Entry-level Cybersecurity Careers. A Dilemma.

Entry-level cybersecurity careers can be difficult to land. Why are entry-level opportunities so rare and what can you do?
⏰ Timestamps:
0:00 - Introduction
0:46 - Why are entry-level jobs difficult to land?
3:48 - What can you do to help?
4:36 - Strategies
6:18 - A closing thought to consider.
🐕 Follow Me:
Twitter: / collinsinfosec
Instagram: / _collinsinfosec
Cybercademy Discord Server: / discord
🤔 Have questions, concerns, comments?:
Email me: [e-mail]
🎧 Gear:
Laptop (Lenovo X1 Carbon Ultrabook 6th Gen): amzn.to/2O0UfAM​​​​​
Monitors (Dell D Series 31.5” D3218HN): amzn.to/2EXlgRF​​​​​
Keyboard (Velocifire VM01): amzn.to/2TEswfd​​​​​
Headphones (Audio Technica ATH-M40x): amzn.to/2F4Tvq6​​​​​
Work Monitors (Dell U4919DW UltraSharp 49 Curved Monitor): amzn.to/3yQmDhM
Desk (FLEXISPOT EW8 Comhar Electric Standing Desk): amzn.to/3S9OxvG
💻 Cybersecurity PC Build Parts
[Processor] Intel Core i7-13700K 3.4 GHz 16-Core Processor: amzn.to/3OlTTUK
[Graphics Card] Asus DUAL OC GeForce RTX 3060 Ti 8 GB Video Card: amzn.to/3OE0bkd
[AIO Cooler] Corsair iCUE H100i RGB ELITE 65.57 CFM Liquid CPU Cooler: amzn.to/3DEUUT9
[Motherboard] MSI PRO Z690-A WIFI DDR4 ATX LGA1700 Motherboard: amzn.to/3Ol9La8
[RAM](2x) Corsair Vengeance LPX 64 GB (2 x 32 GB) DDR4-3200 CL16 Memory: amzn.to/3OlsgeM
[HDD] Seagate IronWolf NAS 8 TB 3.5" 7200 RPM Internal Hard Drive: amzn.to/3DFdc6K
[SSD] Samsung 980 Pro 2 TB M.2-2280 PCIe 4.0 X4 NVME Solid State Drive: amzn.to/3KpTnnQ
[Case] Corsair 5000D AIRFLOW ATX Mid Tower Case: amzn.to/44Rjaxf
[Power Supply] Corsair RM850x (2021) 850 W 80+ Gold Certified Fully Modular ATX Power Supply: amzn.to/478wC1r
[Fans] Corsair iCUE SP120 RGB ELITE 47.7 CFM 120 mm Fans 3-Pack: amzn.to/44R4myD

[@dannyboycalifornia]

Hack a company to get their attention. Leave your resume on their server.

[@pradaprada6259]

hahahaha brilliant

[@Fit_soldier]

You deserve more likes

[@tesfayebaba]

😂😂😂

[@josephwells3120]

this had me rooling

[@risetigergaming7177]

@@AM-vn4ccyes hacking a company without consent is illegal

[@randommoosebrains]

It’s rough for the newbies - the catch being once you are in it’s easier to progress up the ladder. Hot take - if you can learn a side skill adjacent to information security. For example, being a data analyst can down the road let you learn skills to ingest data from vulnerability scanners for c level executives. Just my 2 cents. Good luck to all the people applying 👍🏼

[@R3MMY]

do you recommend data analyst for someone who never been in tech but wants to get into it. Im working in a retail store rn and honestly I just want to learn something that I can do online and I heard I can learn certificates. Just want to learn something and get a real job, would you recommend to learn it?

[@godwinalekeobor5274]

​@@R3MMYyes, that's my most recommended, it's a remote kind of job

[@jawadsabih4979]

i am studying cyber in uni, I have a microsoft pl-300 power bi cert, I have all the skills required for a data analyst role yet I am not even getting any interviews. I even have a lot of cloud knowledge. is it bec im 16?@@R3MMY

[@vincebandgogh]

@@R3MMY all tech fields are hard to get into but look at the requirements for the jobs, gain those skills and build a good resume exemplifying those skills whether its on projects or internships or real work experience and apply to jobs everyday. If youre still not getting any interviews try to make your projects better and go more into depth with skills used on projects

[@vincebandgogh]

Then once you get into data analyst field get all your security certs and build a good cyber sec resume and attempt to switch over whether its within the same company or at a new position

[@natalieritter3593]

Don't be afraid to accept short temporary contract jobs that are not exactly what you want. It gives you experience and builds your resume.

[@lonelygoner2012]

finally a youtube that admits its hard to get in. theres a lot of gatekeeping in the cyber industry but learning stuff associated with cyber is a must

[@Father-klovkoski]

I imagine this would be the case in most industries. My current industry is arguably harder to be successful in the beginning than cybersecurity and I probably wouldn’t have been able to in without my brother who is already in said industry. There are way more free materials and relevant industry knowledge online in cyber than most others

[@beauty_stand]

i agree@@Father-klovkoski

[@genekisayan6564]

What is this field you re in ?

[@bobsam5982]

Not gate keeping lol. They just want people who know what they are doing. It's called real life. Yeah sorry for all you nerds real life work is scary

[@th3azscorpio]

​​@@bobsam5982 OP is simply just talking about the nature of KZbin videos in general. Not the actual industry. There's a real need for cybersecurity professionals. Grow up.

[@artywatts4892]

I think what is often overlooked is, that your entry level IT job should be at an organization that actually has to do with IT. I recently started my first job as an IT Support at a firm that administrates several hundred client networks. During the interview I expressed my strong interest in cybersecurity and they are pretty open to let me explore the other positions in the company. Because of this I can learn stuff about cybersecurity, even though it’s not my “official” job title. Contrary to this many people start at any Helpdesk they can, at firms that basically have nothing to do with IT and only let you fix tickets that have very few to do with actual cybersecurity.

