Ep:30 Practical Cybersecruity Advice You Can Use

Marc: 00:00:00

So this podcast is going to be a little bit different because what I did.

2

: 00:00:04

Is take a previous podcast.

3

: 00:00:06

And I used a site by

Google called notebook LM.

4

: 00:00:10

Too.

5

: 00:00:12

Structure that in a better way,

that might be more interesting

6

: 00:00:14

to listen to for listeners.

7

: 00:00:16

The first time I did this, it was

more of a me just answering questions

8

: 00:00:20

one off and kind of spit ballin it.

9

: 00:00:22

This one, actually, AI

sort of helped me out.

10

: 00:00:26

Organize it.

11

: 00:00:27

And it made it into a podcast between two

guests talking about the show that I did.

12

: 00:00:33

So this should be real interesting.

13

: 00:00:34

Again, the site that I used, if you

have a Google account won't cost,

14

: 00:00:38

anything you can add up to 50 sources.

15

: 00:00:40

It's mostly for research, but

it's a quite an interesting site.

16

: 00:00:45

Again, it's notebook L m.google.com.

17

: 00:00:49

And this is what the

episode will sound like.

18

: 00:00:52

Angie: Okay, so you're thinking

about a career in cybersecurity, huh?

19

: 00:00:55

Well, you're definitely not alone.

20

: 00:00:57

This field is seriously exploding

right now, but let's be real,

21

: 00:01:01

getting a foot in the door can

feel kind of overwhelming, right?

22

: 00:01:04

Dan: Yeah, for sure.

23

: 00:01:05

It's easy to get lost in

the sea of advice out there.

24

: 00:01:08

Angie: Exactly.

25

: 00:01:09

And that's what we're diving into today,

how to actually break into cybersecurity.

26

: 00:01:13

And we're not talking vague theories here.

27

: 00:01:15

We're But real practical advice

that you can actually use,

28

: 00:01:19

Dan: right?

29

: 00:01:19

We need the inside scoop.

30

: 00:01:20

Angie: You got it.

31

: 00:01:21

We're dissecting an episode from

the Bite Size Security podcast.

32

: 00:01:25

Their host, Mark, is a total pro

and he really breaks things down

33

: 00:01:29

for listeners who are trying

to get started in the field.

34

: 00:01:32

Dan: Oh, I've heard of that podcast.

35

: 00:01:33

It's supposed to be really good.

36

: 00:01:35

Angie: It is.

37

: 00:01:36

What I love about Mark is that

he doesn't sugarcoat anything.

38

: 00:01:38

He gives it to you straight.

39

: 00:01:40

Based on his own experience.

40

: 00:01:41

Dan: That's so important.

41

: 00:01:42

Especially in a field like cyber

security where things change so quickly.

42

: 00:01:46

You need advice that's

grounded in reality.

43

: 00:01:48

Angie: Absolutely.

44

: 00:01:49

And one thing that makes Mark's

perspective super valuable is

45

: 00:01:52

that he actually transitioned

into cybersecurity himself.

46

: 00:01:55

So he gets the challenges newcomers

face because, well, he's been there.

47

: 00:02:00

He even talks about how he struggled with

a lateral career move despite already

48

: 00:02:05

having some IT experience under his belt.

49

: 00:02:07

Can you believe that?

50

: 00:02:08

Dan: Wow, seriously.

51

: 00:02:09

That just goes to show you that everyone,

no matter their background, has to hustle

52

: 00:02:13

and prove themselves in this industry.

53

: 00:02:15

Angie: Totally.

54

: 00:02:16

But, on the flip side, it's also

kind of encouraging, you know?

55

: 00:02:19

It means the playing field is

a little more level for those

56

: 00:02:22

who are just starting out.

57

: 00:02:23

You don't necessarily need a

computer science degree from, like,

58

: 00:02:26

the dawn of time to be successful.

59

: 00:02:29

Dan: Right.

60

: 00:02:29

It's more about skills and a

willingness to learn, which is

61

: 00:02:33

something that Mark emphasizes a lot.

