The Reality of Working in Cybersecurity | What It's REALLY Like Working in Cybersecurity

[@WithSandra]

Happy Wednesday! :D Let me know your thoughts on this video👇 Thanks for watching! More learning resources below: 📚 Google Cybersecurity Certificate: imp.i384100.net/k0R0rz 🧭 Springboard Cybersecurity Bootcamp (Get a Job or Your Money Back Guaranteed - $1000 off Code WITHSANDRA): www.springboard.com/landing/influencer/withsandra 💡 Ace your cybersecurity interviews with my Cybersecurity Interview Prep Mastery Course: learn.withcybersecurity.com/ 📕 Get My FREE Cybersecurity Beginner Roadmap Guide: www.withsandra.dev/ Stay Connected: 👯 Join our Discord :D - discord.gg/2YZUVbbpr9 Connect on LinkedIn: www.linkedin.com/in/withsandra/

[@thelandoftwitchclips]

Cybersecurity is hard because the gatekeepers make it hard. They want you to learn every domain even though they only deal with repetitive tasks daily.

[@DarrenRivey]

Been doing it for 20 years in silicon valley with the most self-centered egotistical people imaginable with a very consistent theme: high barrier to entry for new entrants. Skip the bootcamp… get an employee referral.

[@patrickchan2503]

the company wants to feel special and sexy, so they add all these requirements to show they know what they're talking about, and entice applicants, only to disappoint them at the interview stage when the candidates realise the actual job is internal auditing.

[@oozey262]

the repetitive definition by itself varies from one person to another. For example, an entry level cybersecurity may deem whats repetitive to you a new challenge that needs to be tackled. Unless of course everyone that workers there is a pro and the company wants to call you in just to ruin your day. That is something else.

[@callhard]

thank you soo much, idk why they gatekeep soo much

[@thelandoftwitchclips]

@@callhard they want to feel superior

[@BeardedRucku5]

What a doctor is to medicine, a cybersec rep is to tech, you will never stop studying.

[@batman-sr2px]

I still don't understand what they do all day other than emailing people and responding when there is an attack

[@warmusic863]

@@batman-sr2px is this true?

[@jaylansmith1584]

@@batman-sr2pxMonitoring Assets , configuring scanners, firewalls, SIEM reporting, etc. just depends on your role.

[@batman-sr2px]

@@jaylansmith1584 all that is done in office or work form home usually nowadays?

[@jaylansmith1584]

@@batman-sr2px Both? Depends on your company. 2x a month for me it’s in office.

[@nathancroley6688]

i hear this exact type of video about literally every single thing i have interest in

[@emyseoni636]

Why does this make me want to do cybersecurity more, not less?

[@patrickchan2503]

coz it's hard to get in and you seek a challenge?

[@dryxbee]

@@patrickchan2503bingo

[@vsoraya]

Go for it! Has no coming back, everything is digital, online if you are up-to-date you are not going to regret.

[@morganvoisin]

I would GLADLY work 12AM-7AM every week for cybersecurity. I'm working hard to get into this stuff.

[@haroldchairs4434]

Looking at your video without a job….studying for security + and just finished a masters in it and management with concentration in cybersecurity.

[@wesegalite1727]

Hey, I was going for the same thing I'm IS with cybersecurity concentration and plan on getting my masters in cybersecurity soon I'm currently my third year. How has everything been for you and what plan or advice do you have?

[@kaushaldoctor7]

Good to know this types of insights and situations a cyber security professional has to go through. Thanks a lot for sharing 😊

[@11bravo72]

Cyber still sounds good to me. Compared to my grave shift now and back in my Army years at times I be working over 24 hrs. So 1am - 5am on call doesn't sound so bad.

[@shamelessly.shannon]

I think it’s because cyber security is such a broad term too. There are specialities within cybersecurity. It’s like hey I wanna be doctor… okay… well what kind if doctor? Are you specializing in cardiology, pediatrics, oncologist.. and the list goes on and on.. it’s the same with cyber security. Personally, I already work in forensics, I’m well versed in chain of custody, I’m very familiar with seeing difficult to see images, as well as always keeping up with any new laws/statutes that pertain to it.. DFIR is where I’d like to do as I feel like I already have a bit of an upper hand there

[@Ducky195]

even a janitor could be called back to work if a pipe sprung a leak and the area needs to be cleaned up or called in for snow removal early in the morning or at night due to the severity of an upcoming storm. No one is immune to being called in for work related issues.

[@Gavinbelson]

I think you missed the point bud.

