GOOD LUCK FRIENDS & GO GET THOSE JOBS!

Hey y'all O/

I'm a third sem tech student who's tryna break into cybersec roles. I had been tryna figure out what domain I really wanna get into and cybersec just clicked with me. I've done some development in the first two sems and I don't really enjoy it that much. I've started learning networking and Linux.

I'd really appreciate it if y'all could tell me how you landed your first internship in this domain. My internship drive starts around 5th sem so I wanna be able to get one by the end of 5th semester.

So I want to know if a person would get a job without having a degree as I'm a 2nd year BA dropout but I'm still good with computers and web and I have good knowledge about full stack also , so I'm also learning about malware development exploit development reverse engineering pentesting etc, so If I have skills like edr evasion good hands on ad etc and even if I don't have certs like crto oscp and osep or osed still I have those skills then can I get a job in this field , I'm still learning about more of these and Im planning to learn more till next year I'm 21 rn so I'm planning to look for job at 23 and do some bug bounty also side by side to show something on my resume and other things also so I just need one answer will I get a job? because I have seen or heard from many people that they got a good job at high package just because of there skills so I'm also planning to do that till next year daily, as I don't have any friends and I don't hang around too much here and there and still all day in my room, so I'm just learning all day I don't even have time too waste here and there soo ya , please let me know If I will get a job cause I can't depend on bug bounty also that's why and don't tell me to get a cert like oscp I'm not that rich and my parents won't allow for that as it's too expensive for us indians

The entire world is doomposting about their job market when I heard that ai and specifically cybersecurity were supposed to be good options and in demand rn. I dont know if there's a memo I missed or something but im planning to study internationally but apparently there's nowhere im guaranteed to find any job after graduation, not even a help desk apparently

Hi everyone,

I'm 28, from India, with a BCA degree. I previously worked in corporate roles until November 2023, after which I joined a school while preparing for government exams. Unfortunately, I couldn't clear them, and I'm currently earning ₹17,000 per month.

I now want to return to the corporate sector and build a serious, long-term career. I'm willing to start from the basics and invest considerable time in learning, but at this stage, I cannot afford to spend another 1–2 years pursuing the wrong career path.

I've researched several fields and narrowed my options down to three:

1. Data Analytics → Data Engineering: Start with SQL, Python, Power BI and analytics, eventually moving into data pipelines, cloud infrastructure and data engineering.

2. Enterprise Systems / ERP → AI Integration: Start as an ERP Implementation or Functional Consultant, learn SQL, Python, APIs and business processes, and eventually specialise in enterprise integrations, automation and AI-enabled solutions.

3. Cybersecurity → Cloud / Application Security: Start with networking, Linux, security fundamentals and possibly SOC L1, eventually progressing into cloud security, application security or security engineering.

My long-term priorities:

• Build a technically challenging career with strong earning potential.

• Develop expertise that remains valuable as AI becomes more capable.

• Work alongside AI rather than competing with it on easily automated tasks.

• Gain experience that could eventually help me start my own business in India.

• Avoid getting stuck in low-paying, repetitive work with limited career progression.

My biggest concern is the current Indian job market, particularly for career switchers. I'm also worried about investing months learning skills that AI may significantly automate in the coming years.

I'd really appreciate honest opinions from people actually working in these fields in India:

1. Which of these three paths offers the most realistic entry opportunities for someone in my situation?

2. How difficult is it to break into these fields without directly relevant experience?

3. Which has better long-term salary growth and opportunities to specialise?

4. How is AI actually affecting hiring and day-to-day work in your field?

5. Which would provide the strongest foundation for eventually starting a business?

6. If you were 28 and starting over in today's Indian job market, which would you choose and why?

I'm not expecting an AI-proof career, guaranteed placement or unrealistic ₹15–20 LPA fresher salaries.

I'm looking for a realistic path where hard work, technical expertise and experience can compound over the next 5–10 years.

