Starting Cybersecurity in 2024 - Things I'd Wish I Knew

[@ChazBword]

Been in this industry for 20+ years and you're spot on. The community is what you make of it. There are jerks everywhere, so find the helpers. Great video.

[@p.chuckmoralesesquire3965]

the part about gate-keepers largely expressing their own insecurity is 100% true, I got pushed around alot at this job 5 years ago, thankfully was able to hold my own and the 4 self-impressive dorks who were constantly gas lighting me about unmanaged risks and opening up certain hardened systems through the firewall means we're compromised- they're are all gonzo now.

[@Maa3zclghlgg]

Hey Sir, I beginn soon with my Cyber Security Uni, could you give me any tips to become successfully into this carrer ?

[@simonp37]

@@Maa3zclghlgg "cyber security" is way too broad to give short advice. Cyber security can be hardware or software, but also physical security in the company. Depending on the size of the company, intruders aren't just sitting in front of their screen and typing code and commands all day. They could be an employee of the company or try to impersonate an employee too.

[@taiquangong9912]

I appreciate your comment.

[@deanwhite8413]

"There is no right path for everyone. The right path is the path that works for you." I love this so much.

[@arthurson7994]

A lot of this feels very relevant to general tech related jobs. Really appreciate this video!

[@p.chuckmoralesesquire3965]

i just disagree with the guy that a computer science course is wholly useless for infosec, spoiler: it's not.

[@p.chuckmoralesesquire3965]

@Oscar G the video author then followed up that claim by saying learning things like python can be very valuable. Python, a thing that is very commonly taught in computer science courses. So even he contradicts himself, but yeah, CompTia certs, that's great man.

[@simonp37]

@@p.chuckmoralesesquire3965 Most people I've worked along side with in IT, in the past 3-4 years, didn't have any formal education in computer science, when they started their career. Strong interest and willing to spend hours on learning new skills, even outside work, seems to be the key for many people I've met.

[@p.chuckmoralesesquire3965]

@@simonp37 I've been managing servers and doing IT support and engineering, some linux stuff, wamp/lamp webservers, dozens of SAML2/single sign on integrations, a couple API integrations, azure active directory, mobile device management, configured some switches, managed certificates and PKI, managed sql servers and written reports, pretty much anything but full time networking guy and most of the IT people I worked worth over the past 20 years are what I would call schlubs and would benefit from 3-4 years of in class learning of the things you learn in CS- things like data structures, functions, change, chance, discrete math, all of that 10,000%. There's a huge massive chasm of a difference between someone who is self-taught to play an instrument but can barely read sheet music VS someone who can compose the music my bro- and I see that in the IT world daily.

[@p.chuckmoralesesquire3965]

@@simonp37 Even most people who for example go through security degree programs through online colleges are just learning buzz words and fear mongering common morons with very little understanding of the tools they are using, they just know how to use a few tools and do security theater and I do find joy revealing their laziness and all of the fundamental holes in their goofy assumptions while throwing around and abusing terms like "cYBeRRR!!" so hey if this guy is just saying watch some youtube videos and magically become a 'partner' or w/e, that's great.

[@KarthikR-mh1tj]

Hope to see a lot of contents from you in the future sir

[@atag512]

Really good information. I do also own a small biz specializing in cisco stuff..hoping my comment could also add value. 1 , a degree isn't a must, but, it definitely an asset. Equivalent diplomas are usually good as well. Degrees helps when it comes to work structure, ability to do quality documentation etc , but if you can show your skill during without that on a resume it really helps...certification matters, to us at least. Persons coming in with comptia (A+,NET+ and now Security) are really good entry level....I recently hired someone who showed us how he used GCP to build his own sdwan lab (for fun)..anyone on an interview panel that is technical, will always smile with this...so show them the things you tinker with, anything at all..this video was well thought out and very objective

[@onthewall425]

This video couldn't have been more suited to my current situation, thank you Marcus for the excellent insight.

[@DaniloAndrade87]

My thoughts exactly

[@johnsaigle]

I'd love to see a video where you go into more detail about why you've found Threat Intelligence to be more hacker-y than pentesting

[@saralkandpal5334]

Hey Marcus... First of all thanks a lot for the video 🙏 Can you make a video or tell us more about "Threat Intelligence". Like working process of threat intelligence, a path towards pursuing it, resources to learn it, and what are the daily to daily tasks of people working in this field.

[@elieoni-6213]

As someone who started literally 2 weeks ago, I kindly thank you for that sir! stay as cool as u are!

[@Nadeine]

Are you doing the CompTIA cyber security course?