[@jacobp8294]

Even in larger IT firms delegation of security tasks tends to be a rather firm process, and even more rare to have an entry-level employee take part in the process.

[@JM-gg8ko]

Thumbs up. 80 percent of our cyber security analyst were former help desk or desktop analysts. It's easy to certify someone the company trusts than to trusts someone external that is certified. Use the ladder.

[@jacobp8294]

@@JM-gg8ko mind you though that ladder only has so many rungs, not to get too caught up on your company when others value you more

[@artywatts4892]

@@dylancounte1448 kind of agree with that one. Its sometimes overlooked how skilled even "mid-tier" IT people are, compared to the average other departments. We know this beforehand though. You gotta love to learn and work hard. Otherwhise this field isnt for you.

[@MisturInfamous]

4:55 I cannot vouch for this strongly enough. In my last year of my Cybersecurity bachelor's degree, I joined my university's cyber club. One year with them taught me arguably more about cybersecurity than 3 previous years in classrooms, and I'm kicking myself for not joining sooner. It may be different for other universities, but my university's club served as a gateway to various CTFs and competitions like NCCDC, NCL, and MANY others. Being in there also helped me make some of the closest friends I have to date. To any freshman/sophomore cyber students reading this, PLEASE take advantage of this. You're not going to learn nearly as much as you need to just by getting A's in curriculum classes. You'll be putting yourself leaps and bounds ahead of the competition by getting hands on experience through experience like that which I described.

[@pitbul2877]

Cybersecurity is a notorious idiot trap, just do a normal CS degree and pick up infosec in optional classes or just on the side

[@anniespoorthi3064]

Our college unfortunately does not have an active cyber club. Are there any forums or online communities that anyone could recommend that would be helpful for Cyber security beginners?

[@neunzehnvierundachtzig]

​@@anniespoorthi3064 start it then, that what im trying and I'm almost there i hope

[@dennisreynolds9202]

I join a bootcamp for cybersecurity, also I don't know if they have a club.

[@Luggruff]

This is what is wrong with the thinking of all markets these days though: They only want to hire the best. Well, guess what? Not everyone can be the best. The MAJORITY of people within a field, are not the best. Are they better than the CEO or anyone else in the company though? Can they do the job? Probably.

[@dannajeon8895]

Not only cybersecurity is hard, I'm a lawyer and getting my first job was terrible hard. I think is like that, sadly, in all fields

[@bellegraves]

Excuse me whilst I giggle a bit at the fact that I'm over here watching cybersecurity videos as an aspiring soc analyst and army and here's JK's face in the comment section. It's giving pied piper, bangtan is everywhere vibes lmao. I'm here for it. Loving the pfp, I'm a JK bias as well. Army is everywhere. Just wanted to say hi! 👀💜

[@Luggruff]

It is. Back in the day, people got jobs they had no clue about, and simply got on the job training. Then, a new generation of laws, restrictions and employment fees came into place for the job market, forcing employers to be more scared about risk and cost, so they started looking for people with years of experience. Nowadays, they look for people not only with experience, but "the best". The problem is of course, that the majority of people in field, are not "the best". Are they more than good enough though? Surely. A good example is my ex father in law. He was a chemist at a paper factory. He didn't even have a high school diploma when he got the job in the 70s. Today, they require a masters at least, and 4 years of experience, for his position. Everything he did, was repetitive and could easily be taught to anyone on the job. The example is not good for being a lawyer, of course, although the fears and unrealistic expectations employers have, are, and they seem to be universal across all markets.

[@UnixGuy]

I hear you on the networking and going to events front! Haven't been to any events since 2020

[@iTzDynamic]

i love the ending "just.... yeah... have a good day and keep applying." bro isnt a robot, speaks from real world experience as he's in the struggle with us. i appreciate you bro because im doing a cybersecurity course and when it comes to doing projects, i get this random anxiety. the quizzes? im a God send. Mini test? easy af. Actually putting the pen to paper on a self paced project............ i appreciate you being so transparent and showing us that YOU as well dont have all the answers. thank you for helping people such as myself push through to have a better future/career. good luck on your journey brother!

[@bradtaylor5209]

A good opportunity to look for would be a getting a job at a startup or relatively small company, but start out by doing something different such as being a software tester (or something tech related). Then when the company expands they will most likely need to create a security team, in which they could look internally first so you can progress, if they know you are interested (depending on the company, of course). This is what I did. I went from IT apprenticeship > software tester > information security officer > infrastructure and security engineer over the course of 10 years and I don't have a degree. These opportunities can be hard to come by, sometimes it's just luck in my experience.

[@joshi1q2w3e]

It’s interesting Cybersecurity is so hard to get into because every other day I see an article about how there’s a bajillion unfilled cybersecurity jobs…. Especially for the government which sometimes has even stricter requirements….

[@collinsinfosec]

I have a video coming out about the 'Cybersecurity Skills Shortage Gap' soon.

[@martinfurstenberg2281]

Yes because the government doesnt pay very well. And you dont want to waste your time with hustle bros just learning this topic because you can make a Ton of Money at this Job. I have no problem to train somebody but this is a Passion topic. If its just a Nine to Five Job for you you are wasting my time. I worked countless Nights because i read a cve or found a Tool which is interesting noticed its morning and started the day business, if its just a Job for you stop wasting my time. And rarely you find somebody with this Passion. Im not your typical nerd, i do sports in my free time, have a girlfriend and a dog, can be Social which is important in this Job as well but i have no Problem to do some nightshifts for my Company.

