Looking to switch into a Cyber Security Career? Watch this!

There are a lot of ways you can transition into cyber security career.
In this video, I share my story on how I started my career in cyber security and eventually became a senior cloud security engineer.
With all the different cyber security career options, certifications, and advice out there it can be a challenge just figuring out the safest most efficient approach to transitioning to start your career in cyber security.
I made this video to share with you all how I made the jump and what I recommend you do if you are in standard IT and looking to specialize in cyber security!
LINKS MENTIONED
Join my FREE Cloud Security Institute Discord Community
/ discord
HackTheBox - bit.ly/2SMG6La
Damn Vulnerable Web App - bit.ly/2YJyJYE
OWASP Web Shepherd - bit.ly/3fFNIZQ
OWASP Web Goat - bit.ly/3chj0UL
MY KEY LINKS
🌍 My website / blog: www.nicolasmoy.com
📚 Student Community: / cyberprocommunity
🐦 Twitter - / realnicolasmoy
📸 Instagram - / realnicolasmoy
💼 LinkedIn - / realnicolasmoy
MY STUDY MATERIALS
📗 CISSP Study Guide Bundle - amzn.to/3AOROsb
📕 SSCP Study Guide Bundle - amzn.to/3gbd6Z0
📙 AWS Certified Cloud Practitioner Study Guide - amzn.to/3m8YlK7
📘 AWS Certified Solutions Architect Associate Study Guide - amzn.to/3xWiAgD

[@frankmvabaza]

Howzit Nicolas, I like your cybersecurity career advice and specifying which certifications to start with its on point. I will be joining your discord and will chat more. Thank you.

[@RomeoLorenzo]

Nicolas! Didn't know you had a YT channel. - Liked and Subscribed! After the army, I got my first IT job after getting a MCP in NT Wrkstn, Srv, IIS, TCPIP. Never made it to MCSE. Dating myself here. Worked the desktop support, sys analyst, sys admin roles. Moved up the IT track but after a while wasn't moving up anymore - was in the $50K area as well. Went back to school and got a BA in Multimedia Arts where I got my first taste in Web Dev and started the dev route in Actionscript and multimedia dev roles. Went back and got an MS (online) in cyber focused in ethical hacking, got my Sec+ cert and landed my first Network Sec analyst position in a SOC where I learned so much. Moved on from there to an AppSec position, and recently passed the GWAPT last week. Was in IT for 17 years before I got my first position cyber. Definitely didn't take the straight line to cybersecurity. Best advice for someone who wants to get into cyber, stay open and keep learning. Keep up the videos! Gonna watch your other videos now.

[@renragged]

Windows NT! I got my MCSE in Windows NT back in early 2000. I was in the last class that used NT at the school I was at. The class after ours did Windows 2000. Had I only known...

[@karthikeyanv3400]

Great one. Thank you for this video. This will be helpful for a lot of cyber security aspirants.

[@h0ck3yphreak]

Awesome advice! subbed for sure! I have both the CISSP and OSCP and you've hit the nail on the head, the only thing I would add for anyone looking to take them, get ready for a 12-round fight to the death..lol..good luck all in your studies.

[@renragged]

I've been looking at WGU lately. I've been checking out the Cybersecurity program there. That Cloud Engineering sounds very interesting too... I'm glad I found this video. Thanks for sharing!

[@brandon5614]

Studying for my Network+ now and then going for Sec+. Still have a little ways to go but cloud security has been what I've thought about for a while. Subbed great content!

[@Konnecta-kb9gg]

@@NicolasMoy Hi, I am going straight for the security + , then cysa+ , then oscp..., im learning about networks on my own time , this will be my first cert, If I pass the sec +, would it be enough to get an entry level job while I study for the cysa + ?

[@novadhd]

Nice explanation thanks. I made the transition from network engineering to Cyber . Recently took the CISSP and plan to get CISM and CCSP later.

[@fishontv123]

Currently have a Law and Justice degree and working on my CompTIA Security+ cert now (currently doing a course on Udemy for the updated 601 version of the test). So excited to take a journey into this field, no matter what the steps may be. Still have to even take the step into the IT world / job field. One thing at a time and I'll get there 👍

[@NicolasMoy]

You are making a decision towards a very positive career! Be hungry and search for certifications and any opportunity you can to learn. It will be well worth every effort!

[@joice2871]

How’s it been

[@fishontv123]

@@joice2871 wound up getting a job in federal govt related to my degree instead, but will probably switch to state govt soon.

[@stardust-su2uz]

Wow! for the first few minutes, I thought my life story is being narrated here. Anyway, thanks for the great content.

[@Mslavishlife11]

I needed this video! Thank you so much

[@FireStarterUyghur]

Thanks for the great video. So glad I found your channel

[@MEHDIFATOUAKI]

As always, good content 👍thank you for sharing this valuable knowledge

[@AtaTheKin]

Hey Nicolas awesome video. I feel the same way, i made a change my career about a couple of months ago, i was a lawyer and started to learn programming last year, now i manage to land a iOS programming job but i'm having the same feeling you describe, i don't feel like my work matter at all, it's like a design job with a little of logic but i'm don't build something that matters. I wanted to go for cyber security from the start but it is harder to get an entry job, that's why my plan was to get into a programming position and work my way up to cyber. I'm subscribing i love the channel.