62

: 00:02:35

He's very clear that a traditional

IT background can be a great asset,

63

: 00:02:39

but it's not the be all and end all.

64

: 00:02:41

Cybersecurity needs people with

all sorts of skills, from legal

65

: 00:02:45

and writing to training and beyond.

66

: 00:02:47

Angie: It's true.

67

: 00:02:48

Cybersecurity isn't just about, like,

hacking into the mainframe anymore.

68

: 00:02:52

I mean, it's way more than that.

69

: 00:02:53

It's about strategy,

communication, problem solving.

70

: 00:02:57

Dan: Exactly.

71

: 00:02:58

Think of it like building a

security team in the real world.

72

: 00:03:01

You wouldn't want everyone to have the

same skills and perspectives, right?

73

: 00:03:04

Angie: That's a fantastic point.

74

: 00:03:05

So, instead of getting hung up

on whether you have the perfect

75

: 00:03:08

background, it's more about figuring

out how your existing skills could

76

: 00:03:11

be valuable in a cybersecurity role.

77

: 00:03:13

It's about finding your niche.

78

: 00:03:15

Dan: Absolutely.

79

: 00:03:16

And one of Mark's biggest pieces of

advice is to actually research the

80

: 00:03:21

different areas within cybersecurity.

81

: 00:03:22

There's so much out there.

82

: 00:03:24

Angie: Yeah.

83

: 00:03:24

Dan: Figure out what really

interests you and see how your skills

84

: 00:03:27

might connect with those areas.

85

: 00:03:28

Angie: Okay, that makes a ton of sense.

86

: 00:03:29

But let's say you've done your research.

87

: 00:03:31

You're ready to start applying

for jobs, and then you hit a wall.

88

: 00:03:35

A wall of certifications.

89

: 00:03:38

CISSP, security, CCNA,

the list goes on and on.

90

: 00:03:41

It can be totally overwhelming.

91

: 00:03:43

Dan: Oh, tell me about it.

92

: 00:03:44

I remember when I first started

looking into certs, I was

93

: 00:03:46

like, where do I even begin?

94

: 00:03:48

Angie: Right.

95

: 00:03:49

And Mark has this hilarious take on this

whole certification craze, especially

96

: 00:03:53

when it comes to entry level roles.

97

: 00:03:54

Dan: Yeah, what's his take?

98

: 00:03:55

Angie: He basically laughs at

those job postings that require a

99

: 00:03:59

CISSP for an entry level position.

100

: 00:04:01

It's like, they want you to be a

cyber security ninja before you've

101

: 00:04:04

even learned how to throw a punch.

102

: 00:04:05

Dan: Yeah, that's a bit much, right?

103

: 00:04:07

Like, asking someone to run a

marathon before they can even walk.

104

: 00:04:09

Angie: Exactly.

105

: 00:04:10

So, what's the deal with certifications?

106

: 00:04:13

Should we be spending all our free time

studying for them, or are they just

107

: 00:04:16

kind of nice to have on our resumes?

108

: 00:04:19

Dan: Well, Mark doesn't dismiss

certifications entirely.

109

: 00:04:22

He sees them as valuable,

but for specific reasons.

110

: 00:04:26

Angie: Okay.

111

: 00:04:26

I'm intrigued.

112

: 00:04:27

Like, what?

113

: 00:04:28

Dan: First off, they can actually help you

get past those applicant tracking systems.

114

: 00:04:32

You know, those ATS things a lot

of companies use to filter resumes.

115

: 00:04:34

Those

116

: 00:04:35

Angie: things are brutal.

117

: 00:04:36

Dan: Yeah, they can be.

118

: 00:04:37

Certifications act as keywords

to make your resume stand out.

119

: 00:04:40

Angie: So it's like playing a game,

figuring out the right keywords.

120

: 00:04:43

Dan: Kind of.

121

: 00:04:45

But the other thing certifications

do is show employers you

122

: 00:04:47

have a baseline of knowledge.

123

: 00:04:49

Like, you're serious about the field

and you're investing in yourself.