[@Adixon5]

I think you're also neglecting the fact that young people have woken up to the idea of breaking your body, mind, and soul for a corporation that will drop you on the dime, is just not worth it. @@martinfurstenberg2281

[@MousyTTR]

only reason theres gaps in Cyber sec jobs is because they DONT HIRE ANYBODY! they want literal GODS to work with them, they dont want 10 year experienced veteran hackers.

[@ap1000482]

@@martinfurstenberg2281same as long as I’m getting compensated it’s easy to get into personally

[@TangyWaterpark]

Awesome video! I recently graduated with a degree in Cybersecurity a few months back. While I have had roughly 2 interviews per month since I graduated (near a large city), I have been unable to break past the second interview (had 2 second interviews). The technical interviews, often as the second interview, were difficult for me. I understand these concepts but had a hard time recalling important information such as TCP/IP stack, port numbers, encryption, DNS, etc. Once I refreshed and overviewed what I recall from the interview, I understood it after some quick review. I was humbled and since then, I have been studying like crazy, taking on projects, running CTF exercises, and attending a conference. I already feel way more comfortable and confident to any following interviews I get.

[@Sci-Fi_Fan296]

Thanks for providing us the suggestions on how you would overcome those common hurdles cyber entry level job seekers tend to face. It's all about solutions.

[@Gym_Halpert]

I like how you emphasize adaptability, I can relate to the necessity of a change in strategy. I spent 6 months applying with a “bulletproof” resume according to career services, only to run it through an ATS and realize it was probably filtered out almost immediately. I had to adapt, rewrite with professional help, and am building out a blog/content site for pentest writeups from HTB. Great content, the market is difficult but your perspective is motivating and refreshing 💻

[@deebee201]

OK. I like what you posted, but what specifically did you do with your resume that made the difference?

[@Gym_Halpert]

@@deebee201 When it comes to the ATS, it hates formatting errors. I adjusted margins to maximize words per page, and got rid of ALL special characters, lines separating sections, headers, and footers. The simpler the format, the better. Following that I refined my content to be more relevant and highlight my projects over my work experience. I am switching from an unrelated industry straight into cyber, so I blame a majority of my shortcomings on that, but if most of my resume is projects that depict relevant experience, the ATS AND the recruiter have no choice but to see them. I am still coming close to landing a role, but no dice quite yet. I had an interview for a help desk role that was so entry level they didn't even ask me any technical questions. On the third interview, the IT manager asked me, "If you have all this security experience, how come you aren't applying to one of these big name companies? You'd be a shoe in." I was awestruck, and unfortunately didn't get selected (my guess is my desire for a security role was a liability to them). Long story short, use the free ATS checkers and AI to see what keywords and experience get pulled from your resume. Simplify format, and condense irrelevant information. Keep it as a highlight reel for your skills in the role you want, not what you've already done. After I changed my format, I at least got more contact with hiring staff and I consider that a huge push in the right direction.

[@redbanz2228]

I’m literally going through this Catch 22 right now. Got a 4 year cybersecurity degree and over a dozen certifications most of them being from CompTia but no Real world experience yet which is what most employers seem to want the most. Whereas a degree and/or certifications is more of just a thing to check off their list of many checkboxes. Even entry level positions like helpdesk and IT support technician want at least 1-3 years hands-on experience. Can’t get experience unless I have experience to sum it up.

[@xCheddarB0b42x]

Where is your home lab or home cyber range? Have you configured pfSense firewall device or a managed switch to protect your LAN? Have you setup and configured free, Open Source xcitium EDR? Have you segmented your home lan? Have you built a DNS Pi Hole? Have you put a Honey Net or Honey Pot on your home LAN? Have you setup and configured free Splunk trial or ELK SIEMs on your home LAN? Experience is just laying around out there for free or for low cost. All you have to do is got pick it up and start learned. Presto. You set up an MDR in your house. Now the movement to a MSSP is lateral.

[@pkagent14]

@@xCheddarB0b42xthese are all great suggestions but from my personal experience Home Labs won’t land you an interview. Once you get to the interview talking about your personal projects can get you the job but since the recruitment process is so automated nowadays you won’t get past the filter without work experience. This is the Catch22.

[@collinsinfosec]

I second what @ChedderChunguska has said here. Continue to build out your homelab and find opportunities to learn where you can. Sometimes it's a matter of persistence and luck, as generic as it sounds. Keep at it 💪

[@xCheddarB0b42x]

@@collinsinfosec it is 80% persistence and 20% getting the hands-on and Level of Knowledge. This ratio should be familiar to readers. You are trying for a security role. They will not hire people who give up. Never give up! Never! Never! Never! /rant

[@robzul7846]

I am on the same boat as you are. I have a IT degree and two certs and only 6 months internship experience and I can't even land a tech support job.

[@johnczech7074]

Another great video Grant! Thanks buddy!!

[@DustinKucey]

Thanks man, this video really helped me with insights and motivation. I am currently applying for entry level roles and finding it difficult to stand out, trying to network and meet people, but i'm transitioning from the financial industry into Cybersecurity, so it's all very fresh for me. Just subbed to ya, keep up the great content.

[@chenglee7277]

It's rough for any entry level job let's be real. Best bet is to network. Networking is a Newbie's best friend. Exposure is king. Expose yourself.

[@daniel-andersson]

We have mandatory conscription in Sweden, and one of the placements you can be assigned for military service is in fact the government IT security department. Even though it's kind of forced on you if you get enlisted, it's still a great opportunity, especially since they fully educate you from the ground up (with the stipulation that you'll only be placed there if you express interest in and prior knowledge of the field). Can't get much more entry level than that.