[@bigYodatheboringJedi]

no one's gonna call the manager to fix pipes 🤷‍♂️

[@jmbmlc986]

When I started working at my previous employer, I had to work the graveyard shift. For me it was okay but challenging. At least it wasn't as busy compared to working day shift and I could build up on my skills and know much more about the position. So for anyone thinking that they may have to start off working odd hours you're not accustomed to, prepare yourself mentally and physically. This is how you want to show your employer why they hired you. It takes making sacrifices, dedication, motivation, and a positive attitude. If you ain't got none of these, then don't waste your time. Move on to something else!

[@WithSandra]

Love this mindset!!

[@patrickchan2503]

There's a lot of "cyber security" roles but they are mostly in a small team of 2-3 doing internal audits, getting ISO27001 cert, running awareness campaigns, and companies outsource the external threat handling. Unless the company is big, few roles are actually hands on physically building things or responding to incidents. It's just become project management for most companies but they add the word cyber security in the title... very buzzwordy.

[@kuberbhagat6255]

did you mean its not worth to have iso27001 cert

[@patrickchan2503]

@@kuberbhagat6255 it depends on the business. iso27001 cert is like a stamp of approval. if a business has it, it will attract customers who think the business is safe. It's not a legal requirement I don't think. I am not a specialist in this field but this is my understanding. My initial comment was not debating if one should get ISO27001 by the way. Disclaimer: I don't know the cyber industry well and am only talking from the little experience I have. But I do think this is the situation.

[@patrickchan2503]

@@kuberbhagat6255 I didn't say that. From my understanding, most companies want to see ISO certs achieved by companies. It's like an accreditation but not a legal requirement

[@batman-sr2px]

so they don't even pay you like cybersecurity role more like what a project managemer would expect to make??

[@patrickchan2503]

@@batman-sr2px I don't know sorry. But I would imagine. Because cyber or tech roles in the UK pay normal salaries. There are outliers of over/under paying. What about in where you are from?

[@jayriv1]

Just started my cybersecurity job! Anything I should expect starting off?

[@nanderson715]

what kinda certs/experince and degree/degrees did you have?

[@jayriv1]

@@nanderson715 no degree just sec+ and ITIL. Currently studying for my CySA…was in the military & was introduced to IT there.

[@hawjhawj5251]

Hows it going so far?

[@joelrobert4053]

@@jayriv1Nice, good luck on your cysa journey

[@jiffjifferson5365]

Whats your job title? Also, she didnt cover the glamous part about working in cyber security. Easier to find remote jobs in cyber vs other sectors in IT There are also a handful of cyber jobs where its very minimal work. I strictly tell ppl to avoid soc/noc if you want to have a good work to life balance

[@ViSuaL-X-ray]

Sandra you rock! As a prospective professional in this sector, I truly value your content 🙏

[@urluelhurl]

Drawing from experience, another good option to get into cybersecurity is to enlist as a 17C Cyber Operation Specialist in the Army. You get experience, TS clearance and financial assistance with GIAC/SANS certs.

[@0xAnomaly]

1. On-call hours you will have only if you are threat hunter, not soc analyst cos they usually work in shifts monitoring 24/7. 2. This is not a thing even a small companies have wsus to push patches. 3. Point of video - Advertisement. 4. I agree on certs. They do help to get ur foot in the door. 5. Stress is always there - This is why people complain about gatekeeping, you need to know a lot to not fuck up. 6. I agree its constant learning.

[@AviatorMike777]

Not true (regarding the on-call hours). I work in a SOC where we have Senior SOC Analysts who are on a rotating on-call schedule on top of their regular day shift schedule. Both the Junior & Senior Analysts also do Threat Hunting. I guess it depends on the company, but that's my experience.

[@mrwonderful4616]

I’m not in cybersecurity but I have run into people in IT who try to gatekeep and try to stop you from advancing. It’s much easier in development roles because you can build solutions off to the side in order to get around the gate keeper and get the internal customer’s attention so he pulls you up in your career. But how do you get around the gate keepers in cyber security? Usually turf building happens the gate keepers are trying to protect what little work they have or protect their own jobs where increase in head count is blocked by corporate.

[@tochipraise748]

Still waiting for my first job❤

[@tearanch613]

right. lol.. like we not trying to hear "why its hard" idccccccc. i want ti try for myself.

[@Peteytube5000]

@@tearanch613 how long have you been waiting?

[@morisn]

I like this. Excellent and accurate perspective. Thank you.

