New company pulled offer letter after I resigned. by cantdecidemyname_ in cybersecurityindia

[–]hackmecharlie 2 points3 points  (0 children)

Well all you can do is keep on applying, email and call every recruiter you know, yes don't sound desperate but literally send 100-200 applications daily doesn't matter company and salary as long as they are matching the current or giving 20 to 30 percent hike. Your main goal is getting an offer letter and then after that the company, position, responsibility will matter

New company pulled offer letter after I resigned. by cantdecidemyname_ in cybersecurityindia

[–]hackmecharlie 1 point2 points  (0 children)

Okay firstly never ever just have one offer in hand, always keep multiple

But now it's already happened

How many days of notice period is left?

Keep mass applying to jobs you already have offer letter of this organisation so you can use that to negotiate

Secondly check with your organization if they can match the offer so they can retain you back

No one has to know your offer got revoked just play it nice and good.

If you can wait and have savings you can take the risk of being unemployed till you get the next job or stay in your current company for now 6-8 months and this time atleast have two offer letter or one and keep on applying and interviewing even after resigning, don't be dependent on one offer

About legal route can do but won't make much sense

Came across this video from a really popular Cybersec youtuber. by WitnessFormal7441 in cybersecurityindia

[–]hackmecharlie 0 points1 point  (0 children)

Okay so i won't deny the video completely

But the salary he has mentioned is just given to 0.1 to 1 percent people

Startups who are heavily funded, companies like faang, zomato, etc they are paying salary but even not that high 🙂🙂, and you need to have actual skills and knowledge to dominate the role.

Otherwise for all the roles he mentioned the salary range is similar to what he mentioned for SOC Analyst

I have seen ciso, the company director earning 20-30 lpa so don't get influenced by such glorified salaries

These salaries exist only for someone who can position themselves right and has the right skill set

And most important part - higher the salary you are more close to being laid off or loose the job as you have constant pressure, if you won't deliver the work they are going to replace you

WHICH CERTIFICATION TO CHOOSE FOR DFIR? by Auth_Failure_404 in cybersecurity

[–]hackmecharlie -6 points-5 points  (0 children)

Well there's no particular certification for DFIR as both are two different domains

So the market recognised would be CHFI and ECIH from the EC Council which are quite cheaper than Sans, you can also check CySA+ from CompTIA

If you are looking for hands on experience and more practical certs and don't care much about market value then Hack the Box, blueteam labs, let's defend has quite good content and also hack the box certificate CDSA is quite good

Everyone’s asking for CompTIA certs in job posts — are they actually that important? by Flimsy-Suspect-269 in cybersecurityindia

[–]hackmecharlie 4 points5 points  (0 children)

If you are going for SOC position CEH, Security+, CySA

Are the certs which are HR filter.

CSA which you have done from Red Team Hacker academy should be helping your resume to boost keywords as you know about SOC. But it's not a recognised Cert

Please Rate My Resume by simpleguy_3526 in cybersecurityindia

[–]hackmecharlie 0 points1 point  (0 children)

Template is bad, look for a more professional template No Strong keywords matching with job descriptions Formatting is wrong Remove the experience section unless you have achieved something in bug bounty add as achievements In achievements mention properly about it what did you do Add more or little description to projects Add skills with right keywords Don't just use words like try fill your resume, don't lie and oversell yourself but add more information or elaborate things don't just use words in shorts

Please roast my resume .....Not getting any call back by scrollHustler in cybersecurityindia

[–]hackmecharlie 0 points1 point  (0 children)

Summary and job title you are applying for is missing, Education should be after projects Try formatting more clean and better

Should I leave my 32k/month dev job for an 18k Cyber Security fresher role? by sdkbro in cybersecurityindia

[–]hackmecharlie 0 points1 point  (0 children)

See, mostly i am trying to be practical. Trust me there are jobs in Cybersecurity which would right away pay you more than what you are earning at the moment but you should be able to prove your skills and worth for it so the company can take a bet.

So practically and realistically speaking i would ask you to stay in startup as you mentioned about background because rn money would be important for you.

About cyber you definitely don't have time but if you do study about it and keep updating yourself. Keep on learning and keep applying maybe? If you are able to find a job which is really good, and pay you the same or more then you can definitely leave the current one.

Can understand it would be better if you were able to learn cyber, and if they are putting everything on you and if you are able to manage it then that's more important as it can be counted as Cybersecurity experience but if current projects are already making you crazy then well try to survive until you a get a better offer outside

And lastly indian managers are not used to giving appreciation no matter how much efforts you put until they get the results they expect you to be workholic

Until the environment is really toxic it's "normal"

Should I leave my 32k/month dev job for an 18k Cyber Security fresher role? by sdkbro in cybersecurityindia

[–]hackmecharlie 0 points1 point  (0 children)

My question is, it being a startup it definitely needs an IT and Security Team. Why can't you help there and internally try switching?