[@p_a_v_l_o_v]

Okay, we gotta get you off the screen and outside and hang out with people! On the other note, thanks so much for your input, your videos are very helpful 🎉

[@superawesomeminecaft]

I graduated with a CS degree, no internships, no work experience besides a data entry job for a semester. After graduation I applied (not kidding) to over 500 jobs. 80% of which I feel like I was qualified for. Mostly beginner SOC Analyst positions (fed and private). I had experience in Cyber sec applications, and could talk my way through interviews, but no job offers. I randomly applied to one GRC position, and landed it within 2 weeks. Just transitioned over to a new company, and got a 60% raise. In 3 more years Ill apply to a company an old coworker moved to and hopefully double my salary there. In my experience most people yell and yell about having some help desk experience, or networking background, which NO DOUBT helps, I just refused to do so, because I like cyber sec, and I hate networking/help desk. Oh, I also had the Sec+. The GRC job I got hired into had a requirement for 4 year degree, and 0 years of work experience. The pay was WAY below industry standard as well, it was just my way in.

[@alienboogieman]

No one cares

[@superawesomeminecaft]

​@@alienboogieman stay mad buddy. The more information and more real experiences out there the better. Lets people know what can be normal or not

[@alienboogieman]

@@superawesomeminecaft I just believe your comment was written in a way to make yourself look better than it helping others. "Oh I also had the sec+" and "I just refused to do so because I like cyber sec and I hate networking/help desk" these quotes are examples of your ego rather than providing help for the rest that will read you pointless comment. Not everyone will have access to those resources like you do, so they rely on networking and help desk experience. You state your opinion about it instead of stating the benefits. So please, try again...buddy

[@superawesomeminecaft]

@@alienboogieman Alright brainlet. Stating publicly that I had to apply to over 500 jobs to land one does not pump my ego. Stating I have a sec+ is important information as it helped me get my job. I do not see how stating my hatred for raw networking and helpdesk "shows my ego" its simple a statement lmao. If someone does not have access to the 300 dollars to take the sec+ maybe they should be looking for a job period, and not focusing on security, because they broke af and I dont care about them or their future. If they have to rely and helpdesk or networking work, once again I do not care, as it does not pertain to my situation. I simply stated my experience breaking into the field and showed that it is possible. Take your 60 IQ elsewhere and get out of my replies pal.

[@Sci-Fi_Fan296]

Well all I can say is cograts! I'm happy for you and what you have been able to accomplish in your cyber journey thus far. I'm hoping to land my 1st GRC related role as soon as possible. Did you use LinkedIn at all during the process thus far? How did you make yourself stand out from the crowd of other potential applicants especially assuming that you didn't have GRC experience? Any additional info is greatly appreciated.

[@ZombieMIW]

Thank you sir. Starting my cyber security journey in January and this video made me feel better

[@yamiltornes1604]

You keep trying to mate, we all appreciate your efforts in making this video

[@fatalradius]

The reality is that you need an IT job first….Like helpdesk, sys admins, or being a Jr. network engineer. Gotta work with systems first before diving into security.

[@kekef3620]

Even those jobs are getting hard to get. They are asking for 3-5 years experience and Certs for entry level help desk in my area. Smh.

[@joelrobert4053]

help desk is being automated by chat bot and AI now

[@saber__tooth5256]

I'm a serviceDesk analyst with 6 month exp. Should I go for MSC in cybersecurity keeping in mind job aspects

[@goheat007]

I’ve applied to hundreds of cybersecurity jobs and haven’t gotten an interview. I’m working an IT job currently, pursuing my Security+, and graduated college with a BAS in cybersecurity. My professor told me and I quote “landing a job in cybersecurity will be like throwing a dart at a dartboard: as long as you apply, you’ll land somewhere”. THEN WHY IS IT SO HARD? IS THIS FIELD NOT IN DEMAND? Entry level positions ask for like 5 years of experience…this is rough…

[@Johnny-io8mw]

It's because cyber security is an advanced path. BS in cyber security shouldn't even be offered, it's a scam. Cyber security should be available as an MS with prereq of a BS in CS (or related degree). Be like a doctor getting a 4 year degree, having never gone to med school, or done residency, and being like "WHY THE HELL CAN'T I GET HIRED AS A DOCTOR... I HAVE A 4-YEAR DEGREE?!!?!?!?" lol....

[@BeWaReJay]

⁠​⁠@@Johnny-io8mwI’m late this to this threat, but the best case scenario is if that cs (or related) degree comes with a cerificate of security. That’s what one of the Universities I’m going to offers, and I think it looks better on paper and for being able to hop out of cyber if needed.

[@cybercam33]

I would also mention that some Co-ops and internships hire recent graduates, not just college students. This is a good way to get some of that experience before landing that full-time position.

[@pkagent14]

It would be nice to also do a follow-up video discussing what I call the “Nightmare” scenario. Which is way too common in Cybersecurity right now. We have plenty of early career IT professionals who have 2-5 years of technical work experience doing Networking, Sys Admin, or Helpdesk. They have degrees and certifications. they apply to 100/200+ cybersecurity jobs and still can land a role because they don’t have “Cybersecurity” experience. This is what happened to me. I went to a job fair and was complimented on how good my resume was but once I mentioned I was interested in a Cybersecurity role I was told they wanted people with security experience 😅.

[@ukeleleiguana]

People are always told to get a help desk position to break into the cyber security field. Then we find out that is not the case after years of working a crappy job and never getting an interview for the job we actually want. It's soul crushing.

[@collinsinfosec]

That's true. Recruiters are in search of experience. Experience > anything. Sometimes it's a matter of luck and a company giving you a chance. With your previous experience in IT / sys admin work, I believe you could find a job opportunity. The job market is difficult right now though. It's a dilemma.

[@pkagent14]

@@collinsinfosec I found something in Risk Management but I know I would do much better returning to the technical side of IT. I plan on applying next year to technical roles again. Hopefully this time I'll be successful.

