What I think about Cybersecurity Content Creators

[@lionelkanyowa]

I knew this guy was the real deal when he wasn't afraid to criticize the Google cyber security certification.

[@JonGoodCyber]

Thanks for the support! I'm here to help people, not to lie to them for selfish reasons.

[@Binarybrain-n2z]

Thankyou for your insights. I have a Master of Science in Cybersecurity, along with several certificates, and hands-on experience with various tools. I have seen few content creators of Cyber security preaching about how they got the job with no IT degree / certifications. It's really sad to see that so many people fall for their claim. Infact, it's never true. I have been looking for jobs since 2.5 years as I am an international student ( close to 2000 applications ), it was very difficult to get a sponsorship so I am not able to get pass through 2nd interview because of it. Nevertheless, when I came back to my home country, it's pretty hard because the requirements for entry level job is minimum 3 year-5 year with certifications like OSCP, CISM, CISSP. Not sure why these people give false information to CS enthusiasts.

[@JonGoodCyber]

You're welcome and I'm glad that you enjoyed the content! I will always tell things like they are, but unfortunately not everybody is like that or they might not know the actual reasons for things so they just say what they think sounds good. Keep in mind that trying to get work sponsorship is definitely a different challenge more related to labor laws than it is being qualified for the job. I help people land jobs all the time with little to no experience, so it's definitely doable, but if you're not getting interviews you need to look at how your skills align with the jobs, how your resume details those skills, and potentially expand your job search to closely related jobs. Education is the easier part that nearly anybody can do, but it's the ability to sell yourself that's going to land you the job.

[@upshawsm]

Thank you sharing your vast knowledge! You make a lot of great points. A lot of influencers are propagating bad information.

[@JonGoodCyber]

Glad you enjoyed it and you're welcome! I'm here to give the truth and not be a part of the problem.

[@upshawsm]

Wait! I cannot make 200K with Secuirty+ and zero experience...

[@JonGoodCyber]

Depends on who you ask lol!

[@idadjiguimde6045]

😂😂

[@dcgcPT]

Hello Jon, thank you for the video. I am an European living in Europe and have been working in CyberSecurity for about 8 years in different jobs and different corporations. I also live abroad in Europe and speak different languages. I believe my technical knowledge is at an intermediate level even though I currently work as a senior (yeah...). What would be your advice for someone like me who would like to start making KZbin videos, articles in its own website or livestreams on Twitch, on CyberSecurity, should I focus solely on technical content, should I have a mix of non-technical content more on communication/collaboration or how to use technology for communication/collaboration within an organization in contrast to career advice, resume, job interview like I see everywhere? I have experience working in NetSec (High), Incident Response (High), Vulnerability Management (High) and WebApp Penetration Testing (Medium), I am not sure what kind of content I could make based on my experience. I want to start immediately and fast because I have realized that at some point in my career, applying for jobs with CV with experience, master's degree and dozens of certifications means nothing anymore, you have to do more to get noticed or even called for an interview.

[@JonGoodCyber]

Because you mentioned it, the first thing that I'll say is that making content of any type doesn't take you from an intermediate-level professional to a senior level or higher. The only way you will progress is to learn more, get more experience, and get jobs with more responsibilities. As far as content for any platform, talk about what you know and what you enjoy. There are plenty of channels and videos out there to teach you about various platforms but understand that it's a lot more work than it may seem like, and it doesn't replace all the other things you need to do to succeed.

[@dcgcPT]

@@JonGoodCyber The goal is to end up in a position where I get to know more technically in the process and also meet more people like-minded who are actually interested in CyberSecurity and don't only show up to the 9-5 for salary or want to meet people to get something out of them.

[@bootshausk39]

Like for you comment about offensive security. Most of pen-testers have no clue how enterprise security works. Applying consistent and efficient control framework across the IT stack is THE skill you are looking for if you’re goal is to be successful in cybersecurity. Coming back to cyber content - can you even make living out of it?

[@JonGoodCyber]

There's a big difference between the knowledge that a junior or entry level penetration tester has versus a senior level penetration tester, but I certainly don't agree to say that "most don't know how enterprise security works." More often than not, the problem is actually because every environment is different, but that doesn't mean they don't know how enterprise security works. Applying controls and frameworks is a different skill set and nobody can be an expert in everything. People can make a living out of just about anything in life, but cybersecurity relies on credibility regardless of the situation.

[@bootshausk39]

@ there was a study showing that juniors are actually 70% of the group. Most of them never stay in the field for longer so I think this still applies. You start with breaking things and then move on. Those which stay - certainly over time learn a lot general stuff. Overall however this role does not have required exposure to higher level issues.

[@JonGoodCyber]

@@bootshausk39 juniors are a huge portion of the professionals in the career field period, not just in penetration testing. The challenge is that you're equating being a junior to not knowing how things work, which is entirely subjective and not necessarily based on facts. I agree that everybody is better off with broader knowledge, and those who have it are far more valuable than those who don't. You can't expect somebody in a specialty role to be an expert in something else, whether that's penetration testing, security operations, GRC, or anything else.

[@cmartin8093]

Sadly, I can name some cybersecurity "experts" or IT "experts" here on KZbin

[@JonGoodCyber]

I see it all the time and it takes about 5 seconds to label them as "not credible" if you do minimal research. The problem is that not everybody is willing to do something even as simple as looking at their LinkedIn, which many times reveals they don't even work in the career field or have very minimal experience.