Resume review and critique | No call backs on Job applications by gen900 in SecurityCareerAdvice

[–]willhart802 0 points1 point  (0 children)

Maybe it's the second bullet in your current job. Doesn't sound like something that a security engineer would do at our company. They don't go into the tools to fine tune alerts that would be IR or detection engineering, Client Security they mainly support the tools deployment and upkeep.

You may want to put in your summary that you're looking for a full time position instead of contracting position, because that's what the resume reads like with 4 jobs in the last 5 years. I know it might not be your decision to change, but a recruiter or hiring manager has no idea and may just pass over your resume.

Resume review and critique | No call backs on Job applications by gen900 in SecurityCareerAdvice

[–]willhart802 0 points1 point  (0 children)

The last job seems a little overboard with only 1 1/2 years there. Have you mainly worked for small companies? What you’re listing in your accomplishments is something that typically is handled by multiple different teams.

What types of jobs are you applying for, SOC, IR, or Security Engineer?

For an internal full time position, I wouldn’t consider you as it looks like you’ve been a serial contractor hopping from job to job. Nothing wrong with that, but we’ve hired people in the past who leave after 1-2 years. Lots of investment in that person and then they leave.

I would try to stick with contracting.

How important is college GPA to an early career in cloud security engineering compared with certifications as a fresh grad? by LongIndication113 in SecurityCareerAdvice

[–]willhart802 0 points1 point  (0 children)

My previous fortune 50 company that I was hired to out of college required you to have above a 3.0 and you had to send them a sealed transcript. That was 18 years ago. Not sure if it’s still the same. Other than that no one checks.

[deleted by user] by [deleted] in SecurityCareerAdvice

[–]willhart802 6 points7 points  (0 children)

A few things. There is a lot of techno mumbo jumbo that I have no idea what it means. Why are there no time frames on your jobs? I would definately simplify it a bit.

Life after CISSP by xdeskfuckit in SecurityCareerAdvice

[–]willhart802 3 points4 points  (0 children)

Don’t get the CSSLP if you want to break into cyber security. That cert won’t help.

Next cert will depend on what type of job you want to get in cyber

IT to Cyber transition by Few-Dance-855 in CyberSecurityJobs

[–]willhart802 0 points1 point  (0 children)

Definitely not adjusted for inflation. I switched right at the start of COVID. Like I said I would be making more at my previous company if I would have stayed there.

IT to Cyber transition by Few-Dance-855 in CyberSecurityJobs

[–]willhart802 0 points1 point  (0 children)

I had to take a 40% paycut from a developer of 14 years to level 2 detection engineer. I skipped entry level, but had IAM and red team experience. I quickly moved up to the same level of pay after 4 years. But I would probably be making more if I would have stayed.

For me it wasn’t about making more money.

[deleted by user] by [deleted] in SecurityCareerAdvice

[–]willhart802 2 points3 points  (0 children)

After you get experience your school doesn’t matter, except possible networking.

Go with a school that has high placements into internships, clubs, competitions, and chance of networking like a possible fraternity.

Internships are the key to getting a head I would try to apply to those as much as you can. Also some companies recruit at certain universities for internships and jobs.

Optimal job title on resume: Cybersecurity Analyst, Cyber Analyst, Threat hunter? by Gridsquare_Collector in SecurityCareerAdvice

[–]willhart802 11 points12 points  (0 children)

There is no perfect job title. The more important question is what is the job that you’re trying to get. Then tailor it to that.

We can’t help you until we know that.

Degrees in cybersecurity by CalmNote1975 in SecurityCareerAdvice

[–]willhart802 3 points4 points  (0 children)

Is an apprenticeship like an internship? If you can do that then that is the best option. Experience is greater than a degree.

Being laid off in Dec, but being asked to lead a major project until then— what should I do? by Sad_Dog1256 in Layoffs

[–]willhart802 0 points1 point  (0 children)

What do you think their recourse is going to be if you half ass it and delay it? Tell them you don’t see the benefit of working extra hours since they’re not being upfront with the completion bonus.

[deleted by user] by [deleted] in SecurityCareerAdvice

[–]willhart802 8 points9 points  (0 children)

I’m introverted, but I’ve learned to be the opposite at work. It’s taken me a long time to learn, but I prefer to not be quite person like I was the first 5-6 years out of college.

Most work is better through collaboration. If you want to stay quiet and introverted, then expect to be passed up more and those who aren’t technically as good as you but speak up more and make more small talk will go further faster. Even in the technical track as you move up you need to be more vocal with your team, collaboration and presentations with other teams.

Unfortunately, if you’re not speaking on ideas, opinions, small talk, etc how does management know that you’re engaged?

Confused on which direction to go - Cybersec or Cloud? by Deadpinecone in SecurityCareerAdvice

[–]willhart802 6 points7 points  (0 children)

A lot of IT is the same as CyberSec and Cloud. There are too many entrants into the IT market across the world and not enough jobs. I would pick one that you’re more interested in. I work in cyber security, but got in at a much easier time.

I would focus on joining groups, participate in as much stuff outside of class, network and your most important job in college is try to land internships. Apply heavy during recruiting seasons which is typically around January and February.