[@danielluechtefeld9693]

If you are a lawyer, I advise getting high-level security certs, i.e. CISSP - and aiming for senior security consultant roles. The combination of a law degree and a CISSP is a killer combo.

[@NicolasMoy]

Hey Alejandro, thanks for watching and subscribing - I appreciate the support! I think you are in a cool position because you are already working in tech now. If you want to go into cybersecurity, it shouldn't be terribly difficult but you will need to work on getting some certifications and experience.

[@mrsmcmbj]

Nicolas, thank you! Your advice has been very valuable. Looking forward to more videos.

[@jocamp5]

@@NicolasMoy nice video . I’m also between Bs CyberSec and Bs Cloud in WGU. 20 years of experience in IT. Cybersecurity is my passion but I feel the cloud Bs may be more valuable as a degree. What do you think ?

[@jocamp5]

@@NicolasMoy Thanks. Yes , I passed my CISSP last year after 4 weeks of study 🤗 I’m currently working as a Cloud / Sys admin but being a DBA for most of my life . Trying to move to CyberSec or cloud

[@TheAlbueta]

Just got unemployed(working in IT Support and Sys Admin for almost 10 Years) and have been thinking of getting of getting a certification on this down time and this video really makes a strong case for SSCP. Will try to order the study materials late this week. Whenever I find my discord credentials will join Your server. Ups bad IT Security eheh Best Regards from a Portuguese guy in Germany Cheers

[@darkestknightishere]

Thanks Nicolas, your video was very helpful, I was undecisive between SSCP and CISM.

[@NicolasMoy]

Glad it was helpful!

[@green_guardian5]

get both

[@ForEvrMusic]

So glad I saw this video! Been looking at WGU.

[@mamacocolilo105]

Are u done with this program?

[@mamacocolilo105]

@@NicolasMoy how long did it take u to complete?

[@Flying_turnip187]

This was great! I am going to change my career now also. I have also come to the conclusion that going back to school is irrelevant and too expensive. Gonna get some certs and start applying. Thanks!

[@NicolasMoy]

So glad you found this video helpful!

[@tingtingdeleon8069]

Love the content! Keep it up! Thank you!

[@NicolasMoy]

Glad you enjoy it! I've got some really cool content coming starting next week. Make sure you subscribe!!!

[@ob253]

This is a good video for who is trying to take the cybersecurity career path. Thank you Nick! I agree with you when you said you should’ve take a different type of degree instead of cybersecurity program. I feel same! I just finish my degree in Network and Cybersecurity, but I wish i did something more technical to learn more programing, more networking and cloud. My target to have a career in cloud security as you, but im struggling to have my first job in cloud or security. Im working to pass AWS CERTIFIED PRACTITIONER . Do you think I will be able to have and entry job in cloud because of that??

[@cesarkohl]

Thanks man, subscribed!

[@ijeny878]

Thanks man, this gave me a lot of confidence.

[@benjisea]

Same here. I'm trying WGU as well

[@NicolasMoy]

Glad to hear it!

[@turtlelovesturtlepie]

Thanks for the video! Like most others I see, I am going to WGU for Cybersecurity. Transitioning with about 2 years of software engineering experience, hope its enough to find a job after lol.

[@turtlelovesturtlepie]

@@NicolasMoy Awesome, thank you! Since I posted this comment I have had one big question, do you think its reasonable to start looking for a job after getting the Network+ and Security+ and having dev experience? Thanks again for your help.

[@sraleslie4928]

Thanks for all the great info!! Great video. I am taking WGU's Cyber Sec IA program, have A+ Net+ Sec+ so far, and work for Cyber in the Air Force. Wishing WGU had a bigger focus on cloud because it feels like the future is heading that way. What do you think of CySA+ and Pentest+? Also who would you prefer to work for in cloud, Microsoft/Amazon/Google?

[@NicolasMoy]

Hey Leslie, WGU does have a BS program in Cloud in case you didn’t know. However, I like the cyber program and wouldn’t fault you for staying. If I had to choose, I would go for AWS because there seems to be more opportunity there but Azure is a very good contender with plenty of job roles to fill in cloud security. Regarding CySA+ and Pentest, I think they are good exams and valid certifications but they feel like cheap alternatives to the CISSP and OSCP. Not to discredit them, they do count for something in the field. That’s just my thought…

[@sexystepdads8113]

Great video. In wgu now...excited to transition over to I.T

[@haragouriprasad18]

You gave the confidence. Thanks

[@NicolasMoy]

My pleasure!

[@alibinabdulwahab2857]

Hi Nicolas, great tips though could you throw more light on Pentest+ of CompTIA? Pentest+ being an offensive side security certification so would it be better or worse than say CompTIA's CySA?

[@levibeam100]

People pay really close attention to how this guy is talking. He speaks clearly. He doesn’t speak fast. His communication skill is great. The stereotype for this type of field, and honestly all computer fields in general is, they are nerdy introverts. Let me tell you that, generally speaking, that is not the case. Very rarely have I seen people let go because of their job. Most people if they secure a job do it very well. The problem i see time and time again is with people skills. Communication, especially in a field like this, is so important. It’s so crucial to everything. I guarantee you that companies would rather hire a mediocre to proficient programmer who can communicate well. Then an absolute genius who is that introvert Stereotype. People are biased, hiring people are biased. Most hiring managers are engineers themselves. For a technical interview such as SWE, Cybersecurity, etc the people have to know if what you’re talking about is true or not. So not only are they your interviewer, chances are you’ll be working with them. With that said, people would rather hire someone they like then someone they don’t. It’s pretty simple. But how do they know if they like you or not? Communication skills. Yes going to Harvard, having a 4.0 GPA, having coding projects, etc will help you get an interview. But if you fail the interview, that stuff doesn’t matter. That stuff is only relevant for you getting an interview. If you fail the interview you’re absolutely screwed. It doesn’t matter how good of a programmer you ate. And the people who fail interviews are the people, who more often then not, can’t communicate what they are doing.