124

: 00:04:52

That makes sense.

125

: 00:04:53

But here's the key.

126

: 00:04:54

Don't just collect certifications

like they're Pokemon cards.

127

: 00:04:57

Be strategic.

128

: 00:04:58

Angie: So it's all about

quality over quantity.

129

: 00:05:01

Dan: Exactly.

130

: 00:05:02

Choose the ones that are relevant

to the specific cybersecurity

131

: 00:05:05

jobs you actually want.

132

: 00:05:07

Angie: Focus.

133

: 00:05:08

I like it.

134

: 00:05:09

But even with the right certifications,

Mark emphasizes that technical

135

: 00:05:13

skills alone won't cut it.

136

: 00:05:15

He's a big believer in

what he calls soft skills.

137

: 00:05:19

Things like curiosity and self

discovery are super important,

138

: 00:05:22

especially in such a fast paced field.

139

: 00:05:24

Dan: Oh, absolutely.

140

: 00:05:25

I think that's spot on.

141

: 00:05:26

Cyber security is constantly changing.

142

: 00:05:28

You can't just learn one thing and expect

to coast on that knowledge forever.

143

: 00:05:32

Angie: Right.

144

: 00:05:32

You've got to be constantly

learning, adapting, and evolving.

145

: 00:05:35

Dan: Exactly.

146

: 00:05:35

Mark actually brings up

phishing attacks as an example.

147

: 00:05:38

Like, have you seen the crazy

stuff they're doing with AI now?

148

: 00:05:41

Angie: No.

149

: 00:05:41

What are they doing?

150

: 00:05:42

Dan: It's kind of scary how

sophisticated it's gotten.

151

: 00:05:45

But it proves Mark's point perfectly.

152

: 00:05:48

If you're not learning and adapting

You're going to get left behind.

153

: 00:05:51

Angie: Whoa, AI powered phishing attacks.

154

: 00:05:53

That's kind of terrifying,

but I guess it makes sense.

155

: 00:05:56

Cybersecurity is like this

never ending arms race.

156

: 00:05:58

As the good guys get better, the

bad guys have to up their game too.

157

: 00:06:02

So how can people actually develop those

crucial SOP skills that Mark talks about?

158

: 00:06:07

Especially if you're just

starting out in cybersecurity.

159

: 00:06:10

It's not like you just wake up

one day with this like, incredible

160

: 00:06:13

self directed learning superpower.

161

: 00:06:14

Dan: Right.

162

: 00:06:15

It takes work.

163

: 00:06:16

Yeah.

164

: 00:06:16

But Mark has some really

cool advice about this.

165

: 00:06:18

He's a huge advocate for what he

calls self discovery learning.

166

: 00:06:22

It's all about taking control of your

education, going beyond the classroom,

167

: 00:06:26

and actually learning by doing.

168

: 00:06:27

Angie: I like the sound of that.

169

: 00:06:29

Dan: He encourages people to dive into

cybersecurity forums, experiment with

170

: 00:06:33

different tools, and even try setting

up their own vulnerable systems in a

171

: 00:06:37

safe environment so they can practice.

172

: 00:06:39

Angie: Wait, what?

173

: 00:06:40

You mean like building your

own little hacking lab at home?

174

: 00:06:43

Dan: Exactly.

175

: 00:06:43

Angie: Yeah.

176

: 00:06:44

Dan: Mark calls it a home lab,

and it's surprisingly common

177

: 00:06:47

in the cybersecurity world.

178

: 00:06:48

Angie: Seriously?

179

: 00:06:49

Dan: Yeah.

180

: 00:06:50

It's a way to get hands on experience

without the pressure of a real world

181

: 00:06:54

job, which can be super valuable

when you're first starting out.

182

: 00:06:57

Angie: That's so cool.

183

: 00:06:57

It sounds a little intimidating,

though, building your own hacking lab.

184

: 00:07:00

Like, where do you even begin?

185

: 00:07:02

Dan: Well, that's where those soft

skills come in curiosity and that

186

: 00:07:05

willingness to just figure things out.