[@itsourceress5520]

As a recruiter this video is great - you cover so many bases for people just looking to get started.

[@kimberlycanfixit]

Found you on a recent David B. video and now after watching this, I’m hooked. Thanks for hitting these topics on the head! Adding this video to our resources page on Cybersecurity Central. Thanks, Marcus 😉

[@simonemascia8368]

Thanks for this video! I ve started studying in cyber 6 months ago, and these type of videos really help new people to get into the industry

[@avaiano92]

I’m a new grad from a cybersecurity bootcamp and I’ve been looking for a job since April. I’ve applied for around 60 positions so far and I’m still not getting interviews. To be honest, I got only one interview in the cybersecurity industry. I’m applying now for IT support roles so I can at least enter the field and build my career from there. I think mostly of the companies are looking for experienced people rather than training new people for those roles.

[@Necheogbucyber]

Yup this

[@stuntman083]

IT support experience will do absolutely nothing to help you get into cybersecurity. The only way to get interviews is to copy/paste experience onto your resume from someone else's linkedin profile. I've gotten dozens of interviews this way, but you still have to be able to talk knowledgeably about the stuff you put on there

[@SkandiaAUS]

@@stuntman083 are you for real? Most companies would spot you for a fraud straight away. I actually thought OP's approach was really sensible.

[@tahntalus]

Which certs do you have? Was the cost of testing for the certs included in the final cost of attendance?

[@e__b956]

Same here bruh! Finished grad school, no cyber luck, I ended up becoming a technical writer and getting my sec +. Still searching til this day 😒

[@jacquelineakinbobola2033]

Thanks, great advice. 2 points I have. I'm based in the UK and went onto infosec after wintel and desktop engineer roles spanning almost 18yrs. My biggest regret is not going into infosec earlier, mostly because it was such an easy transition from what I was doing before and less stressful than supporting end users. There is so much to infosec than red team, Blue team There is a regulatory and compliance, risk management and training and awareness. I did my CISSP and that opened so many doors. I wouldn't entirely say no to learning pen testing skills, cos knowledge is never wasted and it can help in advisory role. Tech staff wouldn't be able to bamboozle you.

[@peppigue]

Whatever field you work in, be and perform the best you can (sustainably in the long term). Learn your position relative to others from talking to various people privately and professionally, read some certification requirements and higher ed syllabi and job listings to know what there is to know. And it can be easier to think about your value to an organization in terms of what they'd lose if you left. Finally, try to find a workplace that values real ability to contribute to work being done rather than degrees, certs and resumés. Be good.

[@ThBlackangel1108]

Thank you so much for doing this video. I am a Cyber Professional who has been struggling to find a Cyber position. Your video was watched twice by me today. It helped me a lot.

[@nigel3270]

You are awesome. My anxiety reduces when I listen to you!

[@flo97ist]

I am in cybersecuriy for 3 years now and I needed to hear this. Thanks mate, wise words.

[@Stoneface_]

What role?

[@stevefaust3532]

5 years experience in CyberSec, absolutely agree with smaller companies, it's a great chance to gain invaluable experience. I turned down a law firm in London & I'm currently working in a small company and they've given me a Greenfield project to improve and make significant changes to their security company (Including ISO-27001).

[@johntiles]

Hi what certificates do you recommend

[@stevefaust3532]

@@johntiles Depends what path you want to take, if you're a newbie to it all, start with the Network+ and Security+ to get those foundations in. Won't be sitting any of the advanced ones for at least 5-10 years. Experience counts more than certs these days for definete.

[@NoWeedMoreSpeed]

I've been following and knowing about you since your infamous WannaCry debacle. It's so great to see you making videos and sharing valuable things you have gathered along the years in the cybersec field. Keep it up!

[@sirivellajeevan527]

Its great that I found your video, this is clean content. No dramaa👏👏

[@stormchaser419]

People skills...people skills. Those who come off as friendly and cooperative and speak well can jump hurdles others can't.

[@BLVDFR3ND]

Just came across this channel, absolute gold. Defo no need for degree in this field, personally went the CompTIA cert path and working on CCSP. Thanks for sharing.

[@Ze_Moose]

What are your thoughts on Google certificates? 🤔

[@Flip65001]

This is definitely most helpful! Just recently did a career change into cyber and wanted to know where and how to start. This video helps a ton! Staying humble and listening to everyone helps. Looking for a job is what I find the hardest because all I see is like you said a ton of qualifications and I have none

[@juliusrowe9374]

Marcus, great and very informative content! Thanks for sharing!