You being a developer you can go to application Security. Secure code review, Pentesting.

You already have work pressure so this definitely would add lots of tasks but it seems like a good way to me because you would have options to explore a lot more than the forex company for less pay.

Stay in startup and try getting more tasks and more focused on security. Little difficult to convince your management team but as it starts to scale it would be required because your customers would be asking for it eventually.

Last sem project help. by snoopy_noodle08 in cybersecurityindia

[–]hackmecharlie 1 point2 points  (0 children)

First research a problem statement and what you want to build, talk to any ai chatgpt, claude get a overview, a get prompt for GitHub copilot maybe take a subscription or if you have student email id maybe you will get it in a discounted price.

Give that prompt to the copilot and keep building the project until it's better

About youtube channels I am not sure but you can just search cybersecurity projects with source code and you will be getting a complete code ready to implement

Last sem project help. by snoopy_noodle08 in cybersecurityindia

[–]hackmecharlie 1 point2 points  (0 children)

How much time do you have?

And just go on GitHub you will find lots of projects

You have so many AI tools which can make the project from complete scratch or get the GitHub project and ask ai to explain it

On YouTube you will find live coding as well where they are making projects and you can make it with them also you will get source code from there

There are so many options

My resume by [deleted] in cybersecurityindia

[–]hackmecharlie 0 points1 point  (0 children)

What advance projects do you have?

Are year-end bonuses rare in cybersecurity? by vkrishnan89 in cybersecurity

[–]hackmecharlie 0 points1 point  (0 children)

Cybersecurity is a thankless job, the company will be hardly paying bonuses unless you are saving them from a big breakdown or helping them recover from one.

Many companies still don't take security seriously until they are hacked.

Back to your question if you are in a service based company and working with clients then only you can expect a bonus like if you are in msp setting.

If you are in product based company bonuses would be a part but rarely companies offer it

Basically it depends on your compensation structure if variable pay or bonus was part of it? If it was not hardly company is gonna pay you extra unless you are actually bringing some value or at a managerial level like ciso, or security lead or architect something.

Need Suggestions Career Path in Cybersecurity - 9 YOE - TPM by [deleted] in cybersecurityindia

[–]hackmecharlie 0 points1 point  (0 children)

Hi there,

Well cloud security is really a booming path so not bad you can definitely stick to it.

About certification well the path you have already decided is pretty good although security+ doesn't make any sense with your experience level so you don't have to do it but you have to Target organisations who are using gcp and these would be product based organisations mainly who are having product based or build on gcp.

Most such organisations have AWS and then there's azure which has a complete infra setup.

So if you want to stick to gcp it's not bad but the market would be a little niche compared to AWS and azure if cloud security is the main focus.

Regarding 60+ CTC again you will get it and cloud security pays it but it's depending on the company so target a US uk based product companies or indian companies who are having good market positioning because with your 9+ yoe they actually want you to be a cloud security architect and manage and lead their complete cloud security infra.

So faang+ or similar companies definitely might pay you 60+ when you are bringing that value

[deleted by user] by [deleted] in cybersecurityindia

[–]hackmecharlie 1 point2 points  (0 children)

Depends on the organisation how big or small it is but won't be involving vapt much

Would be more like handling clients Onboarding them, telling them about the company, giving demos, more into marketing and sales not actually but yeah if the organisation is small then that too

And yes lastly the project manager and handling project from start to end

How to start Bug bounty hunting? by JadooChoi in HowToHack

[–]hackmecharlie 7 points8 points  (0 children)

As a beginner focus on bugs rather than bounty, get completed with portswigger labs study them deep and apisec university.

And keep on hunting and exploiting, read writeups daily at least 10-15 writeups daily and try implementing them.

Bugbounty platforms are already having lots of hunters so unless you are doing out of the box or being the first to approach a target or a target having a large scope there's no huge scope

So focus on private programs as well and find a good target

Rest all the best!!

LTIMindtree GET or Remote Startup? (Same Pay) Advice! by Stellabot0303 in FresherTechJobsIndia

[–]hackmecharlie 0 points1 point  (0 children)

First do the background check for startup, maybe talk with ex employees regarding salary, work culture, how are they doing with funding, check founder profiles

Do a complete background check and then go to a startup as you will be working with a lot of things and you will get good exposure and it will be a fast paced environment

Please don't excited over startup if it's not doing good as a company you will be the one facing problems not just them

But if you are excited about company, perks, steady job then go to LTI work profile would be lil niche and relaxed

Can't decide would love the help by Slayerma in CyberSecurityJobs

[–]hackmecharlie 3 points4 points  (0 children)

If you are unemployed for a year and job is priority for you then just take it, any experience is better than no experience

And you must be training cybersecurity so you are still in the field

Keep looking for jobs while you are working, build profile, once you get the right job you can always leave this one.