[@superawesomeminecaft]

@@ukeleleiguana Yeah I was told the same thing, those people are losers, don't listen to them

[@neshamlani3264]

I might go through the same, I have 3 years of Web development experience, I have a degree in CS and now I have decided to switch my career to Ethical hacking and cyber security, and I really hope that I get a job in this, as I am putting all of my part time in learning this, it will take me more than a year to learn and practice everything and even after all that I am not sure if i can land a job

[@VideoconferencingUSA]

Great suggestions: I have been in the tech industry for 35 years on the sales side. People have to remember that success takes time. I was self employed for 10 years before I started making real money. You always have to be improving by reading and studying.

[@mrd7901]

I really appreciate your honesty 🙏. I faced lots of problems in finding job at Cybersecurity, most companies need experience, 5 years minimum, if anyone lucky then they got hired. Later i changed my decisions because of the rejection i got. I moved to HVAC, and happily enjoying this field. I'm not graduate student but now im doing my graduation after 4 years 😄. But once a hacker, always be hacker ❤.

[@JohnSmith-nk4vn]

It's going to be almost impossible to get into cyber security right now with no experience in IT. You're competing with everyone. First get ANY IT job. Then learn everything you can about Cyber, build projects, etc. Don't hold out for a Cyber position. You're competing against guys with 10+years of sys eng, net eng, etc. experience.

[@victorrivas2350]

For someone on the outside interested in the CS field, I'm trying to figure out a game plan. This was a good video to experience.

[@KeanuReevolution]

I would recommend working on interpersonal skills and other professional skills outside of technical to boost your resume. That's it if the box and makes you unique compared to other candidates. I've learned that technical skills only get you so far. The interview is more about getting to know you as a holistic worker, not just regurgitating info

[@ajhahn7765]

This was a much needed video. I am one of those people struggling to break into the field. Another catch 22 of the situation is the practice. I know their are some sites that you can use to harness these skills but a lot of people do not. How do you practice something that is illeagal in order to be able to legally use those skills? I'm sure there are others like me who don't even know which certification would be best or what the next step is after a degree.I think the industy is missing a key opportunity to help create people with the skills they want.

[@ogmufasa2131]

That was really insightful, Also I was wondering if putting time and effort to win CTF and hacking competitions is worth it to get an advantage in the job market?

[@patriotlightning7791]

I hope the best for you mate. ♥

[@collinsinfosec]

Much appreciated! To you as well.

[@zacharyjohnston70]

only 200 applications? 😅I think one of the contributing factors is IT was a very small field for a long time compared to other industries. Think about how longer System Admins have existed vs Salespeople. The demand was much smaller, so there were very few people in the field overall, and not much happened when the world was offline. So when the booms started hitting and everyone started to hear the word 'cyber' in the news it was because attacks became common place. Everyone in the field already had a solid 5, 10 ,15 years so it became the norm to have loads of experience. Now they can't keep up, still need people with that experience, but they just do not exist. I absolute love you sharing your experience! It is rough out here which is going to foster a whole new wave of creative thinking and work ethic that the industry will see as the norm, then the next generation will have all their own problems.

[@ragnaricks]

thank goodness im already in one, I just hope this does not take long to climb up the ladder, im currently taking up multiple certification trainings too

[@sugarskulllyfe5890]

great honest video!!!

[@g_i..]

But Boyd Lewis promised me 100k salary after 60 days of training in his academy.

[@TheOne-zb7ux]

😂😂

[@squidsweatjuiceoven8583]

😂😂😂😂😂

[@Ty-lw8dp]

😂😂

[@Blkdiamond-skin-hair-candles]

that guy, lol I was going to go with his company. But my intuition said NO....

[@OiVinn-eq1ml]

It's long learning curve. I caught the cybersecurity bug & thought about switching careers. Glad I didn't. The learning is constant. I want a life outside of my job. The competition is too high & every entry level job has 200+ applications. Imagine the skills others have & you're going against.

[@nickrafacz6313]

So are you still working in cyber security? And are you saying you want a life outside of your job because you dont currently have it or are you saying you do have that it was just a reason why you did choose cyber security?

[@HotNitrogen]

Another way worth considering as I've seen great success from people around me is go for an entry level service desk/helpdesk job whilst developing your cyber security skills. That demonstrates to employers that you have real-world experience in an IT role and would make it much easier to move within the company or elsewhere to a cyber sec position

[@joelrobert4053]

Maybe within the company but it would be harder to move elsewhere for a cyber position as employers want cyber experience. There are people who been in help desk for many years and they can’t get a cyber position because they don’t have the cyber experience

[@dominiquedoeslife]

It is absolutely NOT just entry level cybersecurity jobs that are hard to get (not to suggest that you asserted otherwise). I’ve been in cybersecurity, ethical hacking, and infosec for years and it was a beast getting my latest job.

[@davidnolasco9161]

Thank you for the information, awesome videos 👍🏾 my advice to you is join a gym brother. Not only for health benefits but it’s a great place to talk and meet people from all walks of life. That’s how I got introduced to cyber security. Stay blessed

[@Paintball1212]

How are you supposed to gain experience if no one hires you LOL. I say that to every employer I put my application for when they say you have no experience because that sentence is very true.

[@Carsia]

I would tell anybody looking to break into cybersecurity to apply for a GRC position. It might not be everyone’s cup of tea, but the pay is pretty good and there aren’t too many hard skills to know. Do a year or two there, have them pay for a degree/cert, and pivot out.

[@collinsinfosec]

Good points!

[@pkagent14]

That’s what I’m doing right now. I manage a large variety of IT policies. My previous job was an IT network administrator and honestly if it wasn’t for the fact that my new job pays better I kind of miss being technical.😂 I tried getting a cybersecurity job but I get hearing “you don’t have experience”. 😭

[@keyballa]

What is GRC?