[@charlierice8135]

What you said from 5:00 is especially important. The ability to understand how the technology works and the implications of a C, I or A attack on the system is paramount to protecting the system and understanding how to get it back to business as usual post attack.

[@charlierice8135]

The industry specific knowledge is very important for certain sectors, especially in OT or CNI.

[@0xf1337]

Hard disagree about a CompSci degree being "wholly useless" for InfoSec. Certainly not required but when you get to the meatier stuff it is VERY useful (and I regret not doing one).

[@jack.l3]

This is great stuff. Your insight is valuable beyond words, really. Thank you very, very much for this!

[@rogergreenwood1536]

As usual Marcus you make a lot of sense. I too would recommend to study what interests you, don't just chase what you think is the money. If you are interested in something you are more likely to remember stuff and do well. I went back to school to do a CS course in 1995 (having left school in 1977!). Hardest thing I ever did but well worth it for the spin offs learnt along the way. Thanks for the video, I hope the young folks are paying attention.

[@p.chuckmoralesesquire3965]

he said on one hand that a computer science course is absolutely useless but then said programming can boost your subject matter knowledge so I dunno if he really understands what is taught in computer science classes but that's a gaffe

[@KnellAnwyll]

I'm a 3rd year Cyber Security Student, gonna get my bachelor next summer, wishing for the best after the biggest down fall I had this year..

[@T-19-]

The opening of this video means a lot, I’m actually trying to get into tech

[@SwapnilSingh4u]

I feel it to me also, but never got a single job in cybersecurity till now. But i just motivate myself that one day i would get a job in this field. thanks bro for this.😀

[@melvinbagby4221]

Thanks for this video, sir. I needed to hear what you had to say, especially in terms of how elastic the requirements can be.

[@darriusrubin5991]

Thanks for the video Marcus ! Real solid advice!

[@frankcastillo2855]

"Do you want to make a cyber-security video or an ASMR video?" "Yes."

[@A-YoZo]

This was reassuring. I am trying to start and have been wanting someone to tell me the right way, but it's a "just do it" thing

[@wsyong707]

Would not say cs degree is useless tho... working in blue team I think it helped me quite a bit. Apart from that, thanks for the insights!

[@joshstewart1649]

I’ve been turned down for at least a few roles with interviewers saying I don’t have enough technical skills but now I am the InfoSec Engineer managing security for an entire company working remotely from home with only 3 years experience prior. In my current role I’m getting more technical skills in AWS Cloud, manually patching linux and windows servers, updating mail flow rules, updating and managing vulnerability scans. Yes, there are skills I still don’t have like scripting, DevSecOps, etc but the point is when given the opportunity you can learn on the job very quickly. My current job pays a base salary of 120k but again I love that I’m responsible for enterprise wide security.

[@Kipp_it_100]

Making the kind of content people like me actually need. You rule.

[@xaza8uhitra4]

Your videos are awesome and have inspired me in my own info sec journey. thanks Marcus , would love to see a pt 2 , 3 of this

[@phillydee3592]

Thank you,just started PEH, there is a lot to take in as a newby..So it gets overwhelming

[@shayanrostamzade9718]

Thanks mate, as an individual who has just started in cyber security field, it was pretty helpful.

[@stereotoned]

I enjoy your calm voiceover. It's very soothing. Not to mention the good content 😄. Cheers!

[@Whatthellisthisthing]

Recently graduated and landing a job in CS seems impossible or difficult to say the least. Especially for a field with such exponential growth.

[@epotnwarlock]

Very true, just keep trying, keep learning, find ways to make yourself better (especially on paper)

[@PierceSunderseatsRAMEN]

The question is where do we find the sweet little companies he’s talking about…

[@gorgeharris4965]

@@PierceSunderseatsRAMEN I am 18 and just got a full time job at a SOC and I never applied to any jobs I got reached out by a recruiter on LinkedIn. I would say make your linked as good as possible or even pay someone professional to help make it for you.

[@cryptochris6015]

@@gorgeharris4965 How does an 18 year old have a good LinkedIn, to land a CS job, that is truthful/verifiable? lol Were you some kind of young Python prodigy that earned a degree before you were legally an adult?

[@v380riMz]

@@cryptochris6015 It depends on the country. In The Netherlands it is quite "easy" to land a job in a SOC field or something similar. That said, companies love when you're driven and ambitious. I'm planning to get the cybersecurity architect expert certificate through the MS Azure certification path. Next to that I'm aiming for the OSCP once I've finished writing my thesis. Companies love to hear that, you might not know a lot at the moment as a student, but they see that you're up to date and are driven to learn difficult topics. Also failing in this industry really helps you learn a lot more

[@martymoo]

brilliant, you're doing it

[@elizabethconley7976]

You are a hero Marcus, remember that

[@OmgSlayerVincent]

Incredibly useful information for me as I'm trying to pivot within the industry , thank you very much.

