a day in the life of a SENIOR security analyst

[@elchacal801]

You’re my favorite cybersecurity creator on KZbin bro. Also it makes me feel better why I feel the way I feel on a daily basis when the first security analyst role I have has me configuring and deploying entire EDR systems, trying to figure out how to implement Splunk Cloud and set up data ingestion, write security policy and create an IR playbook, USB forensic analysis, etc etc all by myself. The list goes on. My mind can’t cope.

[@madhatistaken]

💚💚💚Hopefully you're not working after hours for all that 😅 With all those projects you'll be forced to become an expert real quick.

[@xCheddarB0b42x]

sounds like start-up life right there

[@elchacal801]

I wish that were true. I have to work late at night as well to catch up on stuff I wasn’t able to get to during regular hours. Perks of being salaried.

[@elchacal801]

@@xCheddarB0b42x nope! Just an org that realized it needs to do a lot all at once for compliance reasons with just enough budget for one dedicated security position 🙃

[@xCheddarB0b42x]

@@elchacal801 carry on then, soldier o7

[@NK-iw6rq]

You are a natural bro. Super intelligent and a great sense of humor. Rare combo in this field haha.

[@madhatistaken]

💚

[@sdfwegwewr2455]

hey bro, love watching ur vids as they give me motivation to keep pushing into the cybersec career. dont you ever stop creating.

[@GhostofSeoul]

Mad Hat = Happy Goat🫡

[@Phoenix-dz2oo]

Nice video. I am still a student and I am hoping to become security engineer, but I did not know much about information security as a whole. But your channel is helping me by showing the path and insider experiences with both negative and positive sides of the field. Oh also I like your humour bits scattered in videos which kinda helps to cope with the stress I am feeling by choosing to focus on this field.

[@madhatistaken]

Lots of pros and cons in any cyber security niche. Hopefully you're most drawn to security engineering (configuring things/troubleshooting). I'm glad to hear the humor I try to put in is helpful/appreciated 💚IT can be...very dry most times.

[@brenenn1562]

Working on getting a JR analyst role or that first role myself! Love these videos bro!

[@madhatistaken]

Keep up the learning grind! 💪💪💪

[@ghosttiger84]

I'm a Cyber Engineer. Let me know if you ever want to talk about my day to day and how I deploy configurations, policies, integrations, etc.

[@kcjam]

@ghosttiger84 I want to know 😊

[@ghosttiger84]

@@kcjam Do you have linkedin?

[@Gxnnelle]

I’m a cyber analyst in a non SOC role (finally) I wanna know how to do this as I want to add technical responsibilities to my role

[@ghosttiger84]

Let's talk about it.

[@kcjam]

@@ghosttiger84 How can I contact you?

[@kevingardocki]

long time viewer here! Super proud of where you've come and the future for where you will go!

[@allancfaria]

"you are sure to left behind" TRUE, SICK BRO! Amazing videos!!!

[@painrelief3441]

Grats on the promotion!

[@madhatistaken]

Thank you! 💚

[@jakeshufflez]

yeah man 3yrs deep and feeling the same, lvl1 is just ticket monkey. Glad to hear you're somewhere more exciting

[@TylerRamsbey]

Lol this is amazing. I'm a pentester, so don't respond to alerts but love this. Great perspective, awesome humor, and just overall solid video!

[@MrsMadHat]

Not the Australian breakdancer 😂 oh naur

[@madhatistaken]

😅

[@Noketown]

Yo i don’t really comment on videos but this video made me laugh out loud and it gave a really good picture of the day to day. So thank you 😅

[@thelitepredator]

We love you mad hat ❤

[@CharlyChill]

Man you the best at this stuff. You must put alot of work into this.

[@DJAlax909]

Crazy how you managed to describe my career change and duties/ responsibilities within this past year. 😅

[@slimre4p3r]

Bout time we got another one 🎉🔥

[@wintergreene795]

This video is super relatable that I feel like this is made for (for people like) me.

[@MrGuitarguy2424]

Best cyber content on KZbin.

[@clearlyclearor]

Automatic updates for everything is commonly not a good thing imo. But as you said there are update rules in so yh good job. Love the progression of your channel as well

[@maxfrischdev]

"Senior position" 1 year after posting your "first day as a "start from 0 Analyst" ?

[@madhatistaken]

@maxfrischdev that's my formal job title anyways 😅

[@IsaacRivas-hg6kg]

That outro is golden a true naruto fan

[@glenn_outof_ten]

Probably the best Naruto intro song

[@duscraftphoto]

Love the patches that require forced reboots for things like Chrome updates ha ha. It's good to stay on your toes.

[@Sight-Beyond-Sight]

Damn dude!! I feel like I should keep this video on repeat.

[@deathtoming2201]

I love your outro 😊

[@s0zz1337]

AHAHAHA What was that dance at the end!!! Fighting dreamers xD

[@splat-id5yw]

I love how real you are man. I just started my role as senior cyber analyst and TAM and the imposter syndrome is so real lol I’m trying my best tho 😅😂

[@MalwareCube]

This is gold!

[@eps24]

Good stuff bro!