[@tonyb9864]

Much needed video! Thanks!

[@BLACKNIGHTKNIGHT]

Sandra, I’m a graduate student from a UTD Cybersecurity Bootcamp in July 2024. Are there any “Real” companies that hire entry level applicants? Wish I knew about that cybersecurity program you mentioned or get your money back.

[@SugarWalksScenicTalks]

Have you gotten your certification?

[@Cloudnine2024]

If you don't have a tech background and think Cybersecurity might be for you because of the money.... DON'T DO IT? It's really hard for non techies and boring. Like talking about insurance boring. It's very complex and your mental health will suffer. Only go into this field if you're genuinely interested regardless of pay.

[@WithSandra]

^Really appreciate your honest thoughts on this

[@YouAREyoubeYou]

Insurance is actually not boring

[@bpop518]

@With Sandra Hey Sandra. I'm currently in Level Effect's Fall cohort, and the staff is great. Nice video

[@CodeDdukDdak]

Cybersecurity is challenging because an attacker only needs to find a single vulnerability to break through, while defenders must block all possible entry points to succeed. Additionally, since attack techniques are continuously evolving, defenses must also constantly advance, requiring a comprehensive prediction of all possible scenarios. I have been working in this field for nearly 15 years, and I still need to keep learning.

[@CenturionKenshin]

I see it bit different though - you can not prevent cyber incident from happening 100% - it is just a matter of time - and not if... but when... and when it happens there should be damage mitigation plan, and in time detection, for example several layers of information leak mitigation and what should be done in this case... control what information leak out and in what form. You can not plug all holes and keep connected systems running, you can provide some deterrents or make it more a hassle to get into the system, but it still same level protection as a door... buying you a time to detect the attack and not really prevents anyone who wants in from entering but it can be monitored and entry can be detected and acted upon.

[@Hypxrkill]

Question, so with the high need for certifications, do companies accept degrees in cybersecurity? I'm in college for my bachelors in Cybersecurity, is that recognized as an equal to a list of certs?

[@joelrobert4053]

While in college, network with your fellow cybersecurity students and ask your counselor if they know of any IT or cyber internship opportunities for initial experience. Certs are good also

[@batman-sr2px]

​@@joelrobert4053are there many internships in cybersecurity? And can yoy get one without school.

[@RobertLoyale]

I think this is a terrible take.

[@YouAREyoubeYou]

Why do you feel like that?

[@sarahanderson6913]

This was so needed! Thank you!!

[@KuchLife_Mein]

As a Network Security Engineer let me tell you getting a job as fresh graduate is gonna be very very difficult.

[@Peteytube5000]

yikes.. please elaborate

[@KuchLife_Mein]

@@Peteytube5000 for example in information security it is easier to get into GRC, IAM, Pen testing. Application Security, SOC etc. but network security is not as easy to get in like other information security domains

[@jasonj8505]

For most. But for me? Buddy I had at least a dozen offers lined up by my senior year. I was involved in *every* relevant extracurricular, every career fair, joined an IST fraternity, 2 years of undergrad research, became a TA, was also dean's list every semester.

[@nicksmith5400]

Some of this is a little extreme. Odds are you're not the only SME on vacation. Odds are you do have automation for many of these things or you engineered it. It's just a bunch of api calls and sql-like usually. It is not your job to manage the risk, it is your job to present the risk and control options. The business will manage and accept the risks, not you the cybersecurity team.

[@nicksmith5400]

One disagreement, cybersecurity must be a passion, otherwise you won't stay up to date, i guess unless you're GRC. This is one of the few professions where if you are not obsessed with it you'll fall behind so fast.

[@miaolmeda9428]

Thank you for sharing!

[@Nano-71]

Starting to redo my resume to start applying. I just got my sec+ and want to update my resume and also start labs. Thanks for this video, you gave me more insight on this field. Especially on burnout 😅

[@jiffjifferson5365]

Just to give you some more insigh that i think are important Theres a handful of cyber jobs that are full remote IMO cyber jobs have great work to life balance i strictly tell people to avoid noc/soc if they want to have a good work to life balance

[@bigjosh_2014]

@@jiffjifferson5365so I’ve been thinking that SOC would be a great way to enter the industry… would other roles would you recommend for someone wanting to get started. As of now, digital forensics sounds the specialization path I’d like to try after with some experience. Any feedback would be appreciated!

[@YouAREyoubeYou]

@@jiffjifferson5365what’s an entry level position that you would suggest?

