Episode 14

full
Published on:

10th Oct 2023

Ep15: How I Got a Job in Cyber Security without Experience

Getting a job in cybersecurity without direct experience can be challenging but not impossible. Here are some strategies to help you break into the field:

  1. Education and Certifications: Obtain foundational certifications like CompTIA Security+ and consider advancing to others like CISSP, CEH, or Cisco's CCNA Cyber Ops.
  2. Network: Attend cybersecurity conferences, seminars, and meetups. Engage with professionals and peers in events like DEFCON or platforms like Meetup.com.
  3. Internships and Entry-Level Positions: Pursue internships or related entry-level positions, such as IT support roles, to gain relevant industry experience.
  4. Projects and Portfolio: Establish a home lab, explore security tools, or conduct ethical hacking on systems where you have permission. Document and showcase your endeavors.
  5. Online Platforms: Engage in platforms like Hack The Box, TryHackMe, or participate in Capture The Flag (CTF) challenges to hone practical skills.
  6. Blogs and Publications: Write about cybersecurity topics to demonstrate your knowledge and passion for the field.
  7. Additional Training: Use platforms like Cybrary, Udemy, and Coursera to take courses in cybersecurity and further develop your skills.
  8. Soft Skills: Highlight your analytical, problem-solving abilities, and other vital soft skills that are in demand in cybersecurity roles.
  9. Transferrable Skills: Emphasize skills from previous roles or experiences that can be applied to a cybersecurity position.
  10. Stay Updated: Regularly update your knowledge on the latest trends, news, and threats in the cybersecurity domain.
  11. Further Education: Depending on your aspirations, consider pursuing degrees in cybersecurity or related disciplines.
  12. Seek Mentorship: Connect with industry professionals who can provide guidance, insights, and potential introductions.
  13. Volunteer Opportunities:
  • Contribute to local non-profits, schools, or community centers by offering cybersecurity services or training.
  • Use the experience to develop practical skills and expand your professional network.
  • Highlight your dedication to the industry and community on your resume.

Starting Your Own Business:

  • Demonstrate your entrepreneurial spirit, initiative, and proactive approach.
  • Gain hands-on experience by tackling real-world cybersecurity challenges for clients.
  • Develop and hone both technical and business skills, such as client relations and project management.
  • Establish credibility through success stories, case studies, or client testimonials.

With a combination of these strategies, you can build a robust resume and gain valuable experience, positioning yourself effectively for a career in cybersecurity, even if you're starting without direct experience in the field.

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

Support the Podcast with a Tip

If you're enjoying Byte-Sized Security and finding these practical tips useful, please consider supporting the podcast with a small contribution. It costs $17 per month just to cover podcast hosting fees, and your support helps offset the costs of producing this security resource and keeping episodes free. Even a tip of $1-5 per month from loyal listeners adds up and allows me to continue providing great cybersecurity info. Please considering a donation. I appreciate you helping sustain Byte-Sized Security! Now back to the security tips..
Support the Podcast
A
We haven’t had any Tips yet :( Maybe you could be the first!
Show artwork for Byte Sized Security

About the Podcast

Byte Sized Security
Quick cyber tips you can act on before your coffee goes cold
Byte Sized Security takes one security or privacy story and cuts it down to something you can act on before your coffee goes cold. Host Marc David, a CISSP and Staff Security Engineer, keeps each episode short, usually about 6 to 11 minutes, with the facts, the primary sources, and a practical next step.

The show is part of ByteSizedSecurity, a 501(c)(3) cybersecurity education nonprofit. Listen and find the show notes at https://bytesizedsecurity.show
Support This Show

About your host

Profile picture for Marc David

Marc David

Marc David is a CISSP-certified Staff Security Engineer with 8+ years in dedicated security roles inside regulated healthcare, and the host of Byte-Sized Security. He describes his work in one line: "I get security tooling adopted by engineering teams who do not report to me." Most security programs fail at adoption, not at tool selection. Marc has driven API security monitoring, device trust, browser-based data loss prevention, and continuous mobile penetration testing to full coverage across engineering, IT, and platform groups where he holds no authority over anyone. His background spans HIPAA, HITRUST, and SOC 2 compliance, security automation, and awareness training built for people who never wanted training. Marc lives in the San Francisco Bay Area and speaks on security adoption, healthcare compliance, and automation.