[@Carsia]

@@keyballa governance, risk, and compliance. It’s not too technical, but you still need to have technical knowledge. Think of the cross between business and IT.

[@keyballa]

@@Carsia got it. Thanks

[@ashurean]

I gradated with an associate's in Systems security and gave up after a year of fruitless job searching. I am now a municipal custodian and I am extremely content with how things turned out. I have little tolerance for people and am allergic to regular schedules, I wouldn't have lasted long in any cybersec job anyways.

[@collinsinfosec]

Happy to hear you were able to land something where you feel fulfilled! That's what matters most.

[@xxxx-rn3yu]

Thought this was a meme?

[@the_god_killah]

New Copypasta?

[@Lybrel]

With San Francisco paying $30-$36+/hr, whether or not it's a joke, it's true 🤷

[@ashurean]

@@collinsinfosec It's almost certainly not going to be a forever thing, but while I'm figuring out what I'm going to do with myself, I'm pretty happy doing this. I mean, I've got government health insurance, dental coverage, 22$ an hour (in the midwest), matched retirement input, 2 weeks pto, 2 weeks paid sick leave, I set my own schedule, and I can listen to audiobooks or youtube videos the whole time. I could be doing a hell of a lot worse. I'll probably end up retraining into Network or Server Admin. Network Infrastructure was the class I most enjoyed in college. I probably should've figured out then that I needed to reassess my path. I only ever really enjoyed learning cybersec at the hobbyist level, doing TryHackMe classes and such, so I should've just left it as a hobby. But the pandemic hit and I wasn't able to get in touch with my counselor when I first started having doubts, so I just stuck with it and finished my program. It is what it is.

[@tristanc2271]

Some larger companies will sometimes post jobs to show investors that they are growing... Not because they actually need to hire anyone.

[@TOKYO_SLIME]

Currently, have my Sec+ and Net+. Trying to get a SOC Analysis job or something where I can just monitor a SIEM or something basic for my first gig, and it feels IMPOSSIBLE to land something. Am I aiming too high? Do I need to just throw myself into a help desk position until I can get my PenTest+ too, or what?

[@SovirinKing]

I'm starting out my path towards the career. I appreciate the advice and I hope you find success in your career path. Do you recommend any home projects for me to work on?

[@Gruso57]

I think expecting to go straight into a security position right out of college with no experience is a lofty ambition. It's possible but they aren't "entry". Entry is a relative term here. Im currently a network admin and went through the experience ladder (Helpdesk then Desktop then network) and I can tell anyone right now that college isn't enough by itself. Ive worked with graduates on all levels that aren't great at adaptability or applying knowledge. Call me old-school but going through the early positions like I did is the best way to show you can get into the higher level positions through the experience.

[@stephenmccalley8346]

It's not exactly easy, but joining the military can be a path in. One, you get technical training and experience while getting paid (but not much at first). Second, you get a security clearance. Third, if you want to get into a federal job, you get an advantage in the hiring process. I am not a recruiter, just speaking from experience as a veteran. If you already have a degree, you may be eligible to be an officer which brings much better pay and often some student loan forgiveness. I'm not as familiar with that side though.

[@deathschmelda]

It’s not really an entry level career, it’s more of a specialization of IT. Get IT experience first, get your certs, then maybe apply for entry level SOC positions. You can also get experience without a job by doing bug bounty programs.

[@robertleechford4250]

Words of wisdom.

[@Yalbou]

Im 40 years old, work full time in a non related IT field and am studying my masters in cyber security at night after work. Its extremly tough on me and i have had to sacrifice so much. I dont have time to build a home lab or do comptia. I cant afford to quit my job and do an internship and then be unemployed. To be honest its a bit insulting getting told by people to "do more" or "try harder".

[@flyingturret208thecannon5]

I'm sorry about the struggles you're dealing with. I'm in a similar boat but 20 years younger. Perhaps there's a way to adjust the load you're dealing with? A way to free up some time on your masters into time for a lab - such that you're not doing *more* but doing *different*?

[@zeofromthefuture]

whats a good site to get involved with meetups/clubs or a discord? i live in a fairly rural area in scranton pa area so theres not too much of a precense for cyber security

[@jasonproctor9896]

Instead of getting a degree in cyber security, get your degree in computer science and do internships. Get your certifications as well.

[@blagd]

I think I needed to hear this. Thanks.

[@collinsinfosec]

Keep at it 💪

[@anastasiskarlis1282]

From my experience in various fields I would strongly suggest to invest in a job path only if you have a connection to get you in. If not then don’t bother and try to do something that can make you some income and plan your way from there for something more profitable. If you’re passionate about it then it can’t be helped. Just be prepared for a long fight.

[@aliraid9248]

Most of the people I know switch from IT or networking to cybersecurity within the same company after they show their capabilities

[@gotopiz]

Absolutely THIS! The best way in is to invest yourself with a company that you know will have future cybersecurity opportunities and work your way up as an internal hire. Wayyyyy less competition and higher chance of success.

[@joelrobert4053]

I’m going through this transition right now at my company

[@realdealholyfield3699]

Figured I’d send this message for any career transitioners like me hoping to break into an entry level cyber job: I’m currently working as a full time doctor of physical therapy in the states and have been looking to make a career change for a while now. I fortunately stumbled upon cybersecurity and enjoy learning so much about this field. Currently taking Google’s Cybersecurity Professional Certificate and have been going through the 8 courses through Coursera. This video was very helpful Grant. It showed me that I should also be trying to diversity my portfolio as I’m taking the time to learn. I’m going to dig into CTFs and blogging as I have so much to say about this transition so far. For anybody coming from a different career like me pursuing cyber, keep pushing, it’s going to be hard but just remember your why!

[@AdrianL.Earning15]

Hi, I am in a similar situation , can you tell me what new projects you worked on for your portfolio?