[@zebinho8353]

I’m thinking about going to WGU too. Great video

[@AimlifestyleX]

Getting my security plus and have 1.5 years left on my Bachelor's degree in Information technology. Going to check the curriculum on WGU

[@rabranch32]

I notice you didn't mention the CEH cert. I think it's not really seen as that good, do you have a pov on that?

[@andrelewis5295]

Thank you for the insight regarding the SSCP certification.

[@NicolasMoy]

Absolutely!

[@green_guardian5]

SSCP certification demonstrates you have the advanced technical skills and knowledge to implement, monitor and administer IT infrastructure using security best practices, policies and procedures established by the cybersecurity experts at ISC2........Get this cert.

[@travisvaldez2748]

Subscribed! I currently have 7 years in IT. I have Sec+, AWS SAA, LPI Linux essentials. I am kind of in Cybersecurity (CSSP Analyst) right now, but I think going the cloud route would be more interesting. I am struggling to find jobs where they don't require 10+ years in Cloud.

[@travisvaldez2748]

@@NicolasMoy I search anywhere from Cloud Architect, to Cloud Practitioner , Cloud Engineer.... Salary i look for at least $85K. I don't think that is too much for the roles right?

[@NicolasMoy]

I dont think that salary is too hard to find. Where are you located? It could be the types of jobs you are applying for.

[@NicolasMoy]

See my response below

[@diegocobian8982]

currently working as a mobile software tester...and looking to change to cybersec career thank you for the video amigo

[@diegocobian8982]

@@NicolasMoy sure, thank you. So how can I get started?

[@NicolasMoy]

Glad it was helpful!

[@jackreacher9351]

Hi Nicholas, Thanks for your guidance! I'm working as an IT Operations Analyst with a bachelor's degree in Electronics & Communication Engineering. However, my IT experience is completely on Application testing and Maintenance side. If I want to switch into Cyber security, should I be ready to grab in any kind of role or look for any particular role as I'm a Entry level in this area? I personally enjoyed learning about Computer networks, hardware and troubleshooting them during my University days. Can you please let me know your opinion?

[@ia9705]

I have no experience in computer skills just basics .. I’ve been in construction and warehouse my whole life. I’m looking to switch careers I’m 35 and I know they need school but do you have any advice for me .. ? Appreciate it thanks 🙏🏽..

[@br9377]

Major respect to your wife, not all spouses would be so supportive when their husband wants to change career.

[@fuentescrippen8549]

How am I supposed to $ for those books n courses without getting a scholarship. I'm currently facing a financial crisis remain to b unemployed n disabled my Fiance's Dad's Attorney is charging her $2000 to help divert his 25 accounts to her accounts or sign over a loan check to help pay off her lit tent where her trailers are and getting her truck repaired post her sons bond to get out v custody. Unfortunately I don't have the skills v a hacker. Otherwise we wouldn't b under this unnecessary distress

[@sayansiva1]

Hey Nicholas, super helpful video. Any insight on cybersecurity consulting? Where to start or even just your general opinion on it. Thanks

[@NicolasMoy]

If you have experience in cybersecurity consulting for someone else and feel comfortable in what you can offer I would go for it!

[@Miochi_fiochi]

If one were to pursuit cloud security is there any need to pursuit the INE ejpt cert or pen testing in general ? Or is it best just to focus on AWS then AWS Sec cert ?

[@ov7769]

I am about to finish my bachelors in Business Administration and was thinking about starting a degree in Cibersecurity in your same uni or nshu, I’m very confused after this video lol should I just straight go for the certificates then? Is that what u mean in the video? Your channel is very helpful thank you

[@cyclops2348]

What do you suggest for someone getting into cyber security .. A+ ? Security + ? Networking to start ??... will kinda appreciate you let me know what certificates You recommend.. Im computer literate with maintenance background

[@imkir4n]

So glad to find this video

[@alexmansour]

Hey Nicholas, how about for someone that does not have an IT work experience, BUT someone that is making up this gap by going for a Security + cert, building a home lab, and going for a Masters in Cyber? If find that even an entry level Cyber role requires 2-3 years of work experience, which is a steep climb.

[@janzeneng1506]

I’m a System Support Engineer in FinTech industry, what I mostly do are sql query, tuning, server health check, and write few bash/ps, etc.. I’m taking Network+ on the coming Sept and Security+ on Oct. I want to get into cyber security industry and convert to Cloud Security Engineer as well, and planing to get CISSP & CCSP in the future. May I ask any problem you’ve encountered / any certifications require to become a Cloud Security Engineer?

[@NicolasMoy]

No problems at all however, I find that getting a vendor cloud certification is more effect (and cheaper) than pursuing the CCSP. The CCSP covers a lot of the data governance in the cloud but doesn't test you on on the job tools you might need to know about if you were a cloud security engineer.