[@TaureanRuler]

If I may chime in. When it comes to getting a degree you should be showing the ability to learn beyond concepts taught in the classroom. Ex learning a programming language and being as proficient as possible. Doing Linux projects. Learning a new skill that coincides with cybersecurity. Joining meetups to get to meet people in the field.

[@SteveGarfunkle]

Thank you. Great video!

[@peterpanda5167]

Thank you for this, you’ve given me courage to go out an apply!

[@burnonedown09]

I really really really needed to hear this right now

[@StuartMill14]

This was well worth a watch, thank you for your views on all this. I am an aspiring Infosec professional, currently working through my education and a little foggy on where I want to end up with all the options, but it is good to know these things when trying to figure that out. Appreciated Marcus!!

[@jaredt9231]

I appreciate the transparency and honesty in this video. I am starting a 2-month course with a small IT tech institute, and after i complete it they will assist me with resume building and job placement. I have no idea where this journey will take me but a wise guy once said the unknown is growth.

[@ericekuri3734]

Hello, I'd really to know the name of this IT company, so I can enroll.

[@cenobyte3]

Educational and informative as always. Thank you for this.

[@jb23303]

Very helpful video! Thank you!

[@elvanmorris3708]

You are a good man bro , thanks for giving me hope.

[@Raito065]

u have a calm voice its beautiful

[@DaljitSingh-ks6ci]

Thanks for useful video.

[@macboyau]

His voice is so soothing.

[@Meowah_adventures]

Thanks for sharing :) Wish list from companies is something that happens a lot.

[@mascal0047]

Why is this dude's voice so soothing 🤯

[@youcefkel4743]

i really enjoy listening to you dude . huge fan . thanks for the quality content .

[@lucascarman2578]

This video is great but I couldn't help but feeling like I was watching an ASMR video haha. Your voice is so smooth and soothing.

[@nelsongraham108]

Awesome. thank you.

[@cuddy90210]

Great Info!.. Thank you so much!

[@steamlabstech]

Great video Marcus, I watched your session with David Bombay recently and know of you from Wannacry. Looking forward to you posting more videos soon, couldn’t agree more that pen testing and red teaming is over saturated, threat intelligence is definitely interesting

[@suesue5769]

Wow! Where have you been?!? I have been looking for you! This is EXACTLY what I needed! New subscriber!

[@bigeddiekane4995]

This is amazing thank you for this bro 🙏🏼

[@AbdullahAhmed-ts7zc]

My Ex-Boss and Team leader were highly gatekeepers told me couldn’t do this or that regarding the cybersecurity. As i just started learning cybersecurity

[@lisathelibrarian]

This is good general advice for pretty much any industry. Also if you are interested in working for a government entity, then the salaries of each position should be publicly available on their website; also for jobs for a public educational institution. (true for U.S. jobs)

[@danieljuno810]

Great advice!

[@zetse2544]

Thanks for this Marcus, you are the 🐐🐐🐐

[@redumbrella6832]

Your voice is so pleasant to listen to

[@alyx3135]

Would love of you to keep posting vid on how to properly get started.

[@callme_fakez]

Glad this video came up for me. I was applying for nursing school which I don’t want to do because I’m a cna and I see what they go through. But while studying for my a+ I couldn’t find people who’s in tech that love there job and told me that there was to many people in the tech field. Everyone I met in tech was rude. One could even have me an entry level job but refuse to because he told me the field was terrible and he was gonna quit. That was 4 years ago and he’s still there

[@mytechnotalent]

I agree Marcus. I am with a small and it is the most powerful, creative and rewarding experience of my life. I will never work for a big again.

[@ellerionsnow3340]

Marcus such a chill dude.