[@arch.plamentimev9390]

Ayo Mad Hat - the man, this video is f*****g amazing. All your videos are, but this one hit the bullseye! Almost died laughing. Speaking of not working policies, have you had ever problems with flipper zero devices? I have created policy that blocks WPD and all types of storage devices for employees endpoint, was working good for 2 months, until all of sudden I got alert for flipper zero again and I am dying over here :D :D :D Any direction or help from your side will be highly appreciated! Be legendary brother +)

[@nikolatasev4948]

We'd be a lot more motivated to update stuff if Microsoft (and not only them) didn't sneak more tracking into their updates, changing UI for the sake of change and if the updates didn't regularly break stuff. Like the recent fiasco of breaking the dualbooting of Linux. I'm not an expert, some experts said Microsoft is not (fully) to blame for this, but from my user point of view - ef updates, I'm not installing stuff that may break my workflow.

[@_dotpw_.-_.]

Working as Security Engineer for MSSP sounds like a major headache

[@madhatistaken]

Doesn't appear to be too bad. It's definitely more stressful than deploying changes in just 1 environment, but the way I see it, deploying in different environments introduces different challenges and more opportunities to learn/troubleshoot issues you wouldn't have known about.

[@jesusmartinez6771]

I just started my journey in cybersecurity, I'm currently in a 10 month bootcamp program. I'm barely going to start my second month, I want to jump into cybersecurity analyst as soon as possible, even while I'm in school. I live in California San Diego, What job do you suggest I go into as entry level to be in a similar job as yours. I'm the type to get in the nitty gritty that no one likes to do, any suggestions on what companies I should try and apply to. Thank you!

[@th3realbishop]

What tool are you using there for Playbook generation? Looks like it might be Swimlane?

[@madhatistaken]

That picture was indeed for swimlane, but not what I use at my current position 😅

[@th3realbishop]

@@madhatistaken Thanks for confirming. Glad I haven't completely gone mad 😆

[@troysmith6754]

What are you doing to set yourself up as a future security engineer? Like training, courses, homelabs, certs, etc? I’m looking to do the same.

[@madhatistaken]

At this point just learning everything I can about our current tech stack through self study/documentation/courses/certifications. I plan on re-deploying a SIEM and ingesting threat intel on my personal computer to create threat detection rules that I can hopefully make a video about.

[@YankeeTM]

Wow it's like you are suffering from the same imposter syndrome I'm currently facing.

[@xCheddarB0b42x]

"I think I learn fast. Maybe." --Man with Imposter Syndrome who studied for and passed CISSP in eight days or something

[@madhatistaken]

Maybe I learn faster than some 😅

[@BirchDev]

1 minute ago is devious

[@dadogdoin1360]

it was a nice video

[@Spaceguy]

@@dadogdoin1360 We wish him well

[@MindDriftReads]

Az-900 vs gcp when going the soc analyst or cybersecurity analyst route

[@secr3t0exe]

video content= 👨‍💼👨‍💼 music = 😊😊🧘‍♀🧘‍♀

[@Grasimee]

Been in a soc as a junior for 3-4 months and I decided next year I'm gonna go for an appsec position. Soc has no real progression path

[@madhatistaken]

Yea other than the soc level tiers, there's a cap in promotions unless you want to become a manager. App sec is a fun path to take, I hope you like coding 😅

[@Grasimee]

@@madhatistaken Gotta start learning haha

[@r6_chic]

hey mad hat, I enjoyed watching this video! Do you have a resume template you can link? I've been applying every where but I don't think my resume is up to par as far as formatting and maybe even my bullets. Do you also have a source that can help people enhance their current resumes? ty!

[@Cooltownmedia]

Spot on.

[@squid13579]

Learning ELK is best way to start how to hate your life😂.

[@JustinJ.]

10:33 For the newbies, instead of freaking out and getting despondent about having to learn coding, as a beginner, start with YAML, its much easier to cut your teeth on and sets a good foundation for nearly every single CyberSec type tool you will work on

[@furkanyaman7298]

I don't recommend this to newbies. Learn the fundamentals, spin up homelabs, collect some certs that will get you past the hr screening tools. Most importantly spend time to sharpen your interview skills. Have someone mock-interview you a couple of times at least and set aside 2 hours a day ( weekends excluded) to apply for jobs till you start your first day at your new job

[@Noobscodee]

@@furkanyaman7298 i say you dont belong anywhere near info sec if you havent coded for 2 years minimum... being an analyst for life seems really stupid its like a entry level role even in cyber security being a senior would only make you mid level in the grand scheme

[@furkanyaman7298]

@@Noobscodee for newbies it’s more important to land a job at first than coding. After they got that analyst job they can figure out coding stuff while getting paid biweekly.

[@Noobscodee]

@@furkanyaman7298 lol if you can get an analyst job without understanding code i would genuinely be dumbfounded.... if you are a noob you have no right to a job other then data entry

[@TruthSeeker-m5h]

@@Noobscodee 1.understanding code and coding for at least 2 years are two different things. 2. entry level cyber security analyst jobs do not require nor utilize coding skills since they handle triage and escalate if need be. 3."you have no right to a job other then data entry" is your ego speaking as it does not reflect cyber security industry practices. Your personal opinions do not matter unless they match with the reality or prove to be useful. Plus kindly refrain from giving advice to newbies trying to land their first job in cyber security if you're not working in the cyber security industry. There is enough hatred and egotistical people in the world we don't need another one like yourself. Get better.