187

: 00:07:07

Mark talks about spending hours

in his home lab, breaking stuff,

188

: 00:07:11

putting it back together and just

learning through trial and error.

189

: 00:07:15

And he emphasizes that you don't need

some crazy expensive setup to get started.

190

: 00:07:20

You can start small and build

up your skills as you go.

191

: 00:07:23

Angie: That's really encouraging.

192

: 00:07:24

So it's all about embracing

that hacker mindset, right?

193

: 00:07:27

A

194

: 00:07:27

Dan: hundred percent.

195

: 00:07:27

Angie: Even if you're not planning on

becoming an ethical hacker or anything,

196

: 00:07:31

just having that curiosity to explore and

figure out how things work is so valuable.

197

: 00:07:36

Dan: It's essential.

198

: 00:07:37

And besides Home Labs, Mark's

also a huge fan of those

199

: 00:07:40

Capture the Flag competitions.

200

: 00:07:41

Have you ever heard of those?

201

: 00:07:42

Angie: Yeah, I've heard the term, but

I'm not entirely sure what they are.

202

: 00:07:45

Dan: So CTFs are basically online

cybersecurity games or competitions

203

: 00:07:50

designed to test your skills in

a really fun and engaging way.

204

: 00:07:54

Imagine solving puzzles, cracking

codes, finding vulnerabilities,

205

: 00:07:58

and competing against other people.

206

: 00:07:59

Angie: That sounds awesome.

207

: 00:08:00

It's like gamified

cybersecurity training almost.

208

: 00:08:03

Dan: Exactly.

209

: 00:08:05

And the best part is that there are

CTFs for every skill level, from

210

: 00:08:08

total beginners to seasoned pros.

211

: 00:08:10

Yeah.

212

: 00:08:10

Yeah.

213

: 00:08:11

Mark says that CTFs helped him solidify

his understanding of key cybersecurity

214

: 00:08:15

concepts when he was starting out.

215

: 00:08:18

He said it was like everything just

clicked once he actually started

216

: 00:08:20

applying what he was learning

in a more practical environment.

217

: 00:08:23

Angie: Wow.

218

: 00:08:24

So CTFs are like the ultimate proving

ground for your cybersecurity skills.

219

: 00:08:27

I love that there's a

competitive side to it, too.

220

: 00:08:29

I

221

: 00:08:29

Dan: know, right?

222

: 00:08:30

It's like esports for security nerds.

223

: 00:08:32

Angie: Totally.

224

: 00:08:32

So we've got Homelabs, CTFs.

225

: 00:08:34

Are there any other, like, unconventional

learning resources that Mark recommends?

226

: 00:08:39

Dan: Well, what's cool about all of

these things, Homelab, CTFs, even those

227

: 00:08:42

online forums we talked about, is that

they all foster a sense of community.

228

: 00:08:47

You're connecting with people who

share your passion for cybersecurity.

229

: 00:08:50

And you can learn so much just

by observing, asking questions,

230

: 00:08:54

and being part of that community.

231

: 00:08:56

Angie: That's a really good point.

232

: 00:08:57

Okay, so we've covered a lot of

ground transferable skills, choosing

233

: 00:09:01

the right certifications, hands

on learning, building a home lab.

234

: 00:09:05

It seems like Mark's philosophy

is all about taking action.

235

: 00:09:08

Like, don't just wait for opportunities to

come to you, go out there and create them.

236

: 00:09:12

Dan: Absolutely.

237

: 00:09:13

And, while he's a huge advocate for

self directed learning, he definitely

238

: 00:09:17

doesn't downplay the value of

connecting with others in the field.

239

: 00:09:21

Which brings us to his

thoughts on networking.

240

: 00:09:23

Angie: Yeah.

241

: 00:09:24

Dan: Yeah, so when it comes to

networking, Mark walks the walk.

242

: 00:09:27

You know, he doesn't just talk about it.

243

: 00:09:28

He actually attended RSA, like the

biggest cyber security conference out

244

: 00:09:32

there, for two years straight, before

he even broke into the industry.

