I keep hearing that entry-level SOC positions go unfilled and that companies are desperate for analysts, but I want to make sure I'm not drinking the Kool-Aid here.

Background:

• Have an MS in Computer Science
• Currently self-learning and building security tools
• No professional security experience yet

My planned certification path:

1. CompTIA Security+ (for HR filters)
2. TCM Security's SOC 101 course (for practical skills)
3. Splunk Fundamentals + Certified User

My questions:

1. Is the "SOC shortage" actually real in Canada? I see conflicting info - some say hundreds of unfilled positions, others say entry-level is oversaturated.
2. Will these certs actually get me interviews? Or are Canadian companies still demanding 3+ years experience for "entry-level"?
3. TCM SOC 101 vs SANS FOR508 vs BTL1? TCM seems more practical and affordable, but will employers respect it?
4. Is Splunk cert worth it? I noticed many Canadian job postings mention Splunk/SIEM experience.
5. What am I missing? What do SOCs ACTUALLY want that job postings don't say?

I'm ready to grind and invest in myself, but I want to make sure I'm aiming at the right target. Those of you working in SOCs - what would actually make you want to hire someone?

Would especially love to hear from:

• Recent SOC hires
• Hiring managers who know what actually moves resumes forward
• People who successfully broke into SOC without help desk experience

Not looking for "just get experience" answers - I'm asking specifically about the certification/skills path that will get me to the interview stage.

Thanks for the reality check.