[@Jfarmerthunder]

Definitely feel like idk anything I just do stuff and things get fixed . I have no clue I just problem solve I guess . Anyone else feel the same in cybersecurity

[@zombieboyxx]

8:00 now my question is what kinda work are they doing that requires so muhc secruity and especially temporary VMs LOL like just what work could you possibly get done if the machine wipes everytime i cant wrap my head around it

[@patrickchan2503]

do you get paid a lot to reset passwords as a junior SOC Analyst? 🙂 When you have free time, does the company make juniors hunt for threats to fill the time?

[@madhatistaken]

It's just 1 small remediation step that's a part of junior soc analysts, buttt pay is decent compared to most manual labor blue collar jobs and helpdesk 😅 Free time is eaten up differently from company to company. My last fortune 500 security job allowed us to do whatever we wanted with our free time which was advised to be used for self study.

[@Fatalistically1]

Hey madhat. I’m currently a student (9 classes left for my degree). Currently studying for my sscp (it’s mandatory I would much rather be studying for cissp). I hold my a+, net+, sec+ at the moment. I’m a network technician and I feel stuck. What could I do to increase my chances of obtaining a security role.

[@gabrielzambrano8117]

Obvious question but whats your pay like now that you've promoted?

[@madhatistaken]

I wasn't promoted per say, I got a new senior level position at a new company. Pays double plus benefits compared to my last job.

[@icebreaker809]

Sorry bro u probably mentioned this in a video but what is the best GIAC Certification for cybersecurity analyst.

[@popmycherrygg]

i love you man! haha

[@madhatistaken]

💚

[@popmycherrygg]

@@madhatistaken

[@BeepBoop2221]

How important is programing and what languages?

[@madhatistaken]

Becomes more important in positions beyond junior analyst/soc level 1 analyst. Having knowledge of how code works fundamentally is important (scripting). C/C++, python, java are good starts. Powershell scripting good knowledge to have as well.

[@FloridaInvestor]

How can I land a entry level cybersecurity role?

[@madhatistaken]

Once you have the base level knowledge through certs or college or self learning just gotta make sure your resume is up to snuff and apply like crazy. The Mad Hat discord or other discords have resume examples for what has worked for others. Job market for entry level/junior roles is somewhat saturated atm, but just gotta stay persistent. Continuously learn, tweak/add to your resume after several hundred applications if you're not hearing from anyone, and most importantly be critical of yourself in any interviews (look for feedback).

[@FloridaInvestor]

@@madhatistaken I have applied to over 1k jobs now. Only got 2 interviews.

[@madhatistaken]

@@FloridaInvestor Sounds about right, I applied to 1k a couple years back and only had 4-5 interviews if I recall correctly. Have you been trying to add to your resume? Certs/projects? How many resume revisions have you done?

[@FloridaInvestor]

@madhatistaken I have had 3 recruiters give me advice on my resume so I have been updated.

[@madhatistaken]

@@FloridaInvestor Hmm, how did the interviews go? Are you applying to both local and remote jobs?

[@user-pp1jl1pc4x]

How much are clearing in salary at this role, Mad Hat?

[@madhatistaken]

Double my last security job plus benefits 😅

[@andrewp3358]

When is the Mad Hat cruise I was promised by someone in the comments 😢

[@madhatistaken]

My wife likes to dream 😅

[@MrsMadHat]

@@madhatistaken I am a goldfish

[@davidwarshawsky1559]

Guy has stress

[@madhatistaken]

Soo much 🫠

[@tmoethagreat8193]

Yo delete that shyt 😂😂 ight ima sub

[@dadogdoin1360]

no views in 29 seconds? bro fell off...

[@zerocool3466]

Zero trust policy my dude

[@7584695]

Sounds like youre overthinking the imposter stuff, if your employer didnt think you were capable and had the capacity to learn and implement all the systems, they wouldnt have hired you Just relax and give yourself a chance in about a year you wont know what the big deal was

[@madhatistaken]

I'm a naturally anxious person 😅 but I appreciate the words of encouragement 💚 I'm hoping my blind optimism at work is enough to keep me around long term so I can continue learning the security stack.

[@FakeOrphanFM]

Edit: word of advi[c]e

[@madhatistaken]

this is why i didn't major in english 😅

[@booandcats]

yesssssssssssssssssssssssss

[@dadogdoin1360]

now you have 4 likes but it shows 0 views😂 edit: I was the first like tho.

[@Ch3af1]

yo delete that shi sounds fire ngl

[@Duros1394]

Just remember he's a cyber security expert. So if you feel like it's too much or too hard, then he's won cause he's fully trained in social engineering attacks and if you don't know what that is, you've already failed.

[@francisfrancis1153]

Great content. Thanks for sharing. Do you have a website where you blog and share your thoughts? What's your LinkedIn page? I would love to connect.