[@larryhicks5621]

I have an associates degree in business administration and I have a sales background (3 years). I am considering getting into cybersecurity. What do you recommend I do to get started in the industry? Obviously I know a bachelor's degree is a legit way, but other ways do you recommend?

[@__-_-__..]

Do you recommend to get as many certificates as you can get/afford to compensate for your lack of experience? Thank you for this video! :) ~ new sub

[@NicolasMoy]

Going after certifications is a good start but its not everything. Study for certs and work on labs and moving up in your job as a cyber professional.

[@katr2771]

I'm working on my Security+ and next maybe head over to SSCP. Thank you for the share.

[@NicolasMoy]

Do it!!!

[@green_guardian5]

Yes because SSCP is an intermediate Administration cert.

[@adityalokapalli1549]

I have 3-4 years of experience as a Linux Admin and want to switch my path form IT to a Cyber Security .Recenty I have taken up the course of CEH by EC Council.Do you think its worth it..?..I want to pursue my career more into Cloud and Network Security.Need your help!!

[@doomallcaps7012]

Awesome tips! Really helpful. I am thinking about taking the NextGenT cyber security course. Do you recommend this or know anything about this?

[@NicolasMoy]

I don't recommend this. It's $12.5k for an online bootcamp which will give you some skills and a piece of paper at the end. Not my style! You can always do self study labs and work on certifications and you'll save money and have something that employers will value more.

[@nandulalkrishna923]

Great video. We nee more like this

[@denizonder5793]

Hey Nick! Thanks for sharing your experience. I’ve been working as an IT Auditor for 1.5 years now and want to switch into cyber security. I was thinking of going for sec+ followed by sscp. Would you consider sec+ to be beneficial in this case or would you advise to skip sec+ and go directly for the sscp.

[@denizonder5793]

@@NicolasMoy Appreciate the input :)

[@gunix28]

Could you do a video on Cloud Security Engineer Path?

[@warrenmccolgan6820]

Im going to be attending Liberty University to obtain my BS in computer science and Cyber Security this year due to me wanting to transition to a different career besides law enforcement, what can i do now until i start school to get a headstart? I just found codecadamy and doing the courses there right now.

[@NicolasMoy]

Hmm for CompSci I’d focus on software development and learning how computer systems work. Check out some of the lectures from MIT and yes Team Treehouse or CodeAcademy are excellent resources too

[@reevaaishwarya6576]

Hieeee... thanks alot of all this information. I just wanted to know what can be helpful for IT Auditor..

[@NicolasMoy]

Becoming an IT Auditor is a good path to go down. Have you looked into ISACA certifications and training? Those credentials are greatly used for that career path.

[@ChrisR-yp8mi]

Quick question - I started studying for the security + early this year and did not end up taking the test. I started a Masters in CyberSecurity this past summer at WGU since I had a little bit more of free time and no more commute because of teleworking. Do you think I should still continue with the Sec+ just to have the cert? I will say that taking a sec + course before the masters allowed me to accelerate a bit in the masters program. I do have a bachelor in MIS but i’ve always been in a Application Support/Business Analyst role so I’m looking to move into CyberSecurity .

[@ChrisR-yp8mi]

@@NicolasMoy I appreciate the feedback. I was thinking the same. There is a new CEH being rolled out on Jan 1, 2021. I have not looked at the new changes though.

[@waynezahra9213]

Hey Nick, Awesome video. Should I train in CompTIA A+ and Network + to get into CyberSecurity? I am hearing all different things like You Don't need CompTIA to get into CyberSecurity and so on. I thought, surely you would do as CompTIA covers the fundamentals of I.T. What would you recommend? Thank you. UPDATE... I've just watched all of your video thank you.

[@waynezahra9213]

@@NicolasMoy Thank you very much so. Yeah, basically I’m going to stick to the I.T. Fundamentals ( ITF+) which I’m halfway though and then move onto A+ and Security+ . Basically I’m coming from a non I.T. Background and picking things up pretty fast as I find the intel extremely interesting, I guess it’s because I want to learn and not because I have too, I guess that makes a whole world of difference. Thank you for your time and your wonderful video. God bless you🙌🏻❤️

[@nnanemeezeh1496]

Thanks for the clip. I'm new here. I got a couple of questions. I have an engineering degree but want to switch over to cybersecurity for msc. I'm a beginner and have no tech experience. What route to do you suggest I take inorder to achieve my goal

[@NicolasMoy]

Loaded question for sure. Pursuing a cyber certification wouldn’t hurt! I’d start with the security+ and go from there.

[@Muhammadwaseemkha9003]

i am 24 and i done my graduation in computer science and now i am want to go cyber security so i am confuse about my age i am 24 is still late or not for me to start cyber security and also recomend me some ways please

[@Hassan-hx8bc]

Hi Nicolas, I'm doing WGU now BS IT plan on graduating this summer. Looking to get into cyber security.

[@NicolasMoy]

Very awesome! Congratulations

[@clairevernyuy5827]

Hi Nicolas, thank you so much for this great video. I want to switch and pursue a career in cybersecurity and I have no experience in IT. Please I need your advise on what to do.

[@NicolasMoy]

Hey Claire, I would recommend learning about IT itself. You have to learn IT basics before you get get into cybersecurity because cyber is a specialty. A great place to begin studying woul dbe to take a course on the A+ and Network+ while picking up an internship or entry-level helpdesk role for an IT company near you. Best of luck!

