• Home
  • The News
  • The Recruiters
  • Entry into cyber
    • Introduction
    • Investigate
    • Planning
    • Simplify your studies
    • Network
  • Resources
    • Computing fundamentals
    • Networking fundamentals
    • Security fundamentals
    • Programming
    • Linux
    • Blue Team
    • Red Team
  • Podcasts & Channels
  • More
    • Home
    • The News
    • The Recruiters
    • Entry into cyber
      • Introduction
      • Investigate
      • Planning
      • Simplify your studies
      • Network
    • Resources
      • Computing fundamentals
      • Networking fundamentals
      • Security fundamentals
      • Programming
      • Linux
      • Blue Team
      • Red Team
    • Podcasts & Channels
  • Home
  • The News
  • The Recruiters
  • Entry into cyber
  • Resources
  • Podcasts & Channels

getting into cyber cheatsheet

Getting Into Cyber Cheatsheet

This cheat sheet is designed to augment the aspiring cybersecurity professional and provide them with the tips, resources ,and advice needed to help improve their chances of finding a role in cybersecurity. 


Use this sheet in tandem with the "Entry Into Cyber" pages on this website.



Support the website

Introduction

This sheet is broken down into particular parts, each part serves to help inform the aspiring cybersecurity professional and help them prepare for a career in cybersecurity.


"Luck is what happens when preparation meets opportunity" - Seneca 


1. Find your passion

2. Building Your Network

3. Studying and Training

4. Tailor your profile and CV

5. Additional Resources

image2158

Find your passion

Cybersecurity is a massive field with lots of different facets, from GRC to IoT Penetration testing the number of roles and career paths are mind-boggling. There are roles that are more competitive than others which may make it difficult to get a foot in the door in that particular area, an alternative route may be advisable.


With all this said, finding your passion will help you align your studies, your job hunting efforts, your courses, and certifications which will ultimately make the challenge of finding a role less abrasive.


I have included this website to showcase the vast amount of roles available and it is interesting to see just how wide the scope is.


50 titles job seekers should know about: here


You may even find that your passions change halfway through your journey, which is perfectly normal. perform proper prior research and preparation to ensure to move is as less stressful as possible.

image2159

Building your network

Building your network within cybersecurity helps you connect with different businesses, professionals, and roles, this will be very beneficial to your efforts when finding a role as it brings visibility to your endeavours, skills, and professional profile.


LinkedIn


LinkedIn is without a doubt the best place to connect with industry professionals and a place where you can showcase your skills, it acts as a shop window to you as a professional and gives you a platform to market yourself.


1. Ensure you include as much relevant information on your profile; skills, experience, certifications, and courses.


2. Include a profile picture and change the default banner to something that describes you, remember the banner is at the top of the profile it needs to draw people in and paint a picture of who you are. 


3. When connecting with new people be sure to introduce yourself and let them know why you connected, this will help build professional relationships which can be beneficial for your career and efforts.


4. Engage with the community; comment on posts, like posts and join in meaningful discussions this will help nurture an organic network.


5. Post content that is engaging, relevant, shows your skills and passion.


6. Be selfless, help people when you see people asking for it, be an ally to others.


7. Connect with recruiters, a large number of jobs may never see a job board and will be handled by recruiters whether it be an internal recruiter or external recruiters connect with them, they can give valuable industry insights and guidance on your efforts.


Interestingly a survey was conducted which concluded that in 2016 85% of roles were filled via networking, whether this holds true to today is another question, however commonly most roles in cybersecurity are found via networking, this is from personal experience and from discussions with others.


Discord


Relatively new to the cybersecurity scene is the use of discord and the communities that are hosted on there, now there are many different servers you can join and they all have different focuses. Here are a few servers to get you started.


Cyber Job Hunting - Cyber career advice.  

Cyber Mentor Dojo - Finding mentorship in cybersecurity.

Certification station - Study and certification help.

Security Blue Team - Blue team focused server.

Blue Team Labs Online - Official BTLO Discord.

Unofficial RangeForce - Unofficial RangeForce server.

Unofficial INE/E-learn - Server dedicated to students of INE.

BlackHills Infosec - Server - A community with good resources.

TMHC (The Many Hats club) - A cyber security community.

Infosec Prep - Cybersecurity study community.

TechVets - Veteran only run community, required to sign up via the website


If you run a server and would like it listed here please reach out to me on LinkedIn


image2160

Studying and Training

image2161

Build Your Foundation

"When a foundation is poorly constructed, it can post a serious risk to the structure"

This quote was taken from a construction website, however, this quote can ring true when describing a cybersecurity professional, they must have a good grasp on the foundational knowledge before they start to specialise in a certain area.


This includes but is not limited to the follow, bear in mind the foundation requirements differ from role to role.


  • Networking technologies
  • Programming/scripting
  • Network Security
  • Information security
  • Linux administration
  • Windows administration
  • System troubleshooting
  • Knowledge of regulations that may impact cybersecurity
  • Knowledge of different frameworks businesses may use


Be sure in whichever path you decide to take to build your foundation strong for the rest of the structure, don't skip ahead.

Finding Resources

While this website has a few resources you have the most powerful tools in your arsenal which are Google and Youtube, with the use of specific searches you can find content relating to the topic you wish to learn more about.


Additionally, LinkedIn and Discord are full of very helpful people that can point you in the right direction.


A website built by a titan in the cybersecurity field is dedicated to free resources, please support the creator of the website: here

Plan Your Studies

You will swiftly discover that there is a lot to learn and it can be difficult to keep on track and with this, you may find yourself bouncing between different topics which can become exhausting.