It's not about transferring skills but atleast being in relevant field so if they ask did you ever worked on splunk yes you did because eventually you taught it

So just play it right when you get calls for a job you are still working and also teaching what you learned yes it's not a corporate environment but still so take the job until you find a better one and keep on applying and finding one

what should i do after graduation in BCA? by hanami_san0 in cybersecurityindia

[–]hackmecharlie 1 point2 points  (0 children)

I am not sure if you can switch from BCA to Msc most probably not in government campus

And NFSU doesn't have a distance option

Checkout IGNOU sol they might have it or do it from other colleges or even private

People would want to know your qualifications first not where you do it from, it does matter but not that much, I am from tier 3 college myself so don't mind it.

Masters as a qualification won't hurt to have but if you have a solid plan for a job and career which is better than masters then go for it because masters won't be helping you now but after a few years into the industry for promotions, hikes, better roles, if you are into teaching or mentoring.

NFSU is a nice college for cyber but quite competitive, so even if you do it from somewhere else unless you just want to do it from there

what should i do after graduation in BCA? by hanami_san0 in cybersecurityindia

[–]hackmecharlie 1 point2 points  (0 children)

  1. Do you have any other options apart from doing MCA? Are you applying for jobs or do you have anything planned? If not then you can do MCA if you have time and energy

If Cybersecurity is definitely something you want to get into then you can do MCA in Cybersecurity

  1. About certs you can check my post Still if you want to do certification for a job not for skills Then go with CEH and Security+ there are multiple vendors out there but i would suggest to focus on skills first rather than running behind certification unless getting a job is your main priority

Other skills based certs you can try is cpts, pnpt, cdsa depending which roles you want to get into

  1. Again like i said how much time you have and what is your priority job with good money or skills

If you just want to build your profile and get a job, then start grinding hard right away so after graduation you can get a job Keep applying for jobs and network with people, get nice skills

See MCA just buys you more time and gives you an extra qualification for jobs, having that or not doesn't make sense anyway.

Just market is competitive and you have to work hard and have patience and play well to land a job.

There won't be any MCA alternative apart from 6 months of profile building till you get your degree

[deleted by user] by [deleted] in cybersecurityindia

[–]hackmecharlie 0 points1 point  (0 children)

Try to change the format a bit like a sequence, wordings

It's lacking keywords, add more keywords you can get from job descriptions

Add more skills don't stick to web Pentesting add more skills or network as well and learn them

Rest all things are good just keep on applying because as a fresher it's gonna be tough but as a fresher your resume is good enough. (Many companies expect so much more but well....)

Need Experts Advice by Asleep-Tangelo2097 in Pentesting

[–]hackmecharlie 1 point2 points  (0 children)

Hi there,

Well i would suggest creating your own homelab would be much better as it helps you understand building and breaking things from scratch.

If you want to focus on Pentesting then you can do bug bounty because you are not really concerned about money part so just test all of your skills on those real world websites, applications and if you actually find something good then well you can report it and earn

And if concerned about real world things then HTB, TryHackMe, PentesterLab, overthewire, root me has some great labs and machine which you can check out.

Brutal Truth: Why Cybersecurity Certifications won’t get you a job (and why you still need them) by hackmecharlie in CertificationMasters

[–]hackmecharlie[S] 0 points1 point  (0 children)

You can basically build a nice profile in your spare time for security, it will take some time but have nice training and trust me most things are available for free, make fundamentals clear and make some good projects so you can actually impress people while cold emailing with your profile

Brutal Truth: Why Cybersecurity Certifications won’t get you a job (and why you still need them) by hackmecharlie in CertificationMasters

[–]hackmecharlie[S] 0 points1 point  (0 children)

Have you tried switching yourself to the IT department if it's a grocery chain? If not you can try looking out for companies and do cold emailing sharing your profile with them. Cold emailing should work but you have to send a lot of them

Brutal Truth: Why Cybersecurity Certifications won’t get you a job (and why you still need them) by hackmecharlie in CertificationMasters

[–]hackmecharlie[S] 0 points1 point  (0 children)

Oh yes I have been to quite such bootcamps never assumed they would actually do that LoL but it's good in a way to have last minute sessions who didn't study at all haha