[@clairevernyuy5827]

@@NicolasMoy Thank you very much Nicolas. I appreciate

[@reflectionydb2133]

So you don’t need both sscp and security + for a beginner route??? Btw great content I’m subbing

[@NicolasMoy]

You do not need both but its okay if you do happen to get them. I would pick the option that makes sense for you! Thanks for your support ❤️

[@green_guardian5]

SSCP is not a beginner CERT.

I am senior web developer, I want to work in cyber security, what courses should I take?

[@cherryirigoyen3352]

I have a bachelors in psychology. My friend has no experience like me and did her master’s in cyber. She was able to find a job right away and is doing well for herself. She recommended me to get my master’s as it will look better on my resume. She says I’ll have an advantage over people that went to boot camp. What’s your take on that? Also, how my psychology degree would help me? I don’t really work in my field. I work as a financial aid assistant at my local community college. Your input is very much appreciated.

[@angelasantos7153]

@Cherry Whoa similar situation as me. I have a bachelors in biology. I have been working outside my field but no IT or cyber experience. I'm still researching but I was thinking about masters in cyber. Just wanted to ask how you've been navigating this path.

[@yvonnedavidcho9327]

Where is your friend doing her masters?

[@NicolasMoy]

Hey Cherry, I would recommend you go after cyber certifications and work on getting an internship or entry-level job in IT where you are doing cybersecurity tasks over pursuing a masters. The masters degree is something that you can pursue later in your career once you've settled into your specialty and want to increase your salary or move into management.

[@evanstanui259]

I have a Bsc IT, I was thinking of doing an Msc CyberSecurity, which countries would you recommend I get my CyberSecurity degree from and why? Career prospects in the next decade?

[@NicolasMoy]

United States has good options for foreign exchange students or online degree programs that can be taken internationally. have you considered those?

[@saibk94]

I currently work on the sales side for a cybersecurity company. I started in a similar manner to you switching over from premed. I watched your WGU video prior to this and hand a question. I don't have any IT experience outside of my current job which mainly focuses on basic knowledge of application security. I have a bachelors degree is Healthcare studies. Would you recommend doing the bachelors in cybersecurity from WGU or just focusing on the certifications. I'm currently working on the Google IT support class on coursera to learn more about IT.

[@NicolasMoy]

Focus on a cert or basic program to get some understanding. If you are serious, start working hard on getting skills.

[@highlui4222]

Hey Nicholas, I have my associates in information and security. I currently am in a IT support specialist role mainly because I was wanting to get into the IT field asap. I really want to end up in a soc analyst role. Would me having just an associates and getting my security + be enough to get hired or not having the bachelor really impair my chances of getting hired? I also have my CompTIA + and currently studying for the net+ and then sec+ but I know the first two don’t really help with security.

[@NicolasMoy]

Certifications alone will make it difficult to land a job. Focus more on developing your skills through projects and volunteering opportunities or internships.

[@HitmanThunder]

What do you think about cybersecurity bootcamps?

[@user-ct1us7mn5b]

What school did you recommend? I am not in the it field at all and have been seriously thinking of a career change into cyber security. I have no idea where to even begin.

[@NicolasMoy]

I like Western Governors University for undergrad programs in cybersecurity. You really get the best value there and it's flexible.

[@xOALtoFrEak900Ox]

hi nick! just found your page. I graduated in may with my degree in MIS and I am looking forward to a good career in IT but most jobs require experience which I do not have. what is your advice? should I just look for a basic help desk job to gain some experience and work on certifications in order to get a job as a systems analyst or so? Thank you!

[@xOALtoFrEak900Ox]

@@NicolasMoy hi nick thank you for replying. Yeah with this pandemic all of my plans and expectations have been blown out of the water so I am realistic to know I wont get a good paying job right out of the gate so I see that of I study for those comptia exams I can quickly move to a higher level position? I am currently looking at something like data entry or so since I know about tables and stuff (MIS is business and technology) but I'll keep looking for a position in security. I am Texan and before the pandemic hit I attended the Texas Technology Summit here in my city and I was told I was in a very good field and I am very excited to find myself in a good paying position but I just dont know what to go for besides being a business analyst or a systems which in itself require like 4-5 years of work experience. I'm just glad to have finally finished my degree this past may. I am very curious about my career prospects and I will keep looking as to what I can find and try to stay optimistic. 👍🏼

[@JJ-vp3bd]

@@NicolasMoy Hey I have 1 - 2 + years as a IT project manager/ operations lead mainly focused on data analysis/ testing. I feel I excel too much at Help Desk roles and want to broaden my horizons. Would a Security Cert do me good at this point? I been networking and I find many roles requiring 5 + years experience and or AWS certs. I dont know If Im looking in the wrong places but any input would be great.

[@vimalrajss]

Hi Nick, Vimal from India. I frequently watch your videos and I find it very informative and helpful. I’ve a question about transitioning to IT security - I have 11 years of IT experience doing Presales(solution consulting) where I was selling my company’s IT security products like PAM, SIEM to companies worldwide. I’m studying for Security+ exam now and will do CISSP after passing this. What kind of roles would be suitable for me to start gaining experience in cyber security? Thank you.

[@NicolasMoy]

I wouldn't pursue the CISSP just yet until you've gained some on the ground experience. I would also say a SOC Analyst role is a good starting place. Do that for a year and then leap to a security engineer role.

