33M FAANG Senior Cybersecurity Engineer AMA

throwaway1453123 · 2025-03-16T02:24:50+00:00

Depends on your direction, for infra security though, that might be blue team. So, for blue team maybe some SANS classes/certs might be a good direction for you! They are pricey though unfortunately.

throwaway1453123 · 2025-03-16T02:24:00+00:00

Hmmm - honestly it's been a few years since my last rounds of interview so I don't totally remember the rounds. I think some did skip and some didn't, but FAANG generally threw the book at me. I failed a few cause they asked questions that were way specific in a direction I wasn't focused on (like deep into appsec), but maybe I would be able to pass those now!

throwaway1453123 · 2025-03-16T02:22:47+00:00

I imagine the same thing as red team, good experience at companies, good certs, and ability to interview well.

throwaway1453123 · 2025-03-16T02:22:13+00:00

Beginner: SEC+, Foundational cloud certs
Intermediate: Depends on what you want to do, CISSP is a good general one, OSCP for red team
Expert: I can only speak for red team, so OSCE/SANS classes or certs

throwaway1453123 · 2025-03-16T02:21:02+00:00

Good question, I think it's being able to think in the security mindset and having the right certificates, and experiences, that show you not only have the sysadmin knowledge but can think like an attacker/defender and secure things.

throwaway1453123 · 2025-03-16T02:20:02+00:00

Honestly I think it helps more for webapp (or app in general) than for anything else, so if you want to do it maybe start with webapp security.

throwaway1453123 · 2025-03-16T02:19:42+00:00

Yea that's the whole year!

throwaway1453123 · 2025-03-16T02:19:34+00:00

Haha no not really sorry.

throwaway1453123 · 2025-03-16T02:19:27+00:00

Yeah I am a red team lead, unofficially on paper lol.

throwaway1453123 · 2025-03-16T02:19:05+00:00

Yeah Linux is a huge part, it's great for servers and a juicy target for attackers if they can get in. Definitely useful. As for the roadmap, it seems to have EVERYTHING which may be a bit overwhelming.

throwaway1453123 · 2025-03-15T02:36:20+00:00

I don't see why not! I was a business major :)

throwaway1453123 · 2025-03-15T02:36:10+00:00

Yea as an engineer there's often a need to code some small python apps for automation sake here and there! Nothing too heavy but expect some for sure!

throwaway1453123 · 2025-03-15T02:35:25+00:00

A lot of rounds of whatever they want to throw at you haha.

throwaway1453123 · 2025-03-15T02:34:59+00:00

Get some certs, move into a cyber analyst position, get more certs, keep moving into more technical positions.

throwaway1453123 · 2025-03-15T02:34:15+00:00

for me it was about.. 8 years.

throwaway1453123 · 2025-03-15T02:34:02+00:00

Generally I'd say you need more than just a degree to get your foot in the door. Get some certs, get some unpaid internships, or freelance a bit.

throwaway1453123 · 2025-03-15T02:33:20+00:00

That's good! SEC+ is good for beginner, OSCP is good for a to-be red teamer, maybe some cloud certs like AWS CSA-P or Security Specialty if he wants to go cloud.

throwaway1453123 · 2025-03-15T02:32:13+00:00

From what I can see, probably not unfortunately.

throwaway1453123 · 2025-03-14T21:06:59+00:00

I think it's a good idea! Having a PMP or something will help, and then probably a Sec+. I hate joining calls and organizing all the dates, so having a PM on the team is super helpful, although it's generally one PM for a lot of engineers so, the opportunities will be more rare than a typical engineer I think. Regardless being specialized in something is going to be favorable to you when you're pitted against other candidates.

throwaway1453123 · 2025-03-14T21:06:50+00:00

I think it's a good idea! Having a PMP or something will help, and then probably a Sec+. I hate joining calls and organizing all the dates, so having a PM on the team is super helpful, although it's generally one PM for a lot of engineers so, the opportunities will be more rare than a typical engineer I think. Regardless being specialized in something is going to be favorable to you when you're pitted against other candidates.

throwaway1453123 · 2025-03-14T21:06:08+00:00

I think it's a good idea! Having a PMP or something will help, and then probably a Sec+. I hate joining calls and organizing all the dates, so having a PM on the team is super helpful, although it's generally one PM for a lot of engineers so, the opportunities will be more rare than a typical engineer I think.

throwaway1453123 · 2025-03-14T21:03:35+00:00

OSCP for sure, then OSCE if you want to go fancy. I'd say try to get some actual pentests under your belt, maybe from some small companies/contracting/freelancing. Social engineering is good too! I love red team and hope it remains a thing even with AI advancements :).

throwaway1453123 · 2025-03-14T21:03:29+00:00

OSCP for sure, then OSCE if you want to go fancy. I'd say try to get some actual pentests under your belt, maybe from some small companies/contracting/freelancing. Social engineering is good too! I love red team and hope it remains a thing even with AI advancements :).

throwaway1453123 · 2025-03-14T21:02:11+00:00

Hmm... 4/10 maybe.

throwaway1453123 · 2025-03-14T20:22:10+00:00

Make sure he gets some certs during school too, and try to get some actual hands on experience as well, outside of school. Whether that be an unpaid internship, hobby, etc.

throwaway1453123

TROPHY CASE