245

: 00:09:35

Angie: Two years, wow, he must have been

serious about making those connections.

246

: 00:09:39

Dan: Oh, absolutely, he was all in.

247

: 00:09:40

He said he didn't know anyone at first,

but he went to all the talks, chatted

248

: 00:09:43

with people at the vendor booths,

totally immersed himself in that world.

249

: 00:09:48

And what's really cool is that

he emphasizes that networking

250

: 00:09:51

doesn't have to be expensive.

251

: 00:09:53

You know, you don't need to

fly to Vegas and drop a ton

252

: 00:09:55

of cash on a conference pass.

253

: 00:09:56

Angie: Right.

254

: 00:09:57

There are definitely ways

to do it on a budget.

255

: 00:10:00

Dan: Yeah, exactly.

256

: 00:10:01

He's a big fan of those smaller

local conferences like B Sides.

257

: 00:10:05

They're often free or way

cheaper than the big name events.

258

: 00:10:08

He actually tells this crazy story

about overhearing a conversation at B

259

: 00:10:12

Sides Vegas that led to a job offer.

260

: 00:10:14

Angie: No way!

261

: 00:10:15

Are you serious?

262

: 00:10:15

It's just from eavesdropping.

263

: 00:10:16

I

264

: 00:10:16

Dan: know, right?

265

: 00:10:17

It's a perfect example of how

you never know where that next

266

: 00:10:20

opportunity might come from.

267

: 00:10:22

But beyond those in person events,

Mark's also a huge proponent of

268

: 00:10:26

building a solid online presence.

269

: 00:10:29

Especially on LinkedIn.

270

: 00:10:30

Angie: Makes sense.

271

: 00:10:30

It's like having a digital resume that

anyone in the industry can see, right?

272

: 00:10:34

Dan: Exactly.

273

: 00:10:35

Mark suggests treating your

LinkedIn profile as your own

274

: 00:10:38

personal cybersecurity brand.

275

: 00:10:41

Showcase your skills experience and

even your passion for the field.

276

: 00:10:45

Don't be afraid to share articles,

participate in discussions, and connect

277

: 00:10:48

with people whose work you admire.

278

: 00:10:50

You'd be amazed how many

doors can open just by putting

279

: 00:10:52

yourself out there authentically.

280

: 00:10:54

Angie: It's all about making

those connections and building

281

: 00:10:56

relationships both online and offline.

282

: 00:10:58

Dan: Absolutely.

283

: 00:11:00

So let's shift gears for a sec.

284

: 00:11:01

We've talked about networking,

building your skills, but what about

285

: 00:11:04

the actual job application process?

286

: 00:11:07

You know, sending out your resume

and going through interviews,

287

: 00:11:09

it can be a real grind.

288

: 00:11:11

Uh huh.

289

: 00:11:11

And?

290

: 00:11:12

Let's be honest.

291

: 00:11:12

Rejection is part of the game.

292

: 00:11:15

Angie: Oh, tell me about it.

293

: 00:11:16

I've definitely stared at my inbox

wondering why no one was emailing me back.

294

: 00:11:20

It can be brutal.

295

: 00:11:21

Dan: Totally.

296

: 00:11:21

And that's what I appreciate about Mark.

297

: 00:11:23

He's so real about the ups

and downs of the job search.

298

: 00:11:26

He talks about how he sent out

tons of applications and faced

299

: 00:11:29

his fair share of rejections.

300

: 00:11:31

But here's the thing.

301

: 00:11:32

He didn't let it get to him.

302

: 00:11:33

He actually started tracking

his application response rate.

303

: 00:11:36

Angie: Interesting, like

turning it into a numbers game.

304

: 00:11:39

Dan: Exactly, and he found that he was

getting about a 54 percent response rate,

305

: 00:11:43

which is pretty impressive if you ask me.

306

: 00:11:46

But even at a good response rate, you're

still going to get those rejections.

307

: 00:11:49

Oh, for sure.