[@vimalrajss]

Thanks Nick

[@aaronhooper7363]

What role would you pick if you wanted to be in a cyber security job but has more of programming side would it be a penetration tester or a diffrent role ?

[@NicolasMoy]

Definitely Application Security Engineer. It's an easier transition for anyone with developer experience and the pay is excellent!

[@myanicole2023]

For someone who is looking to get into the IT field with no experience. What should be my first step? My bachelor’s degree is in criminal justice with a minor in psychology.

[@NicolasMoy]

I would recommend looking into getting the network+ and security+ certifications and picking up an internship or entry-level job as a helpdesk engineer for a technology company. While you are there make it a point to connect with the more technical experts you are working with and look for areas to help out and volunteer. The more you do this, the more you'll be recognized and will likely be promoted within the organization into a more technical role. This is a great footing into cybersecurity.

[@myanicole2023]

@@NicolasMoy thank you

[@green_guardian5]

I have both Sec+ and SSCP, I can tell that SSCP is much more difficult that Sec+ and is NOT a beginner cert. "SSCP certification demonstrates you have the advanced technical skills and knowledge to implement, monitor and administer IT infrastructure using security best practices, policies and procedures established by the cybersecurity experts at ISC2."

[@NicolasMoy]

Good feedback! I felt like they were pretty identical.

[@jreamscape]

sscp was 100% easier than the security+

[@NehaChauhan-sh2hj]

Hi Nicolas, I have 4 years of experience as a Software Developer, but I have started studying MSc Cyber Security. Here I'm looking for my career entry in Cyber Security, as there are so many ways to start a career in Cyber Security as you have told in the video. I'm studying Pentesting and Digital Forensics as the main subjects at my University. Could you please advise me which roles would be suitable for my future job? Thank you in advance.

[@hrushikeshkhumkar2127]

Hi Nicholas/Br Pat, hope you guys are doing good. I tried to do some research according to your last comment regarding appsec, what I found that most companies are using tools like Veracode for application security. Which is automated tool. So could you please direct where we software Developer can have more information regarding appsec. Thanks!

[@NehaChauhan-sh2hj]

@@NicolasMoy Thank you so much for your response. I am located in the UK. This AppSec I have heard from you guys. I will look into it. If you please guide me for the basics of AppSec roles would be helpful. Thanks, Neha

[@NehaChauhan-sh2hj]

@Br Pat Thank you so much for your response. I'm glad to hear that development will be helpful to boost my career in cyber security. As I was thinking that it might be gonna waste of my previous experience in the new job. I would like to learn more about AppSec now. Also I will have to prepare a project next year in my university. I will look into it and will be in touch with you guys if I will need any help. :) Thanks, Neha

[@NehaChauhan-sh2hj]

@@NicolasMoy Thank you so much. I will look into it and I will wait for your content too, as it will be very easy to understand. OWASP tool used for app sec?

[@gmercadopr]

One question: I have about 8 years of IT Experience and almost done with my bachelors degree in Network and Telecommunications and now I want to learn Cyber Security. Should I go for a Master’s in Cyber or pursue certifications? I got A+ already. Should I do network or jump to SSCP/Security+ Thank you for the video!

[@green_guardian5]

SSCP > "SSCP certification demonstrates you have the advanced technical skills and knowledge to implement, monitor and administer IT infrastructure using security best practices, policies and procedures established by the cybersecurity experts at ISC2".

[@JakeAntelis]

Great video and info thanks!

[@Mslavishlife11]

I’m interested in the SSCP. I’ve noticed that the link listed in the description is for edition 3, does that matter when it comes to studying for the exam?

[@Mslavishlife11]

Is the SSCP better than the Security +?

[@sraleslie4928]

@@Mslavishlife11 If you are applying for the DOD it would be Sec+. I see Sec+ as a more popular HR hoop to jump through but both are good

[@NicolasMoy]

I prefer SSCP because of it comes from ISC2 which has a large reputation in the industry, however, for entry-level the Security+ is more popular. It doesn't hurt to have both and once you pass the first exam, you'll find the other to be almost identical in the level of content they ask their questions.

[@fragging4871]

I’m in high school I’m not sure if cyber is for me I feel like it will be very hard for me

[@OneSvT]

That isn't the mindset to have if you want success in anything you do

[@TheH0mi3]

I have a bachelors in HR. And I’m thinking about joining WGU. But I’m still debating if I want to do cyber security or cloud. Can you please tell me why you would choose cloud over cyber security. Is there more growth or future on cloud?

[@TheH0mi3]

Would you recommend I get my A+ or AWS Certified Cloud Practitioner before I get started with the program?

[@trideez3768]

Is ageism an issue in cybersecurity or tech? I’m a 38yr old truck driver and want a career switch, trucking is too brutal. I just found out that faang and large companies hire younger candidates. This hella discouraged me. New to all this as well and any help with which direction to go.

[@andrewp3358]

Left he medical field and steam fitting. This seems like the fit for me.

[@yellawood22]

Faang and large companies aren’t the only options for work. It just look’s glamorous. The government and department of defense is much better

[@NicolasMoy]

Ageism is not an issue! There are so many other great companies (better honestly) than working at a FAANG and they would happily take a knowledgeable security engineer on their team.