It is best to note down your "plan of attack" when it comes to studying and try to approach it in a structured manner, building a structure based on the research around the desired position may be beneficial because it could save time in the long run. 


This all may be easier said than done, but what about certifications? There is a vast amount of certifications available for the various types of roles within Cybersecurity and it can lead to confusion as to what is the best steps to take.


Please check out this useful visual guide to the various certifications available: here


Get practical

When you begin piling through the books and videos there is a time where you will be like "I need to try this" and you will begin searching for resources that can enable practical application of what you have been learning.


There are two ways I recommend approaching this and both have pros and cons, this is a case of finding what suits you better and fits within your learning budget.


Homelab - Homelab is a setup produced by yourself (self-hosted) which can be a great learning experience, you will find yourself running into issues that you need to troubleshoot to fix and this is where a lot of skills are gained. Once set up the homelab can prove to be a useful addition to your professional developments.


Here is a useful video to introduce you and help you build a homelab: here


Black Hills Infosec have lots of great resources too!


Practical learning online - While homelabs can be great they can also be costly and time-consuming and after all time and money are precious resources when it comes to learning, enter online practical learning resources.


  • OverTheWire - CLI familiarisation training. 
  • BlueTeamOnline - Blue team focused practical training/challenges.
  • HackTheBox - Penetration testing labs.
  • TryHackMe - Practical cybersecurity learning platform.
  • ImmersiveLabs - Practical Cybersecurity Learning.
  • RangeForce - Practical Cybersecurity learning 


Tailor your profile and CV

Profile

A lot of the battle is about networking and ensuring you stand out from the crowd, but what is the best way to do this in an online world? One word "Marketing" you need to market yourself as a professional as you are a product.


When you walk past a shop what do you see covering the windows? Impactful messages and visuals designed to draw customers in, now let's apply this to the Cybersecurity professional how can they market themselves?


Well, there is no easy answer for this one but it is a journey of learning and trial and error.


Firstly, improve your LinkedIn profile and secondly learn a little bit about marketing and use this to your advantage when networking and promoting yourself.


Steps to improve your profile on LinkedIn: here

Career advice to market yourself: here



CV/Resume


How many times have you sat there editing your CV and readjusting it? I have spent countless hours on my CV making sure it was up to a reasonable standard.


I have had the pleasure of speaking to many recruiters and hiring managers and have accumulated a list of tips and advice that could prove useful when building your CV.


Note: this may vary by region


  • Keep it relevant - Make sure what you put on your CV is relevant to the role you are applying for and is relevant in describing you as a professional.
  • Keep it brief but impactful - Ensure you do not go on a tangent too much but ensure you get the information across.
  • Add a personal statement - Adding a personal statement may help explain briefly who you are and why you could be a good fit.
  • Don't leave gaps - Having gaps of employment is common and it is perfectly normal, you should tell them why, spin it in a positive way, maybe a "study break".
  • Be honest - Don't put things on your CV that you are not able to talk about, you will get found out.
  • Add stats -  If you have achieved something back it up with statistics, don't just say you did, say how much.
  • Make it keyword friendly - If you plan to put your CV on job search websites ensure that you get the relevant keywords into the CV, this will make it easier for recruiters and companies to find you.
  • Add certifications - Even if you are studying towards a certification, put the expected date of completion down and of course include current and valid certifications.
  • Add key skills - depending on the job you are applying for listing relevant key skills is advised
  • Keep it concise - Make sure your CV is neat, easy to read ,and friendly on the eye, hiring managers don't want to be hit with a text wall. 
  • Format it - Make sure you keep a consistent format, this helps to keep things tidy. Think margins and font sizes.


While this list is a good start, it is certainly not everything and the way you approach your CV/Resume differs from region to region, additional research may be required.

image2162

Additional Resources

image2163

Websites

  • Simply Cyber - A website built by Gerald Auger, PhD that is designed to help inform aspiring cybersecurity professionals and highlight useful resources.


  • Black Hills Information Security - Useful website with an abundance of resources and learning material.        


  • SANS Free resources - Quality free resources produced by SANS.


  • Humble Bundle - A website that has bundles of content for low cost/donation to charity.


  • Portswigger - Web security academy built by the creators of burp suite.


  • DFIR Diva -A website built by an incident response analyst trying to learn on a budget.


Podcasts

  • Breaking into cybersecurity - A podcast focused around informing people and helping people break into the industry.                                                           


  • The Cyber Coalface - A podcast produced by members of the technical side of security focusing on a red and blue perspective.                                       

News

Remember to keep current with the latest Cybersecurity news, be on the look out for deals and discounts they may offer as well

  • Threatpost
  • The Hacker News
  • SCMagazine
  • Information security magazine
  • Darkreading

Githubs

  • Awesome Cyber Security 
  • Awesome Security
  • Awesome Blue Team
  • Awesome Red Team
  • Awesome Cyber Skills
  • Awesome Infosec
  • Awesome OSINT
  • Awesome Threat Intelligence 
  • Pentesting Bible


Please support the professionals who kindly put these awesome resources together

Youtube

Here are a collection of youtube channels that may prove useful.


SimplyCyber - Collection of how to's, interviews and career advice

Professer Messer - Collection of CompTIA Study videos and groups


Please support the professionals who have put these channels together.

Thank you

Thank you for taking the time to read this guide, I hope that it will prove useful in your endeavours.


If you would like your content featured here and you believe it may be useful please contact me on LinkedIn.


-Nox

Connect

Copyright © 2020 Noxcyber - All Rights Reserved.

Enhance your career

  • Policies

This website uses cookies.

We use cookies to analyse website traffic and optimize your website experience. By accepting our use of cookies, your data will be aggregated with all other user data. for further information visit the policies section of this site.

DeclineAccept