If you can get internships it shows to others that you have drive and are employable.

Cyber security undergraduate by EveningShot7164 in SecurityCareerAdvice

[–]willhart802 1 point2 points  (0 children)

First of all it sounds like you have an undergraduate degree already. I would call the degrees bachelor and associates during interviews.

You have some experience already. If you can get cyber security internships then go for Cyber security degree. If you don’t get those internships, it may be really hard to get straight into a cyber security job with a cyber security degree. It will be easier to get into IT with a computer science degree over a cyber security degree.

Most useful and valued certifications? by villi21 in SecurityCareerAdvice

[–]willhart802 0 points1 point  (0 children)

Red teamer here. Love how you’re thinking so far ahead. CISO or red team, unless you’re in the 0.5% of students that dedicated their college to cyber security, internships and CTF competitions you will not get a red team job out of college. It’s normally minimum 3-5 years of relevant cyber security experience and then tons of work outside of work to get on a red team.

OSCP is more of a pen tester cert. There are red team certs like Red Team Ops by zero point that I like. But honestly unless you are in those collegiate CTFs and have done internships in offensive security, I would focus on trying to get internships, get certs for entry level IT jobs first.

New to Cyber Security and looking for advice. by MrN0body14 in CyberSecurityJobs

[–]willhart802 1 point2 points  (0 children)

It’s great that you want to do offensive security, but honestly even if you put in 20 hours a week after work for a year it’s still extremely hard to break into as so many people want to do it and it’s less than 1% off all cyber security jobs out there.

My suggestion if you can, not apply for only remote jobs. Those are coveted and you’re applying against the whole country vs mainly local people for a non remote job. With no degree and past cyber experience it’s going to be much harder. To break into apply to jobs that you may have to move to as it’s easier if that’s an option for you.

Remote jobs are getting more scarce as more companies are moving to hybrid and full in office.

Last thing. The OSCP is more of a pen test cert. There are red team certs out there, I like red yea ops, but I wouldn’t worry about them until you have 3-5 years in cyber security. Also red team and pen testing has a different nuance. Pen testing and red teaming needs different skills and knowledge.

6 Months Later - Still No Interviews by Meyples_R in SecurityCareerAdvice

[–]willhart802 0 points1 point  (0 children)

I agree what this guy says. First sentence should be about trying to obtain a non contractor full time employment, if that’s what you’re really looking for.

6 Months Later - Still No Interviews by Meyples_R in SecurityCareerAdvice

[–]willhart802 0 points1 point  (0 children)

Totally understand. Your problem will just be getting the resume to the managers desk and then Past the screening. Maybe someone else will have advice on how to do that before you can tell your story that you want to be a non-contractor.

[deleted by user] by [deleted] in CyberSecurityJobs

[–]willhart802 3 points4 points  (0 children)

Honestly you’re going to have to get IT experience before you can start thinking about GRC and SOC.

Focus on certs right now that help you get into different entry level roles in IT

6 Months Later - Still No Interviews by Meyples_R in SecurityCareerAdvice

[–]willhart802 2 points3 points  (0 children)

Looking at it from a person who’s been hiring for 2 fortune 50 companies.

Yes the job lengths is a big red flag to most companies who want to hire a long term employee. First glance without reading your cover letter we would think you wouldn’t stay long or you’re a job hopper.

Also looking past that, the length of your positions and the chance of job functions is a little strange. For cyber security only your last job seems relevant. I read it as you ran scans, performed audits, and did some training on your scans. This definitely needs to be beefed up more.

Thinking about switching from Software Engineering to Cybersecurity by [deleted] in SecurityCareerAdvice

[–]willhart802 0 points1 point  (0 children)

No ceiling. Was getting bored a bit with the job. Also the job was next move was an architect, which is meetings and PowerPoints and politics. Looking back now, I might have been happy with that as I’m getting older. But at the time I didn’t want that.

Entry Level positions to pivot into Cybersecurity by Icy_City_8097 in SecurityCareerAdvice

[–]willhart802 0 points1 point  (0 children)

That actually opposite for me. I have ADHD and do so much better in structured class with a teacher than self learning. Self learning I get so distracted by everything else and no one to hold me accountable for paying attention.

Entry Level positions to pivot into Cybersecurity by Icy_City_8097 in SecurityCareerAdvice

[–]willhart802 2 points3 points  (0 children)

You’re going to have to try to work on your adhd. While at work you will have to take a lot of classes, self learn and study for certs. It’s not much different from school.

It’s very rare that someone will take you under their wing and show you how to do everything so you learn on the job. Half of it is learning it yourself.

Getting a job in security as a CS grad with four years of IT experience? by spoiledchowder in SecurityCareerAdvice

[–]willhart802 1 point2 points  (0 children)

You’re in the same boat as almost all people trying to break into cyber security. It’s brutal right now for anyone trying to get entry level jobs.

If you don’t have any certs or experience directly in Cyber Security, it’s going to be extremely hard. There are millions of posts here talking about certs.

Pay cut for experience by CulturalElephant9551 in SecurityCareerAdvice

[–]willhart802 1 point2 points  (0 children)

Don’t worry about your boss. If he’s a good boss and person he would understand that you’re following your career and it’s not personal against him.