[@jaegar1nine266]

Its never too late sir. I'm perceiving the ageist wave lately, but why bow to that? Their opinions are.. worthless. All negative. Don't bow to it. Jesus is my Rock, and He never disapproves of me on account of age. As for career switching, I'm looking into military service for experience while I get certifications; maybe I'll get my CISSP first. Air Force, Space Force, Marines and Navy all have a cyber mos, perfect for getting experience and clearances. Air force I've heard is the best for transferring.

[@awesome_assam]

Hi Nicolas, thank you for this video. Turning 35 next month and I've decided to switch careers to Cybersecurity. Been in Customer Experience for about 10 years now with no IT experience and looking at Governance, Risk and Compliance in Cybersecurity. Apart from CompTIA A+ and CompTIA S+, what other certifications will I need to thrive and stand out?

[@awesome_assam]

@@NicolasMoy It's fine. I can only imagine the stress trying to correlate both career choices😊. My customer experience wasn't in IT at all but retail and digital marketing.

[@ob253]

Hi Assam, Nicolas, allow me to interfere. Assam, as Nicolas mentioned in his video, cybersecurity is wide and has many paths and different requirements for each job opportunities. You need to figure out what path you want to take and build your skills in that path. Comptia S+ gives you overview on the different topics and paths you can find in cybersecurity, so you can choose from them. Nicolas, correct me if im wrong

[@awesome_assam]

@@ob253 thank you so much for jumping in ☺️

[@MunirHoque]

Hi Nick, I am basically a Software Developer more specifically a mobile app developer. I have almost zero knowledge in Server , System or Network. I got some interest in Cyber Security. So, if I want to switch my career what would suggest?

[@MunirHoque]

@@NicolasMoy Thanks a lot. So will I start from studying OWASP? For learning DevSecOps , is there any beginner friendly materials? As a no brainer may be I am asking repeatedly, sorry for that.

[@MunirHoque]

@@NicolasMoy thnak you very much, brother

[@lalsonkoshy3626]

Hey Nic, I'm currently working as a tech support Engineer and i love cybersecurity and pentesting. But I'm always told it won't be the future and i should be opting for cloud and not cybersecurity. Can you please help me clear the confusion btw Cloud or Cybersecurity?

[@digitalcyclone7218]

bro cybersecurity will always be relevant. the cloud is when you're working with machines that are off-site (other people are responsible for the machines and you pay to access them, kinda like you're renting). cybersecurity is when you try to secure systems and make it so it's very difficult to near impossible for malicious unauthorized actors to compromise your stuff. cybersecurity and the cloud actually work hand in hand if i'm being honest. they're apples to oranges.

[@NicolasMoy]

There will always be a place for cybersecurity. Technology is advancing and someone needs to be able to understand what the heck is going on and how to secure it. The cloud is also going to be around for a very... very long time. Why not do both??

[@drubie76]

What is your opinion on cybersecurity bootcamps? I do not have a degree and really want to get into the field. Should I study for certifications on my own and take the test or go through a bootcamp? Thank you!

[@NicolasMoy]

If you are in the USA and want a degree, I recommend WGU's BS in Cybersecurity program. If you are not wanting the degree but want to find a job fast, you can go for the certifications + labs and experience route. I do not recommend going for a cyber security bootcamp.

[@drubie76]

@@NicolasMoy Thank you for answering my question! Why do you not recommend bootcamps? I am wanting to get into the field without getting a degree, I figured they were a good route. I would really like to know why I should avoid them. Also, what labs are you referring to? Thanks again.

[@XrayTheMyth23]

@@drubie76 I think it is better to spend your time on Certs/Degrees as it will translate directly to your resume and experience. Boot Camps just aren't as direct value as something like getting your Sec+ or equivalent Cert or Bachelor's degree. Just my 2 cents, many people have done many varied approaches and made it work. If you find bootcamps work for you, dont be discouraged from them.

[@JayZx777]

I got my SSCP exam scheduled in two weeks, however, I have about 30 valid certifications (mainly Cisco, Comptia, CEH, Juniper etc...)

[@JayZx777]

@@NicolasMoy I'm already doing a lot in security (mainly firewalls, network s. baselining, SIEM etc), but I'm thinking with SSCP it will be easier to study for CISSP. I had also went to WGU for Masters in Cybersecurity and Assurance like you and completed it a year ago. Thanks for your feedback and I'm looking forward to your other videos! Cheers

[@JayZx777]

Passed SSCP on the first try, the test was tricky.

[@green_guardian5]

@@JayZx777 Awesome, this will get you into alot of interviews

[@ashishkurosaki6839]

Thanks for your valuable info. I have a masters in IT, just passed my SSCP and currently preparing for CEH. But, I have no experience and finding it very difficult to get into the cybesecurity industry. After I complete my CEH, I will get certified in Splunk and hopefully will find a job as SOC analyst. Any advice?

[@ashishkurosaki6839]

@@NicolasMoy Thanks for your encouragements. I am currently actively looking for entry level cybersecurity jobs. Yes, I do have OSCP on my mind. I just want to pass my CEH, go for Splunk, pass my CEH practical and then go for OSCP. Lots of investments ahead 🤑🤑🤑

[@NicolasMoy]

Woah buddy I wouldn't go for all those. The CEH isn't that reputable and is honestly a waste of money IMO. If you have your SSCP, I would decide whether you want to go blue team (Splunk) or red team (OSCP). They are very different paths within cybersecurity and rarely do you need to know both very well when you are starting out.

[@akashjadhav411]

Sir I completed with CCNA(R&S) syllabus so what should i start next CCNP ENCOR or Can i start with CCNP Security??