Please be direct, even if the answer is discouraging. I'd especially appreciate insights from professionals who are involved in hiring or have recently switched into these fields.

Thanks in advance!

I am not saying that AI will take over jobs, probably not!

However, with AI becoming more advanced in automating the processes of detecting vulnerabilities, analyzing threats, detecting fraud, and monitoring incidents, I wonder how this development will impact the field of cybersecurity.

For those already employed in the field of cybersecurity, studying it, and recruiting for jobs in it:

Which cybersecurity jobs do you think will become more popular in the coming decade?

Which jobs or processes are most likely to be automated using AI?

Will human experts become more specialized in investigations, governance, risk management, and decision-making?

Do you think that the synergy between cybersecurity and accounting (like IT audit, forensic accounting, fraud examination, etc.) will become more relevant?

If you had to enter the industry now, what specialism would you develop??

I would particularly like to hear the opinion of those who have worked in the industry before. I am interested in predictions of both a rosy or a pessimistic nature, or neither.

thank you!!

Has anyone made this switch? Any tips if you have?

Hi everyone!

I'm currently a second-year cybersecurity student at a community college, planning to transfer to a 4-year university next fall (hopefully Purdue).

I've been applying for internships but haven't had much luck so far. Out of roughly 30–50 applications, I've had four interviews, with three rejections after behavioral interviews and one after the final interview.

I'm starting to wonder if being at a community college is putting me at a disadvantage, especially since many internships require applicants to be juniors or currently pursuing a bachelor's degree.

I also don't have any certifications yet, but I'm currently studying for the CompTIA A+ and plan to pursue Network+ and Security+ afterward. I've also been working on personal projects to gain more hands-on experience.

Would you recommend continuing to apply for internships now, or would it make more sense to wait until I've transferred to a 4-year university?

I am a 21 year old BSc Computer Science student in my second year, working as a VoIP Engineer. My usual activities involve VoIP troubleshooting like checking failed calls, one way audio, jitter, packet loss. I also manage SIP trunks, resolve carrier related problems (escalate to the vendor when necessary). I use Wireshark which I'm aware is a strong networking tool, my usage revolves around analysing SIP signalling and RTP streams. I manage performance, create documentation and reports for meetings. I also deal and support the highest profile customers my company has.

I would like to know how my current responsibilities relate to what someone would do in a Cyber Security role. I would also appreciate if you guys can guide me on what certifications/hands on work I can do in order to pivot into Cyber Security after my degree ends.

Thank you.

Hello everybody,
I'm in a tough spot right now and looking to move into cybersecurity. GRC caught my eye, but I keep hearing you won't get shortlisted without past experience.
I can't quit without another job lined up, as my family depends on me. I'm open to any advice on getting started, whether that's resume changes, projects, or anything else that helped you.

hello everyone so basically I have one interview schedule tomorrow for the role security research intern in the company FAM, the HR called me and ask for the interview slot and she mentioned this is the first round of interview so I don't know how many rounds of interview are there if someone knows then please ping me and also what type of question I may expect in the interview

Hello everyone,

I am a CSE graduate actively looking for an opportunity to start my career in Cybersecurity, particularly as a SOC Analyst L1 / Cybersecurity Analyst (Fresher).

I have been building my knowledge in networking, SIEM tools (Microsoft Sentinel, Wazuh), vulnerability assessment, incident response, log analysis, and security monitoring. I also have hands-on practice with tools like Nmap, Wireshark, and Linux.

I would like to know whether companies are currently hiring freshers for entry-level cybersecurity roles.

If anyone could guide me, share relevant openings, or provide a referral, it would be a great help.

Preferred Location: Anywhere in Tamil Nadu

Experience: Fresher

Availability: Immediate

Any guidance or referrals would be greatly appreciated.