[@harvestcreativedesign9034]

Cybersecurity is hard harder than people say it.

[@jessicaclendinen7386]

I think, imho, find a niche and get really good at it (pentesting APIs, cloud pentesting, AD, writing attack tooling, writing detections, reverse engineering, etc). There are less people doing hard things, but still plenty of public resources you can use to get started+plenty of nice people willing to answer questions on twitter (or mastodon, whatever). If there are 1,000 people with entry-level Cybersecurity certs/degrees applying for every SOC analyst job and the talent pool is oversaturated, then that seems like an HR issue; your probability of getting hired for any job with high volume of applicants will be lower, and you probably will find it unfulfilling (I would anyway). And if you think it's too hard to be 1337 and you give up before even trying, idk what else to tell you

[@mscomies]

Stopped watching the moment he suggested people start a blog to get noticed

[@RealParadox85]

LMAOOOOO

[@TheOne-zb7ux]

Shxt is ridiculous

[@elijahford8995]

For me living in NYC it’s hard trying to find the time to engage in anything cybersecurity while maintaining a full time job. And studying for certifications seems impossible. While a online masters program held solidify foundational knowledge, I’m finding that it is challenging attempting to enter this industry.

[@shinigamirenegade]

Im at a similar situation as well . I have my associates degree in IT from laguardia. Just recently got my a+ certification. Took me about 4.5 months. Because it's 2 part exam at the same I work full time as a commercial cleaner and I work security some weekends or just Saturdays. It's tough dude its really about just making use of your time. Mta commute is the best time to do everything..then at home I'd study for 1 to 2 hrs 4 to 5 times a week

[@user-qt2bi6ie7m]

What about creating a shell company and faking the experience part?

[@brandonisebell5918]

Been down this road. I had to start as a junior network administrator. Could not land a cybersecurity job right out of school. I got lucky landing even a network admin job right out of school. A lot of the guys i know had to start with a help desk position.

[@joshstewart1649]

I think too much focus in cyber security entry levels jobs is on the technical side. I would encourage getting a risk management specialist job first. It’s what I did. In the job I did risk management work but reported to the CISO and got access to all the security tools where I could spend time getting experience with them. I then applied for my first Security Analyst job which was more on the technical side. I would consider this as a stepping stone for others too. Your first entry level job doesn’t have to necessarily technical.

[@stevenlucas7930]

I actually got my certificate in 2021 for IT and very recently got my associates degree and now am going after my batchelors degree in cyber. It’s been very hard since 2021 to even get an interview or an email back. Like there’s been 0. What homelab protects should I do?

[@docfabz]

I dont know any off top but i get a lot of ideas from linked in. Follow a lot of cyber people that post about how to get into cyber and there's bound to be info on free/paid homelabs/projects.

[@stevenlucas7930]

@@docfabz thank you !,

[@tykaye8032]

sounds exactly like the industrial industry . experience will get you there but eventually it all boils down to who you know.

[@tothedregsofficial887]

It's tough if it isn't already a hobby or genuine interest.

[@abdullahtanveer316]

I need a suggestion from you. I recently completed my Bachelor's in Computer Science and now I want to go for MS in cyber security but I'm confused about, in which domain I should go. Unviersity programme names are kind of confusing and I'm just unable to understand the end of the any programmer I may take. so please guide in which domain I should go and if you can do this like you can tell me names of programmes that I can select for MS. thank you so much

[@collinsinfosec]

Hi Abdullah, I do not have any specific recommendations on MS programs, as I do not have an MS degree myself. Here's a resource I suggest for taking a look at programs: www.cyberdegrees.org/ Ideally, it would be great to find a program which balances theory and practical application. You can attempt to find these by looking at the MS curriculum courses, project requirements, etc.

[@koalakakes]

i'll say the same thing i say to all newbies, most of this field isnt entry-level you will do so much better long term by starting off in a role outside of full time security that benefits what you want to do long term.

[@christiankhairallah397]

security clearance is one of the issues for foreigner probably not an entry level issue but i have around 2.5 years in SOC but not in europe also built my own SIEM lab at home configured AD DC, DHCP ... but hardly landing a job second issue is the french language i have C1 most they ask for is C2 and security clearance, idid some certificates net+ sec+, API pentesting, Trend micro ICIP, 1 soc internship, 1 AI internship and 1.5 in current SOC position for company outside europe, also 7 months data analyst (ik its irrelevant for cybersecurity)

[@collinsinfosec]

It appears you are on a great track. You are actively building a homelab, have completed two internships, and have some entry-level experience in security. A security clearance would be helpful if you are trying to land an opportunity in the United States.

[@christiankhairallah397]

sorry if i failed to mention but i am currently in France and the plan is to stay in France until i obtain the passport because my current passport doesn't get me anywhere i need visas to everywhere and mostly rejected. So i am searching in France not USA here they require Security clearance for Airbus, telecom, some banks... this is where i am struggling and honestly i will start searching for either internships or help desk position not security because i need to build experience in europe/France because they dontrecognize experience in Asio/Africa/MEA @@collinsinfosec

[@snixtysnixt]

Network within cyber communities/careers ppl & evidence your learning via labs. That’s how I did it with 6 months self learning, landed a cyber analyst role.

[@olympic-ass-eater]

Can I get a list of the cyber community that you had used?

[@user-dc2iu5ov1h]

Thanks for this encouragement. I am on that dilemma now.

[@prajwalmalvi]

True AF!

[@meooow5996]

Required 2 -3 yrs experience minimum with certificate such as ceh cissp security+😅

[@bennywenny_]

in trying to get into cybersecurity after highschool. any tips? i’m not sure about college or just learning materials. any tips appreciated, thanks

[@dexter2203]

Hi grant , Can you please help me with my resume , since I want to transition my carreee from technical support to soc analyst

[@ghostkill1623]

its the same argument. i need a job to get experience, but you need experience to get a job. companies need to do better for onboarding new employees, and watch the retention rate soar.

