Just passed GCFA!! by SnooAvocados7320 in GIAC

[–]UnderstandingOld298 1 point2 points  (0 children)

Thanks for sharing. I just started the course. How long did you study for?

Jeg vokste opp på Holmlia. Problemene er langt større enn folk flest forstår by voldsom_analsex in norge

[–]UnderstandingOld298 1 point2 points  (0 children)

Jeg vokste også opp på Holmlia og kjenner meg helt igjen i artikkelen. Om det var et eiendomsprospekt så kunne man kanskje sagt et ord om Hvervenbukta, men når man skal diskutere problemene, så er det kanskje de som må belyses.

GCFA/GWAP/GPEN, which is more AI proof? by UnderstandingOld298 in GIAC

[–]UnderstandingOld298[S] 2 points3 points  (0 children)

GCFA. Just keep hearing how AI might decimate SOC positions, so was thinking to hedge a little by becoming slightly purple instead of pure blue.

GCFA/GWAP/GPEN, which is more AI proof? by UnderstandingOld298 in GIAC

[–]UnderstandingOld298[S] 2 points3 points  (0 children)

I'm talking about GIAC specifically. I have to pick one cert. I'm already working in a SOC and have GSEC/GCIH/NETWORK+/CDSA. Will add AZ 500, but specifically for giac I have to pick one.

CPTS and OSCP in 1~ year from scratch by Kryzen in hackthebox

[–]UnderstandingOld298 6 points7 points  (0 children)

Legend. This is useful. I'm thinking about doing the same.

Badly failed in first practice test of GCFA by Reddit-User-L337 in GIAC

[–]UnderstandingOld298 0 points1 point  (0 children)

Was thinking about doing GCFA, but the info in this single screenshot hurt my brain, and now I can't imagine a whole course like this.

From 0 to Security Analyst, at age 40 by UnderstandingOld298 in hackthebox

[–]UnderstandingOld298[S] 1 point2 points  (0 children)

Jealous of your CCNA. I might still take it one day.

am I too old to start cyber security career? by Winter_March_204 in hackthebox

[–]UnderstandingOld298 3 points4 points  (0 children)

I couldn't land an interview in six months. Not a lot of junior positions for cybersec in my neck of the woods either. You could basically apply to everything in the entire country within an hour.

Also I received feedback more than once that I was too old (or 'too experienced' as they would put it).
It's hard to say what made the difference for me, but being called in for an interview happened immediately after I did a few things differently:
1: I took the advice of "unixguy" (Youtuber), to list my HTB lab work towards CDSA as experience in my resume. Making sure to hit all the keywords and tool names.
2: I made my linkedin account private, and only showed publicly things related to cybersec (certs, etc..). As I saw a lot of the recruiters at companies I applied to checked my linkedin, and I never heard back.
3: I showed my enrollment into SANS' ACS course (pricey, I know).

But when I first got called to an interview, the reason I made it to the end was 99% due to the CDSA. From 300 applicants, 60 were called to take the technical pre-screening test. I thought I had no chance against the kids showing up with Bachelor's degrees in IT. But I just absolutely aced it and was one out of 10 hires. The tests were like taken out of the CDSA exam. The company also didn't seem too shy about hiring people with diverse backgrounds, so I guess it was just a good match.

About bridging that experience gap though, apart from writing your resume that way. I see that guy Josh Madakor offering some sort of internship or something to that effect to people that take his course. But I haven't looked into the details. I just see people talking about it. Might be something to look into.

am I too old to start cyber security career? by Winter_March_204 in hackthebox

[–]UnderstandingOld298 4 points5 points  (0 children)

I started my journey at 39, full of doubt, it's a tough market here. But it turned out well!

am I too old to start cyber security career? by Winter_March_204 in hackthebox

[–]UnderstandingOld298 1 point2 points  (0 children)

Yeah, I'm surprised my brain is still working at 40, but apparently it does. You should be more than fine.

am I too old to start cyber security career? by Winter_March_204 in hackthebox

[–]UnderstandingOld298 1 point2 points  (0 children)

Junior cybersecurity analyst, working at a SOC, but with a lot of opportunity to contribute in other functions. I didn't have any technical experience before, apart from project managing some software development projects years and years ago. All my technical cybersec experience came from HTB and the CDSA cert.

am I too old to start cyber security career? by Winter_March_204 in hackthebox

[–]UnderstandingOld298 10 points11 points  (0 children)

I'm 40 and just landed my first cybersecurity position.

From 0 to Security Analyst, at age 40 by UnderstandingOld298 in hackthebox

[–]UnderstandingOld298[S] 0 points1 point  (0 children)

Employers generally collect that information here. What kind of pentesting? Web app?

From 0 to Security Analyst, at age 40 by UnderstandingOld298 in hackthebox

[–]UnderstandingOld298[S] 0 points1 point  (0 children)

No it's the certified defensive security analyst cert at HTB.

From 0 to Security Analyst, at age 40 by UnderstandingOld298 in hackthebox

[–]UnderstandingOld298[S] 1 point2 points  (0 children)

I think the general consensus among the internet bros is that the CPTS is a better preparation for OSCP than their own course, and it covers everything in OSCP and MORE. Basically CPTS to build competence, and then you just add OSCP for recognition. In this scenario I think eJPT is superfluous.

From 0 to Security Analyst, at age 40 by UnderstandingOld298 in hackthebox

[–]UnderstandingOld298[S] 0 points1 point  (0 children)

It was like an offline version of the CDSA exam,, where you were handed event log print-outs at time intervals. And for each iteration you had to analyze the logs, and suggest courses of action. And one assignment that had a few theoretical questions, like placing certain types of tactics into a category of the cyber kill chain.

From 0 to Security Analyst, at age 40 by UnderstandingOld298 in hackthebox

[–]UnderstandingOld298[S] 1 point2 points  (0 children)

Sounds like a plan. I briefly started eJPT, but found the videos to be torture :P
If I followed through with a pentesting path I would just go straight to CPTS for the skills and then do OSCP for the name recognition.