[@smft9147]

Thank you so much this is very useful

[@balfit]

Fully agree. Many thoughts to share, I’m trying to shorten it. Having a degree might prove you’re good depending on where you got it and can be something to be proud of. However, the lack of it does not mean the opposite. Some people put their energies in ‘on the job’ learning. On hacking: even back in the days, Mitnick said, most of his hacking wasn’t computer related, but social engineering. Reimbursement: Another often overlooked ‘benefit’ is the equipment the company provides an employee to work with. If one is an Apple/Dell/Framework fan, they might get a boost in their everyday job working on a high end Mac/XPS/Framework DIY. Same goes for many other brands, technologies or OSs… It doesn’t really cost as much for most companies because as opposed to salaries, it’s a rarer cost they can deduct differently, in most cases with way less overhead than for salaries…

[@eatens]

About the degree point, depending on where you are, companies may have different pay scales especially for entry level positions based on your qualifications. At least for my country, without a degree your salary offer will likely be around 12k less than your degree holding counterparts. Seems pretty old fashioned thinking but oh well

[@Stoneface_]

@@eatens what country?

[@balfit]

@@Stoneface_ I graduated in Hungary, there it did matter. It was a sign of talent and perseverance as tuition was more affordable than in many other countries. Also backed with a very encouraging fellowship grant system. In the UK, it’s a lot different for having a degree is often a matter of family funds and not talent, in my experience. But of course it’s generalisation in both cases that’s always prone to exceptions.

[@Stoneface_]

@@balfit nice. I'm from the US and degree matters to a certain extent. I know a lot people in IT without a single degree and have done very well. There are also people with degrees who have done fantastic as well. How's the IT industry in Hungary? Do they pay good?

[@balfit]

@@Stoneface_ well, I am living in the UK since a decade and thus I don’t know anymore. But pay wasn’t bad with a _decent_ degree in IT. There were plenty of problems though for those who were misled by low quality degrees/bootcamps if they only signed up for the magic and didn’t really learn. So it was a mix even back then. But most definitely, a degree from a solid university helped an awful lot. However, without it, talent and luck might have got a similar result eventually. Big companies did have a need for degree as an entry criteria. I hope it changed because for this reason I met plenty of people in technical fields having a social studies degree or similar. Which again did not mean anything bad, but often it just defeated a rule that caused difficulties for some talented self taught people…

[@danbomgard3018]

your voice is seriously ASMR, I am now more knowledgeable and more relaxed 😂

[@aUCLZlstrBh5upnFr7OmhNHag]

bro’s drippin out in the thumbnail 🥵

[@emmanuelboakye1124]

Thank you so much.keep up the good work👍👍

[@hakeemonipede8358]

Hi Marcus, Please make videos on a Path for someone trying to break into Threat Intelligence... If possible, share resources to start, labs to learn from, anything please! It's been a dream.

[@Leanedback450]

Saw your podcast with David it was dope’

[@killertigergaming6762]

I think with in the second section you very well described my exact thoughts i would hate to work in a big company because I wouldn't feel like i was benefiting anyone or having a actual impact on it. Im not any expert in cybersecurity but i am interested in programming

[@itgamer4143]

I am working on my degree for cyber security. I still need 13 classes. I have been in 13 years active duty military in the data Analytics field and I hate it. I like cyber security and love network security. I would leave the military in a heart beat if I knew I had a good job in the outside.

[@zeewtube01]

The new style in thumbnails is hilarious XD

[@danielnease2230]

You have a very soothing voice 😂 but good info! Subscribed!

[@neotroncs]

I was not for sure but it sounded like you said that it is illegal to discuss your salary. It is not illegal unless you signed a NDA. You have a federally protected right to discuss your salary to anyone with out consequence.

[@cod4volume]

Bout 50 seconds in and I subbed lol gg’s dude, well said!

[@overyourbed666]

Would love if you did a podcast with John Strand/thecybermentor. Keep up the good work!

[@macktheripper7454]

What a great video. Excellent 👌 thank you Marcus. My concern is that I’m 39 and breaking into the industry may be difficult 😞

[@gothparadigm]

thank you so much for everything you provide! c:

[@maggiemaeasmr]

Very helpful!! Thank you👏🏻

[@theMadhatter817]

Could you do a video of whats asked during a typical interview for a company?

[@ctjmaughs]

People definitely need an internship and personal projects before I look at a candidate.

[@PierceSunderseatsRAMEN]

Sweet dude… I keep hearing contrasting information but I guess that’s what the gatekeepers are spitting.

[@gueric21]

Great advice. Thank you Marcus. They need to feature you in Watchdogs. 😁

[@ursulajoseph2573]

God bless you. This speaks to me

[@al-aminalpoet3725]

Thank you. I will need a mentor to guide me through my cybersecurity journey. I love the career and want to get in but a bit confuse on how to go about it.

[@Dorcas-j4r]

ʏᴏᴜ ᴄᴀɴ ᴡʀɪᴛᴇ ʜᴇʀ ᴏɴ ɪɴꜱᴛᴀ