[@PhilForrest]

And I thought auctioneers talked fast 😮

[@vineetkanojia1205]

me watching this video without having a job😶😶😶😶

[@WithSandra]

You got this!! Keep applying, try builtin and startup.jobs too, they're job portals that I use to look for cyber jobs. Start posting your wins (course completions, learnings, etc) on LinkedIn and connect with others, you never know when your next opportunity is coming. Best of luck to you! 🙌😄

[@Discover-Hidden]

What certificates do you have?

[@vineetkanojia1205]

@@Discover-Hidden eJPT, Some cloud certification like ICCA, networking & hardware

[@Discover-Hidden]

@@vineetkanojia1205 never saw this combination before! Your goal is to be an ethical hacker/ pen tester ? Icca is not reputed, if want to work in cloud, do the basics, MS azure, google cloud or AWS. Add in Google cyber security certificate/ security +. After that, never mention icca in your resume! It's not as broad as those aforementioned.

[@Abuhassan7777]

I think i found the most professional channel on the subject. Many thanks for the beneficial videos. Question if i may ask, is it possible to get a remote Job/Internship in a US-based company, for someone suppose living in the Saudi who has certifications and little bit hands on experience?

[@mzt1936]

Kind of depends what area of CS you are going for. SOC and GRC in oppostite end of the stress spectrum.

[@chopperz6650]

*me watching this after being in school for 4 years*

[@bros8648]

Had to put this on 0.75 playback speed

[@18428Rango]

Thought the pace is perfect

[@zb1066]

I'm interested in GRC. My understanding is that its regular hours but it may require chasing folks to do their job...

[@rene291]

It’s like dealing with toddlers all day everyday

[@AviPatilCA]

That's true.

[@lianne2408]

Lovely video❤️ but I couldn’t find the IT with CourseCareers link

[@xOrchid23x]

Great video. Sounds very stressful

[@jiffjifferson5365]

it's really not theres plenty of security jobs that have AMAZING work to life balance full remote no micro management i think it sounds stressful cuz she highlighted the soc environment i strictly tell ppl to stay away from soc/noc if they want to have a good work to life balance. in other words, if I'm thinking about work while I'm off. It ain't a good work to life balance.

[@savancex]

​@@jiffjifferson5365 where else would you recommend them go?

[@user-es5jq6yy9l]

Are there any easierjobs on the mind.... In IT that is regular evenings hours not switching schedule around

[@angietorres8302]

I used the link but I never got the discount

[@iamkzb]

what is actually cybersecurity analyst doing? and is there really an entry level for cybersecurity? or remote job for cybersecurity?

[@hawjhawj5251]

Following

[@jiffjifferson5365]

cybersecurity analyst can do a number of things at the end of the day the title can be vaguely given by the company A security analyst can be in charge of security documents basically every system on the network will need to be assessed and reviewed/ continuous monitoring You have the other ones where they are more on the technical side you could work on a number of tools such as splunk (siem), tenable (vulnerability tool), endpoint tools like eset, it could include incident response then you have the security engineers which can also include everything i listed above. Remote jobs are very easy to find in cybersecurity which is great for work to life balance To me I think a lot of the times the word entry means the company doesn't want to pay you the fair market value for that role

[@hardlessons9732]

Booty camp for those who already have experience and seeking to brush up. If you are newbie, it’s a cash grab 👀

[@GregXHunterz]

Does this also apply for other subset of cybersecurity such as information security, IAM (my goal), vulnerability analysis etc? Ik SOC analyst have to deal with on-call stuff

[@WithSandra]

Depends on the size of the company, my cyber team at my last job was 10 people so we did everything from infosec, grc, blue team, vuln mgmt, etc. We had on-call even though we weren't necessary SOC. Bigger companies likely have less tense on-call because they might have people in EMEA/APAC so you're more lielly to have international teammates. Hope this helps!

[@GregXHunterz]

@@WithSandra I see. My goal is to get into IAM but it seems pretty hard to get a position there as it requires more than entry-level experience based on what I saw. Do you have any insights here?

[@whenhen]

Just a heads up that a lot of IAM roles are given to the IT departments, specifically system admins and engineers. In those roles you’re definitely going to be on call at least occasionally

[@batman-sr2px]

​@@whenhendo you find on call roles tend to be more remote rather than in office? Which do you think in IT are more likely to be hybrid and remote friendly?