[@future_teknokrat7585]

CCNA Security if you plan on doing security, however having a CCNP is a market advantage overall.

[@caseypeterson2173]

Does Help Desk count as experience towards being eligible to take the cissp certification?

[@NicolasMoy]

Yes, it can but you would have to have experience performing cybersecurity actions that fall within one of the 8 domains tested on by the CISSP.

[@thefaizer6665]

Thanks for sharing the information. I have a query. I am a network analyst and I have 2.5 years experience and I also have Masters in electrical and computer engg. I have CCNAs too. Will I have the required prerequisite to go for SSCP? I don't really wanna go for Security+ at this point of my career.

[@thefaizer6665]

@@NicolasMoy That gives me hope. Thanks a lot. So is there a way to prove that you already have the prerequisites? And who judge that?

[@thefaizer6665]

@@NicolasMoy Perfect. Thanks for the detailed information. That helps a lot. And SSCP looks like a better option compared to security + or other Comptia certs as cissp is the ultimate aim.

[@cacogenicist]

Where did you live where $50k was considered a decent salary? Kansas, W. Virginia? ;-) Probably not on either coast.

[@NicolasMoy]

I was living in Florida 😢

[@aesopsphere]

did you have to pay for the certification with your degree out of pocket? I am researching the school you went to.

[@NicolasMoy]

Nope! WGU includes the cost of the cert exams in your tuition.

[@dk3250]

Hi NIcolas, thank you for your explanation. I'd like to hear your opinion: I am 37, with non-tech background, and into career change right now. What do you think would get me quicker a job into the Cybersecurity industry? The certifications path or the WGU degree? I see online a lot of cyber recruiters saying that only people with experience and higher certificates are taken into consideration. I really appreciate your opinion and advice.

[@NicolasMoy]

You do need some certifications and some experience to get started but you can manage to get these incrementally. Look for internships or PC repair/entry level IT jobs first. While you are working, get certified!

[@kellytruong5404]

Im trying to get to your level. Any tips of breaking into this field?

[@NicolasMoy]

Be actively learning new skills, get certifications and look for new opportunities to help others where you can!

[@feretiuti2550]

I like this video so much rn.

[@NicolasMoy]

So glad you did!

[@wayyguyy18]

How can someone with no IT background but has a security+ cert. can gain experience for a SOC Analyst position?

[@dustinvq37]

^

[@wayyguyy18]

Nicolas Moy thanks for the feedback

[@DChiron]

I got the Comptia Security+, it is useless without experience. Please review my resume and qualifications. I look forward to the opportunity to speak with you. Respectfully, DeJonne Short 704-912-6771

[@peiyintsay2399]

I have a degree in finance and now I am about to go to get a master in cybersecurity engineering. Do you think that is a good move?

[@NicolasMoy]

I would recommend going for certifications over a masters degree. The degree is too much money and doesn't carry as much weight with employers.

[@debeshroy9632]

Hi, currently I am pursuing my CCNA & then I will to go for security+ and try to enter into network security. What certificates more will help me achieve this and is cloud security better than network security??

[@NicolasMoy]

Take a look at the AWS Networking and Security Specialist certifications.

[@debeshroy9632]

@@NicolasMoy ok thanks

[@johnnyapplesmith4115]

Hi Nicolas, great video! A quick question, I been in IT for 4 years(Started as Helpdesk, moved to desktop support and currently being a sys admin handling VMware solutions), What do you think of the UC Berkeley cybersecurity bootcamp? It costs 14k$ and I am afraid to spend my life savings and not get a return on my investment. Should I go for it?

[@443TRELL]

WGU is what I recommend. It's much cheaper, they pay for your cert vouchers and if you need to retake the exam they'll pay for that too. It's 6 month semesters and self paced. I should have 17 more classes to take before I pass and I start in July. If I finesse it correctly I can do it within this 6 month window.

[@johnnyapplesmith4115]

@@443TRELL Thank you! I will definitely look into WGU. But don't they only offer MS or BS? 24 months is a long commitment.

[@443TRELL]

@@johnnyapplesmith4115 It's self paced, so if you have experience in a field you'll be able to breeze threw most of the courses in the first term and then hopefully finish in term 2/3

[@NicolasMoy]

I would NOT spend $14k on a bootcamp. Like Tyrrell said, WGU is much cheaper and you'll get SO much more from their program.

[@443TRELL]

Update: 7 classes left but I’m waiting for my hand to heal

[@NarwhalGamingTV]

I was also looking at attending WGU, I do not have any degree as of now. I know that they offer several certifications in their course. My question is, would it be cheaper to attain those first (or at least some) and then attend WGU? Or do you think there would be no real cost benefit from doing so. Thanks for the video!

[@NicolasMoy]

Nope! I would definitely hold off on pursuing the certifications because they are included in your tuition at WGU.

[@zeeshanhussain7936]

At wgu , I got 30 credits transferred and a novice to it . How long will it take to finish

[@poemarnan5498]

20 years of Healthcare Integration and Interoperability. Time for a change but not sure which of these to go for.

[@poemarnan5498]

@@NicolasMoy Just want to get in on the ground level.

[@poemarnan5498]

@@NicolasMoy I don't know with a Comp Sci degree and 20 years IT experience I may just straight to SSCP.

[@NicolasMoy]

Sounds like a good plan!