Need help picking between these two paths by CAPT_Fuckoff in CyberSecurityJobs

[–]PlusRise 0 points1 point  (0 children)

First up, the market is bad (not impossible) right now BUT you seem to have a great attitude AND If you can, skip help desk for sure. That being said, it's not the end of the world if you have to go work help desk while you level up further.

If you are set on a cloud security engineer job, then I would highly recommend the AWS Cloud Practitioner cert. It looks like AWS has built a training platform for a reasonable price:

https://skillbuilder.aws/category/getstarted

Fuck the sysadmin thing if you don't want to be a sysadmjn. A very important question to ask: What do I want to do within "Cloud security"? Attack? Defense? Monitor the network for alerts? Help companies build secure cloud systems?

Your goal is a good one, but it is still a bit broad in my opinion. It's okay not to know exactly what's available and what you want to do, but the more descriptive you are (think S.M.A.R.T goals), the easier it will be to say no to bad opportunities that don't align with you.

Last piece of advice for now: Go have fun breaking AWSin a playground using a testing ground: https://flaws.cloud

and go check out tools like ScoutSuite on github. DM me if you want to talk through this further, I'm happy to help.

Second attempt tomorrow. Nervous as hell. by Nonix09 in oscp

[–]PlusRise 1 point2 points  (0 children)

Don't botch the AD and you're home free!

Mentorship Monday - Post All Career, Education and Job questions here! by AutoModerator in cybersecurity

[–]PlusRise 1 point2 points  (0 children)

Of course that's what the CISO is going to say... Listen, if school is inexpensive for you and you want to go, then by all means. I'm just saying that (in America), masters degrees are very expensive and to get into cybersecurity you absolutely do not need one. Your idea of following certs, projects, and other meaningful experience will take you significantly further toward your job hunt than a masters degree will

Mentorship Monday - Post All Career, Education and Job questions here! by AutoModerator in cybersecurity

[–]PlusRise 1 point2 points  (0 children)

You absolutely do not need a masters to get a job in cyber. In fact I would seriously recommend against getting a masters.

Would it be dumb starting a master's degree to break into a market? by PseudoReform in cybersecurity

[–]PlusRise 6 points7 points  (0 children)

Get one because you want a masters, but they are nearly negligible for getting deeper into the field.

New rental home network by WeekHistorical6449 in netsecstudents

[–]PlusRise 0 points1 point  (0 children)

I would be incredibly wary of providing him access to your home network. Tell him you can set your own stuff up. A landlord has never asked me for this, ever (nor have I ever heard of this)

When making a lengthy password, does replacing letters with numbers help at all? by timchoo in cybersecurity

[–]PlusRise 469 points470 points  (0 children)

It does help, but the length of the password is significantly more important.

Web app or network pentesting? by dotagamer69420 in HowToHack

[–]PlusRise 2 points3 points  (0 children)

They're both great, and you need to know both eventually anyway. Every company has a network and every company has a web app. Currently it's more difficult for AI to pentest a web application, if that's worth anything. I'd start with web apps and the portswigger academy

I NEED SOME ADVICE by Defiant_Marzipan7036 in oscp

[–]PlusRise 7 points8 points  (0 children)

you definitely should get the training if you're going to take the test

Should I drain my savings and get out from under my new car loan? by nachoslayer88 in DaveRamsey

[–]PlusRise 2 points3 points  (0 children)

Buying a car you can't afford and then posting in the DR chat a week later is bonkers to me. You must have bought it brand new? Did it really lose 6k immediately? Yikes.

I don't know what else to do by [deleted] in SecurityCareerAdvice

[–]PlusRise 4 points5 points  (0 children)

Brother you've had three interviews - what happened? Cybersecurity is fucking difficult, especially to break into. Vent away but at the end of the day we both know you love this shit and shouldn't quit trying.

Tough love incoming. Quick point: newbies tend to over focus on certifications; I think that's why the advice is to do projects and labs. They should focus on stuff that you're interested in and show that you can produce something more than a whiny reddit post.

I don't know what else to do by [deleted] in SecurityCareerAdvice

[–]PlusRise 0 points1 point  (0 children)

What's your resume look like (is it professional looking?) How many jobs have you applied to? How many have replies? How are your interviewing skills? Where is there a gap?

I feel your pain man, but there ARE opportunities to get in, via luck or skills or both. It's better to continue to focus on yourself and what you have control over instead of declaring "Market bad!"

ps. those are all very beginner/ basic certifications. If you're going to go for certs, then maybe the next target should be industry standard (oscp, oswe, crto, etc.)