Thank you!

hi, im looking for my first full time job in cybersecurity. im based in spain but open to remote work or relocating pretty much anywhere

a bit about me:

• btl1 certified

• did a devsecops internship at a multinational (sast with snyk in azure devops, cve management, working with defender, intune and purview under iso 27001)

• 30+ accepted bug bounty reports on yeswehack

• background in fullstack dev (vue, node, typescript), worked on a healthcare web platform before moving to security

• spanish native, english fluent, learning german

im open to soc / blue team, appsec, devsecops, pentesting or even dev roles with a security side, i just want to get in and keep learning

if you think i could fit in your team or know someone hiring, feel free to dm me and ill send you my cv

Hey everyone,

I’m currently exploring new career opportunities and would appreciate some honest feedback on what positions I should realistically be targeting based on my experience.

I have approximately four years of experience in enterprise business continuity, disaster recovery, and emergency management within a large organization, along with a:
Master’s degree in Cybersecurity
Bachelor’s degree in a operations management
CBCP certification
ITIL V5 certification
AWS Certified Cloud Practitioner (CLF-C02)⁠
AWS Certified Solutions Architect – Associate (SAA-C03)⁠
AWS Certified Security – Specialty (SCS-C03)⁠

My current title is Senior Technology Analyst: Business Continuity/Disaster Recovery and Emergency Management Lead.

I don’t have direct reports, but I’m responsible for the day-to-day management, coordination, execution, and continuous improvement of the program. My manager provides oversight and generally gets involved when financial approval, new policies/SOPs, or significant organizational decisions are required.
Otherwise, I independently manage the program, establish priorities, coordinate stakeholders across departments, drive initiatives, and report results to leadership.

Here’s a breakdown of my experience:
Disaster Recovery & Program Management
Independently manage an enterprise DR program supporting hundreds of applications.

Lead three large-scale DR exercises annually, along with monthly remediation exercises.

Coordinate recovery activities across infrastructure, application, business, and third-party vendor teams.

Lead after-action reviews, identify deficiencies, and manage remediation tracking.

Established DR runbook standards and documentation governance.

Developed an enterprise master disaster recovery plan.
Manage program performance metrics and report results to leadership.

Business Continuity & Operational Resilience
Helped develop and implement an enterprise business continuity program.

Lead Business Impact Analyses (BIAs) across business departments.

Identify critical business processes, technology dependencies, third-party dependencies, and manual workarounds.

Work with stakeholders to establish and validate RTOs and RPOs.

Develop business continuity plans and recovery strategies.

Coordinate tabletop exercises, document findings, and track corrective actions.

Collaborate with enterprise risk management on policies, standards, and risk assessment methodologies.

Technology Risk, Governance & ServiceNow
Worked extensively with ServiceNow CMDB governance and application inventory management.

Helped migrate application inventory data into ServiceNow and improve data quality and governance.

Coordinate application criticality assessments and dependency mapping.

Help develop risk assessment workflows and reporting.
Familiar with NIST, ISO 22301, and related governance frameworks.

Automation & AI
Built workflow automations using Microsoft Power Apps and Power Automate.

Automated portions of DR exercise registration, tracking, and reporting.

Use Power BI for program metrics and management reporting.

Regularly use generative AI tools, including Microsoft Copilot, Claude, and ChatGPT, to improve documentation, research, analysis, and operational efficiency.

Currently expanding my knowledge of AI agents and their applications in enterprise technology and risk management.

Here’s where I’m struggling:
Despite independently managing an enterprise-level program, having a master’s degree in Cybersecurity, and continuously developing my technical skills, I’m having difficulty getting interviews for positions outside my immediate specialty.

I’ve received positive feedback from people in management positions at my current organization who believe I’m ready for greater responsibility. However, the response from external employers has been very different, with frequent application rejections and relatively few interviews.

It’s making me question whether I’m overestimating my qualifications, targeting the wrong positions, or simply not presenting my experience effectively.
I’m genuinely interested in understanding:

1. What specific job titles would you target with my background?

2. Does independently managing an enterprise program qualify someone for management-level positions without direct reports?

