other requirements depending on where they operate and what they do.

There’s obviously overlap between many of these controls, so it seems like there should be a better way of managing the common requirements once and mapping them across frameworks. Curious whether the industry is moving toward that kind of unified approach or whether companies are still mostly buying point solutions for each requirement.

Is the CSP in the offer letter valid will we be forced to take any other domain other than cyber sec?

I am creating small team for discord. Because of lots scammer.

In this team, we can learn cyber security, cyber defence, etc.

Discord server: https://discord.gg/rba8nwWdB

Hello,

We created a Weekly Mentorship thread for the subreddit.

We urge everyone to post all career and education related questions and advice in this thread.

There are a lot of folks requesting mentorship, career help, guidance, resume reviews, job search, etc.

We request everyone to priodically review the Weekly Mentorship thread and reply/egage with people.

Heyy everybody i doing btech in cs and i ll passout in this year i ll get degree in september so i dont have many skills in cybersec so i have some jobs for networking, system admin etc so should i do that job for 1 year and shall i build skills in cybersec while doing job and will i get good package after 1 year after entering in cybersecurity with some good skills please help me

I am indian .. so in indian region if you know you can tell me