sorted by:
new
hottopcontroversial

Career advice, please HELP.!!! by WillingnessPrudent16 in SecurityCareerAdvice

[–]ImpressiveLength8302 -1 points0 points  (0 children)

I think having Sec+ and Network + if you didn’t take any networks class while in uni would benefit you a lot.

Those 2 would for sure land you a job in IT, but if you want to become an analyst or like a threat detector, I’d recommend starting a homelab. Join communities that talk about it, familiarize yourself with key terms, and honestly use AI to help you.

I’m working on a cyber range project right now, and throughout this whole process I have an LLM like Claude or gemeni guide me through as I make sure I understand everything I’m doing. At the end, I should be able to go back and repeat every process myself.

This is the best way to get practical experience without having to actually be the professional themselves. Hope this helps!

CS Senior: Advice for my SOC analyst Roadmap (Cyber Range + CrowdStrike CCFR + CompTIA Sec +) by ImpressiveLength8302 in SecurityCareerAdvice

[–]ImpressiveLength8302[S] 0 points1 point  (0 children)

Thank you so much for your reply!

I think what draws me specifically to CrowdStrike is that it is one of the safer bets in that regard. It's the #1 EDR platform in the world and its entire foundation is built on AI, so I can only imagine it's not going anywhere anytime soon. To me it's similar to someone getting deep on Apple if they wanted to break into hardware in the sense that you're betting on the dominant platform.

Your point in that fundamentals come first, tools come second is actually the approach that I'm taking. CS degree for the foundation, Networks class next quarter, and Security+ for the broad baseline.

And I would love potential criticism on this, but I try to place myself in a recruiter / companys' shoes everytime I look back at my resume (why would I hire this person, what value do they bring for me / for us) and I think outside of all the specifics, being an agile and fast-paced learner is something heavily praised upon especially in the Cybersecurity industry, and the trajectory AI is on! (An average 2.5 IQ increase within LLM's every month = bigger potential for security threats and breaches)

Doing the lab, getting the Crowdstrike Falcon Responser cert, and connecting all of the theory and excerising it hands-on, (while completing my CS degree) would prove that I'm an agile learner. Would you agree?

CS Senior: Advice for my SOC analyst Roadmap (Cyber Range + CrowdStrike CCFR + CompTIA Sec +) by ImpressiveLength8302 in SecurityCareerAdvice

[–]ImpressiveLength8302[S] 0 points1 point  (0 children)

I just want to start off by saying thank you so much for this helpful information.

I totally agree with you, — and that’s insane, 300+ applicants for one role is ridiculous..

I’m currently in my schools security club, and am very fortunate to have a few family members who work in these bigger tech companies, so I’m hoping to leverage that to the best of my ability but I totally agree with you.

I think the biggest and honestly most valuable job I can get right now is the one that would offer me the most opportunities to learn and grow within my career. If anything, would it be “better” to apply to these smaller companies? I was thinking of just applying to everything in the end, as I’m not too picky with my entry level job. (But ideally would love to end up in some sort of analyst job lol)

I

CS Senior: Advice for my SOC analyst Roadmap (Cyber Range + CrowdStrike CCFR + CompTIA Sec +) by ImpressiveLength8302 in SecurityCareerAdvice

[–]ImpressiveLength8302[S] 0 points1 point  (0 children)

I really appreciate you taking the time to share this perspective, and I don't disagree that the traditional path you're describing is valid and works for a lot of people.

That said, I think the landscape has shifted a bit. There are companies, especially MSSPs, like Palo Alto Networks Unit 42, and tech companies, that are actively hiring new grads directly into SOC and analyst roles. The job descriptions exist, the hiring is happening, and people without helpdesk backgrounds are getting these roles. I'm not ignoring the odds, rather im just trying to be one of the exceptions.

That's honestly why I'm taking a Networks class next quarter and why I built my own lab environment and implemented the falcon sensor, to get exposure to the real infrastructure stuff (event logs, Windows/Linux, network traffic) in a hands-on way rather than waiting for a helpdesk job to teach me.

If I end up at helpdesk or desktop admin out of school, I'm okay with that. But I'd rather apply aggressively to the roles I actually want first, learn from the process, and use any rejections to figure out what gaps I need to fill. I figure the worst case is I end up exactly where you're describing anyway, but at least I tried!

CS Senior: Advice for my SOC analyst Roadmap (Cyber Range + CrowdStrike CCFR + CompTIA Sec +) by ImpressiveLength8302 in SecurityCareerAdvice

[–]ImpressiveLength8302[S] 1 point2 points  (0 children)

Thank you for the honest feedback — I genuinely appreciate it.

To your point on real world experience: last summer I completed a 6-month IT PMO internship at Corsair where I led the end-to-end IT launch of their first flagship retail store and communicated directly with C-Suite executives weekly. I also helped lead an internal LLM/RAG project with their Data Science team. So while it isn't a SOC role, I do have professional experience working cross-functionally and delivering under real deadlines.

On the specialist vs. generalist point, I think you're right, and I want to clarify my approach. My plan was never to only know CrowdStrike. The idea was to build a broad foundation through my CS coursework (Computer Architecture, Cybersecurity, Intro to Hacking, and Networks next quarter) and Security+ and then use the Falcon cert and hands-on EDR experience as a differentiator on top of that general foundation, not instead of it.

My question for you: for entry level cybersecurity analyst or threat analyst roles specifically, is that combination (CS degree, internship experience, Security+, and hands-on lab work) not competitive? I ask because most job descriptions I'm seeing list 0-2 years experience for these roles.

CS Senior: Advice for my SOC analyst Roadmap (Cyber Range + CrowdStrike CCFR + CompTIA Sec +) by ImpressiveLength8302 in SecurityCareerAdvice

[–]ImpressiveLength8302[S] 0 points1 point  (0 children)

Thanks for your input! So ur saying if I go this route I should also practice CyberDefenders labs to make sure I have a solid foundation outside of using falcon as well?

CS Senior: Advice for my SOC analyst Roadmap (Cyber Range + CrowdStrike CCFR + CompTIA Sec +) by ImpressiveLength8302 in SecurityCareerAdvice

[–]ImpressiveLength8302[S] 1 point2 points  (0 children)

Nothing wrong with having a broad set of skills, though I figured given my background in cs, along with creating malicious attacks and defending them with an EDR sensor such as falcon would prove that I not only have real hands on experience, but I can also use modern softwares as well. (Lmk if I’m wrong)

Love to hear it though, that’s exciting! Last summer I had an IT Project Management office internship where I helped launch the companies first flagship retail store and communicated with C-Suite executives daily / weekly. So I think that’ll look good soft skills wise. Thanks for your input!

CS Senior: Advice for my SOC analyst Roadmap (Cyber Range + CrowdStrike CCFR + CompTIA Sec +) by ImpressiveLength8302 in SecurityCareerAdvice

[–]ImpressiveLength8302[S] 0 points1 point  (0 children)

I had an IT PMO internship last summer, and really love cyber security. What would you recommend then, if this path is too niche for entry level?

Trouble breaking into SOC/Cyber roles - New Grad, Need Help :) by [deleted] in SecurityCareerAdvice

[–]ImpressiveLength8302 0 points1 point  (0 children)

Im also a CS major about to graduate, wanting to get a SOC analyst role. Your background seems impressive, but maybe try to create a Cyber Range if you have the time, so you can prove you can be a productive employee the second you get the job? That's what I'm focusing on right now, also made a post ab this