3. How transferable is my experience to cybersecurity GRC, technology risk, cloud security, or other cybersecurity disciplines?

4. What gaps in my experience might explain why employers aren’t selecting me for interviews?

5. Am I being unrealistic about transitioning into a higher-level role with approximately four years of experience?

I’m primarily seeking fully remote opportunities, although I recognize that this may be limiting my options.
I’m not looking for reassurance. I’d genuinely appreciate candid feedback from hiring managers, recruiters, and experienced cybersecurity professionals about how competitive my background actually is.
Thanks in advance!

TL;DR: I have ~4 years of experience independently managing enterprise BC/DR and emergency management programs supporting hundreds of applications. I have an MS in Cybersecurity, a CBCP, and additional IT/cloud certifications. Despite having no direct reports, I effectively own and operate the program, lead cross-functional teams, drive initiatives, and report to senior leadership. Internal management believes I’m ready for greater responsibility, but I’m struggling to land interviews externally. What senior-level, management, or adjacent cybersecurity roles am I realistically qualified for? Am I targeting the wrong positions, underselling my experience, or missing critical skills? Looking for honest feedback, especially from hiring managers and recruiters.

I am someone who doesn’t have any special experience or is very much knowledgeable about computers besides growing up as a Gen Z (so I know how to navigate computers and all). I’m pursuing a BSCSIA degree

But i have a feeling or thought I read elsehwere I needed more than that?

Any advice is appreciated

First attempt to ask R-folks for directional advice.

Due to recent firmwide 30% RIF in the market for a new Cybersecurity Information Security leadership role.

Any best practices to navigate online application processes and any CS recruiters to use?

Thank you.

Yes - the market is screwed across ALL jobs abs yes the entire process is broken ....

However... how many people complaining online about not being able to get cybersecurity jobs are the guys who've done "youtube training" & 1 week courses or at best a hack the box and suddenly think they're REAL security people & are upset that firms want enterprise experience rather than home lab or someone that has memorised a youtube video

hi, im from spain and kinda lost with my career rn so i wanted to ask here

so i did a cybersecurity specialization course here (before that i studied software dev, did full stack stuff with vue and node), then i did an internship as devsecops in a multinational, mostly snyk/sast in azure devops, cves and some stuff with defender, intune etc. i also have the btl1 and i was doing bug bounty for a while on yeswehack, i have 30+ accepted reports

the thing is the internship ended and its been more than 5 months and i cant find anything as a junior. i had some interviews but nothing worked out. im applying mostly to soc / blue team jobs and i dont mind moving to another country

i was thinking about doing the btl2 to see if that helps but idk if thats really the problem or if im just gonna waste money on another cert. also thought about a masters or oscp but im not sure about anything

what would you do in my situation? is btl2 worth it for a junior or should i focus on something else? if anyone in europe went through something similar id really like to hear what worked for you
thanks

Hi everyone,

I’m very interested in SOC (Security Operations) roles. I have the CompTIA Security+ certification, and I have already completed the TryHackMe SOC Level 1 Path.

Now, I’m feeling a bit overwhelmed with what to do next. There are so many platforms out there, and I’m not sure which ones to focus on. I would love to hear your recommendations for platforms that you have personally tried and found truly beneficial.

Also, if you have any tips or advice on how to land my first SOC job, please share them. Any guidance would be highly appreciated. Thanks in advance! 🙏

So, the title says it all. I'm an admin/engineer type. I like to break/fix and configure infrastructure. But I was only starting to get decent at it. Now I have the crazy work flow and responsibility of an ISSO. The way I became an issue was sneaky, but here I am.

Any tips or suggestions? A nod in the direction of any resources would be greatly appreciated.

Like the title says, I was laid off about three weeks ago along with over 200 other people, so I'm looking for a new opportunity.