[@kennyfiya]

The fact that you have to do all of this to obtain to get an entry level job is ridiculous.

[@trebbomb25]

One could say it is not in fact an entry level position lol

[@collinsinfosec]

It's a challenge.

[@Adixon5]

Right? it's extremely discouraging. No other industry is like this. Almost feels not worth it to put in all the effort, with no certainties. Who wants to go through that?

[@xandersheppard1542]

@@Adixon5software engineers roles is extremely difficult as well.

[@swordfish3720]

@@Adixon5passion. My view on it is, the way up the ladder will get rid of the people that aren’t truly passionate about it and just want the money out of it. Just my 2cents.

[@3141xxm]

If you have a TS clearance and Security + you can get a job with defense contractors with little effort, especially if you live in the DMV area

[@brianabellamy6176]

Even if you do not have any experience?

[@joelrobert4053]

@@brianabellamy6176Yes, but that’s specifically related to gov’t contract positions

[@Pipskater123]

long shot but I’m in the DMV area looking to get into IT in general have background in automotive technology looking to pivot into it. what contractor are you talking about? I have AAS degree in cyber Defense and sec + looking to get into a Soc role.

[@No1steelersfan2]

That’s somewhat true I have a TS with Sec+,Net+ and Cysa+ and still get rejected cause I don’t have at least 5 years experience

[@CoHawk73]

I’m a finance graduate who has trouble finding a job in finance. Do you think attending a cyber security bootcamp and pursuing a career in that would be any easier?

[@Lord_Aussem]

It seems like many industries are like this. I’ve changed careers a few times and it’s always like this. Entry level requires 5 years experience, and labour demand is for people who already have like 10+ years experience. They want people who are veterans to just materialize from thin air. And HR people write the most ridiculous job requirements. Meanwhile the few who are actually experienced have so many job offers thrown their way they can’t keep up.

[@ezg8248]

Just got the chance to interview for a cyber security internship I did my hire vue today so I’m hoping to hear something

[@intothebeyond8763]

I'm taking the CCNA really soon and just trying to get entry level IT support positions is impossible . I know my stuff and on top of what I've just learned I'm learning Azure , SQL, Windows server 2019 and later on I'll take up AWS.

[@cbesc]

Stay on this path. You will go far.

[@Chaddeusthundercock]

CCNA is solid and will most likely get you in the door for networking if coupled with actual degree and/or experience

[@ollicron7397]

It's stupid they think you don't know anything. They'll ask you stupid questions like what is an IP address or whats a vlan. It's like they don't even know what a CCNA is.

[@cbesc]

@@ollicron7397 to understand what you mean, the interviewers are stupid?

[@joelrobert4053]

Have you tried networking? Like connecting with people you know that are already in the cyber or IT field?

[@xandersheppard1542]

It’s all fun and games into young engineers and cybersecurity analysts starts to take job offers from the enemy. Think it’s impossible better ask England why they’re retired vets was training Chinese pilots.

[@joelgeorgesam7982]

Will a masters degree in CS + certifications help if we have no experience in cybersecurity

[@nexithedestroyer]

The scam is needing experience for an entry level job. How is anyone supposed to join an industry if you need industry experience to get in? Lie?

[@memedaddyz]

I'm currently going throught this and this is literally hell, a fucking hell

[@user-cd2rh6yn8w]

Thanks man

[@sunlight_6059]

Does college years count as experience ? Or does the “experience” start from the time you land an internship or an entry level job

[@Chaddeusthundercock]

No unfortunately, I've run into scenarios where employers don't view internships as experience either which defeats the purpose of them

[@joelrobert4053]

Experience is more about internship or job

[@Father-klovkoski]

It seems the misconception is that being an IT admin or help desk will help get you a cyberops/sec job because they have “tech experience”. I feel many other jobs not in tech have skills more comparable to the cyber security industry, you just have to learn the specific domain knowledge and technical skills.

[@kekef3620]

What are those other jobs?

[@barakmoss1691]

Bro I don’t even know what to pursue. What is it that the different job titles actually do?

[@BlackCherry1]

i am from IT background did some mobile app development and i wanna start cybersecurity carrer how do i get on can anyone tell me what do i need to learn to get start

[@MightyGandolf]

I cant even land an entry lvl helpdesk role even with google it support cert, sec+ and a completed network engineering course at a technical trade school. Not sure what I'm doing wrong.

[@kekef3620]

Same! I thought it was just my area where entry level help desk is asking for 3+ years experience and certs.

[@joelrobert4053]

@@kekef3620what area are you in?

[@joelrobert4053]

Start networking with people in the IT industry

[@Thatsrealnice]

Thank you

[@20wounds9]

It’s gotten to a point where you need years of experience for an internship. Shit is ridiculous 🤦🏾‍♂️

[@martinfurstenberg2281]

Basically its pretty easy to land a Job in Cybersecurity even as a sideliner with no formal qualification. If you really like IT and its your Hobby you Start to get to know a lot of people and if you are looking for a Job you have a wast network, you gain experience by Just Setting up a Server, use a old machine without data put in online and See how Long until this machine gehts pwned. After it start analyzing why you where pwned. Fix the Problem and Repeat, you dont get pwned anymore? Start attacking the Server by yourself there are Million tools for this reason. But if you dont want to spend your free time why should i hire you? Why should i hier you for a high salary if you basically have no Skills? Most people who are complaining Not getting a Job are people studied computerscience for the Money while have no idea what they are doing.

[@HairDresser-8888]

I am in my 1st year studying bsc cybersecurity And i wanna get internships . Would you give me suggestions so that i can land my first internship.