[@whenhen]

@@batman-sr2px I’m hybrid. On call roles can be for hybrid, in person, and remote. There are some sysadmin roles that are fully remote, but the majority seem to be hybrid or rarely fully in person

[@brokecsstudent]

I think I might just stick to CTFs

[@hardlessons9732]

Hence, work for a large company

[@ljkobile]

Who must work in it

[@imlegendcc2854]

You should change cyber security to cyber secure. Secure the hacker is your priority. 😂❤

[@georgeabhilash9436]

you are doing good things a lot and you have rather good english also however try to avoid talking with your "nose", most of us its very difficult to catch what you say.

[@CreateNowSleepLater]

These are good point but thats what the money is for. Cyber professionals are well paid for a reason.

[@A_L90]

The downloading more ram took me out. Jesus Christ. Talk about insider threat, non intentional of course.

[@MannyRoman-x5b]

How can I work from home with no experience

[@WithSandra]

I have a few vids on how to get a remote job in cybersecurity! Hope this vid can help! - kzbin.info/www/bejne/h4avaqNmmqqmg6c

[@MannyRoman-x5b]

@@WithSandra I can't afford go back to school i don't have a job unemployed how can I get a job in tech work from home I don't drive u have any Idea I can fine a cheap course to land a job I been out of job like 5 months

[@node-]

You're not gonna find that answer here this is another cancerous CS YT channel so she can make money and never actually do work in cyber that's why every video is just talk and nothing is ever shown next she'll tell you to buy her course 😂

[@musicalprodigy1]

You need skills to work. Hard but fair, that's life

[@batman-sr2px]

​@@WithSandraare most jobs work from home or they want you on site.

[@joseoswaldomartinezrodrigu154]

Encontré un error en el sistema, no están haciendo las tareas

[@joseoswaldomartinezrodrigu154]

Señorita despidieron 45 personas del sector

[@joseoswaldomartinezrodrigu154]

Señorita le repito me faltan 840 semanas para la pensión

[@michaeldickerson98]

#cybersecurityneversleeps #letswork

[@easterneurosweatsuitfan1371]

Your videos require no 1.5x whatsoever!

[@joseoswaldomartinezrodrigu154]

Alo llamo para reportar una falla en la factura de recolección de datos

[@corpuzone]

What if you have no exp and no certs? No formal degree? How can HR consider you as a candidate?

[@chisomogbonna8992]

You aren’t lol .. do the work and apply

[@carsonjamesiv2512]

😃👍GOOD!

[@kams196]

Ok now you joigned the list of the annoying youtubeurs with annoying titles?

[@curlehcap4767]

💯

[@WithSandra]

Thanks for watching! 😄

[@agnesakne4409]

do you get chicks in cybersecurity?

[@briance71]

welcome to corporate life! What an odd video.

[@DrMerciless]

The only way to get a job in cybersecurity is who you know not what you know.

[@celaeno919]

False.

[@HarishKumar-jq2xi]

True but not the only way but one of the way for sure

[@jiffjifferson5365]

rofl not even

[@celaeno919]

Someone who claims he can't get a job because he doesn't know anyone who can offer him a job is just protecting his ego, in denial, and resentful that he lacks the knowledge and skills required to do the job which, if he really did his due diligence to acquire this, could convince anyone to offer him a job since he would actually KNOW what he is talking about and this would be evident in the interview process and greatly improve his chances at getting hired.

[@lterry21]

It may not be the only way but it helps for sure!!!

[@ibrahimmohamed-t6v]

Yeah Right Sounds like scam to me

[@CxGreen]

You going to make a $100,000+ for being a sme so yea if you on vacation you will be on call

[@joseoswaldomartinezrodrigu154]

Estaba buscando empleo

[@SuikodenGR]

So basically, this isnt the type of job who - - dont want to continue learning every day - not a team player - not initiative, communicative or think outside the box - not a team player - expecting to not be bother off the clock hour. - leeping up with the latest CS news. - have a to high of an ego in their skils. Learning about Cybersecurity is a bit of a passion and since there os so much to learn, your most likely only know about Cybersecurity and will end up missing out non-CS information as one progress on their careers.

[@t1mmy99]

first

[@WithSandra]

Hey Adam! Thanks for watching 🙌

[@t1mmy99]

@@WithSandra love ur content! keep doing what u r doing :)

[@rosagatica6349]

You never seem happy in your videos… I can’t watch because your tone is so negative

[@kinefall1]

She gets her point across. We’re not here to be entertained though??

[@ReCodeDetro]

You're projecting(look it up). Try being positive and her tone won't bother you. It's just you against you.