308

: 00:11:50

And it's so easy to take it personally,

you know, like, what's wrong with me?

309

: 00:11:53

Why aren't they picking me?

310

: 00:11:54

Totally understandable.

311

: 00:11:56

But Mark's approach is that

every application, every

312

: 00:11:58

interview, even every rejection,

313

: 00:12:01

Angie: Okay, I like that.

314

: 00:12:03

It's about finding the

lesson in every situation.

315

: 00:12:06

Dan: Exactly.

316

: 00:12:06

He encourages people to really look at

those experiences, what worked, what

317

: 00:12:10

didn't, and then use that feedback to

make your applications even stronger.

318

: 00:12:15

Angie: So it's all about

having that growth mindset.

319

: 00:12:17

Setbacks are just

opportunities for improvement.

320

: 00:12:20

Dan: A hundred percent.

321

: 00:12:22

And one of the best tips Mark offers is

to treat your resume as a living document.

322

: 00:12:26

You don't just create one generic version

and blast it out to a million companies.

323

: 00:12:30

Angie: You've got to tailor it

to each specific role, right?

324

: 00:12:33

Dan: Exactly.

325

: 00:12:33

Highlight those skills and

experiences that are most

326

: 00:12:36

relevant to each job description.

327

: 00:12:38

He actually recommends keeping a

file of interesting job postings.

328

: 00:12:42

You know, the ones that really

get you excited and then use those

329

: 00:12:44

as inspiration to optimize your

resume and your online profiles.

330

: 00:12:48

Angie: It's brilliant, really.

331

: 00:12:49

You're basically reverse engineering

the hiring process, figuring out

332

: 00:12:52

exactly what employers want and

then making sure you're presenting

333

: 00:12:55

yourself in the best possible light.

334

: 00:12:56

Dan: Nailed it.

335

: 00:12:58

Now, before we wrap things up,

there's one more thing I want to

336

: 00:13:00

highlight from Mark's advice and I

think it's a really important one.

337

: 00:13:02

He talks about the importance of

finding your why in cybersecurity.

338

: 00:13:07

Angie: Your why?

339

: 00:13:09

What does he mean by that?

340

: 00:13:10

Dan: He's essentially saying that

if you want to not only break into,

341

: 00:13:14

but truly thrive in this field,

you need a strong sense of purpose.

342

: 00:13:19

You need something deeper

than just wanting a cool

343

: 00:13:21

job title or a big paycheck.

344

: 00:13:23

Angie: I love that.

345

: 00:13:24

So it's about figuring

out what motivates you.

346

: 00:13:27

What are you passionate about?

347

: 00:13:28

Dan: Exactly.

348

: 00:13:28

What problems do you want to solve?

349

: 00:13:30

What kind of impact do you

want to make in the world?

350

: 00:13:32

Because at cybersecurity is

about more than just technical

351

: 00:13:35

skills and certifications.

352

: 00:13:37

It's about protecting people,

businesses, entire societies.

353

: 00:13:41

It's about making a real difference.

354

: 00:13:43

Angie: Wow, that's a powerful

way to think about it.

355

: 00:13:47

So as we wrap up this deep dive into

Mark's incredible insights, I think

356

: 00:13:50

we've uncovered a really solid word map

for anyone who wants to launch a career

357

: 00:13:54

in this exciting and impactful field.

358

: 00:13:56

It's clear that breaking

into cybersecurity requires

359

: 00:13:58

a multifaceted approach.

360

: 00:14:00

We're talking technical skills,

soft skills, practical experience,

361

: 00:14:03

and a whole lot of hustle.

362

: 00:14:05

But what really shines through is that

having a genuine passion for this ever

363

: 00:14:08

evolving field and a desire to make

a positive impact is absolutely key.

364

: 00:14:13

So as you embark on your own

cybersecurity journey, here's a

365

: 00:14:15

final thought to leave you with.

366

: 00:14:17

If cybersecurity is all about anticipating

and mitigating future threats, how do

367

: 00:14:21

you envision yourself contributing to

a safer and more secure digital world?