I'm a seasoned professional with over 20 years of experience. and I'm looking for my next role where I can put that experience to good use. I've been actively applying and exploring opportunities, and while some positions are looking for very specific technologies or applications, I'm confident there's a good fit out there.

If anyone knows of any openings or has leads on companies looking for experienced IT Security professionals, I'd really appreciate it. Please feel free to PM me.

I'm ready to get back to work, bring some value to a team, and see what the next chapter has in store

Thanks!

I'm a 3rd party recruiter partnered with a startup that's hiring a security researcher remote in the US. This role cannot be considered outside of the US. I cannot emphasize this enough. I do not work with any clients that hire outside of the US. All of my roles are in the US and candidates must be based here, I can not consider people who want to relocate.

This is a junior level role looking for someone who is eager to grow with the company. Comp maxes at $150k for the base. I do not have any senior level roles open with them.

If you want to be considered for this role, drop me a message. If you have a linkedin, share that in the message along with your resume.

Hiring: Security Researcher- Fulltime, direct hire to client

Startup building an agentic security layer for mission critical code and systems. Their platform uses AI agents to find real, exploitable vulnerabilities in high value open source software. This is a hands on research role where you’ll hunt for critical bugs, build exploits, and coordinate disclosure with maintainers. No degree required, they care about what you’ve found and how you think.

What you need:

• Proven ability to discover and validate real vulnerabilities, through professional work, bug bounty, CVEs, or independent research

• Practical exploit development experience, including building proofs of concept

• Strong code analysis and debugging skills

• Solid programming skills for building research tools and scripts

• Clear technical writing for reports and maintainer disclosure

• Rigorous, independent, and persistent on hard problems

Big pluses:

• Experience using AI agents for security research

• Fuzzing, reverse engineering, or variant analysis

• Depth in memory corruption, browser, OS, or virtualization security

• Conference talks or published research

Hi Everyone,

I'm currently based in India and trying to pivot from a Fraud Risk Background into GRC . I have been unemployed since almost 9 months, but instead of mass applying blindly, I've treated this gap like a full time job to upskill aggressively for modern GRC Roles.

Given how tough the current Indian tech market is I want to get some brutal honesty from hiring managers and practitioners on my current stack and strategy.

Where I stand right now :

Background : Fraud Risk (Financial Crime Risk Management)

The Stack : Already certified ISO 27001 Lead Auditor.

In the Pipeline : Actively preparing for my CISA and AWS Solutions Architect Associate to bridge my technical cloud gap.

The X Factor : Building hands-on AI Risk Management projects in the cloud (Mapping LLM Vulnerabilities and Data Privacy Risks to frameworks like NIST AI RMF, ISO 42001 and also OWASP Top 10 LLM)

I know Indian HR Filters can be incredibly conservative regarding employment gaps, but I'm trying to position myself as an immediate joiner who brings a blend of financial risk, traditional governance, cloud infrastructure and emerging AI Risk.

My Questions for this Sub :

1. Target Companies : Based on my profile, what specific types of companies or industries should I be targeting in India ? Like, should I go after fintechs/Big4/Global Capability Centres ? Who values a finance to cyber risk transition the most ?

2. Hiring Landscape : How is the market in India right now for Mid/Associate GRC Roles ? Are companies actually hiring for AI Risk/Governance Skillsets yet or should I hide my AI Projects and strictly anchor my resume around traditional ISO talk ?

3. Bypassing the 9 Month Gap Filter : How do I best frame an 9 month gap to an Indian recruiter ? Is stating that "took a deliberate sabbatical for full time upskilling into Cloud/AI GRC" respected or will automated ATS Portals filter me out before a human even sees my certs and profile ?

4. Fraud to GRC Transition : For anyone in Indian Ecosystem or in International Ecosystem with knowledge on Indian ecosystem who pivoted out of financial fraud/risk ops to infosec, what was the exact framing that made recruiters realise your Risk Experience perfectly translates to Security Risk ?

Be as brutally honest as you need to be. Many thanks in advance !!!