IT Certifications and Careers (Official Discussion Thread)

thaKEAF

#grizzlies #titans
Supporter
Joined
May 1, 2012
Messages
38,024
Reputation
9,052
Daps
111,147
Reppin
Memphis
I would focus on the certs honestly. Your degree does not have to be in I.T. I work in cyber security and do not have a cyber security degree and I dropped out of top grad school program for computer science during week 1 lol. I also applied for a grad program in cyber security and never went after getting accepted.

The certs ended up working for me...I went from security support engineer(endpoints, firewalls, ids/ips, cloud sec platform) to now doing security audits. With that sad all of our paths are different. Some did help desk, some the degree route, some got in after connections. It's tons of different paths.

What would you say is a good skill set for entry level security? Im mainly seeing cli in Linux, python and sql along with splunk. Of course your normal knowledge of CIA triad stuff. I want to focus on actual skills once I finish this google cert and redoing the security+.
 

papa pimp

All Star
Joined
Mar 11, 2022
Messages
4,157
Reputation
443
Daps
9,894
What would you say is a good skill set for entry level security? Im mainly seeing cli in Linux, python and sql along with splunk. Of course your normal knowledge of CIA triad stuff. I want to focus on actual skills once I finish this google cert and redoing the security+.


take the sc-200
lab sentinel and defender (specifically cloud and endpoint)
with knowledge of a SIEM and XDR you will level up quickly.
target MSSPs if you want to get hired quickly and touch a lot of things.
 

Mirin4rmfar

Superstar
Joined
Mar 11, 2015
Messages
11,053
Reputation
-659
Daps
56,048
What would you say is a good skill set for entry level security? Im mainly seeing cli in Linux, python and sql along with splunk. Of course your normal knowledge of CIA triad stuff. I want to focus on actual skills once I finish this google cert and redoing the security+.

If I was certing right now...I would focus on the following

XDR/Endpoint platform like crowdstrike.
Zero trust network platform like netskope, zacaler
Linux/Python

One cloud platform like aws
Splunk for logging
And of course Linux

..........

It all depends on what u want to....some jobs u can be an endpoint engineer, a zero trustwork engineer only or aws

.......

Like jtmoney mentioned there are people coasting in the field making 130K while there are people burnt the fuk for the same money n less.
 

AyBrehHam Linkin

First Black Brehsident
Joined
Feb 14, 2015
Messages
16,202
Reputation
3,430
Daps
80,042
Reppin
Wiscansin

ViShawn

Superstar
Supporter
Joined
Aug 26, 2015
Messages
14,602
Reputation
5,516
Daps
48,913
I recently got two Splunk Certs in the past three weeks. They're relatively easy.

I'm trying to decide if I want to pursue the AWS Solutions Architect - Associate. It seems fairly straightforward. I have Cloud experience but the past few years I've been in the weeds with Hadoop (Kakfa, Spark, Solr).

I want to go into other pre-sales role since the one at my current position is about to end.
 

DrDoom

All Star
Joined
Nov 9, 2014
Messages
1,167
Reputation
-70
Daps
2,927
Passed Security+ today. Not bad. I can see if you were brand new to IT, this would take sometime to study for and be a pain in the ass lol.

The Measureup practice exams were harder than the actual test lol

up next : Linux+.
Congrats.
 

NeilCartwright

All Star
Joined
Nov 7, 2014
Messages
3,417
Reputation
881
Daps
10,538
Reppin
Atlanta
landed an IT analyst/help desk job for the gov about 2 months ago. Before that i was a security analyst (7 months) and before that also help desk (3 years).

Got A+, Net+, sec+, Pentest, ITIL 4, and linux lpi certs. about 7 more classes to go at wgu's cyber bachelors, and gonna get SSCP and Cysa before the year is up.

trying to play my cards right to get back into a security focused role, but not sure. my plan is to work on my portfolio, SIEMs, vulnerabiltiy management, and building a REST API. maybe work on some cloud stuff as well, ive heard a little about terraform? Im looking for feedback man, this help desk is pure foolishess...got people 60+ years old bytching about a damn VGA cable and how to hook it up:mjcry:i aint go this hard to hook up monitors :dead:
 

papa pimp

All Star
Joined
Mar 11, 2022
Messages
4,157
Reputation
443
Daps
9,894
landed an IT analyst/help desk job for the gov about 2 months ago. Before that i was a security analyst (7 months) and before that also help desk (3 years).

Got A+, Net+, sec+, Pentest, ITIL 4, and linux lpi certs. about 7 more classes to go at wgu's cyber bachelors, and gonna get SSCP and Cysa before the year is up.

trying to play my cards right to get back into a security focused role, but not sure. my plan is to work on my portfolio, SIEMs, vulnerabiltiy management, and building a REST API. maybe work on some cloud stuff as well, ive heard a little about terraform? Im looking for feedback man, this help desk is pure foolishess...got people 60+ years old bytching about a damn VGA cable and how to hook it up:mjcry:i aint go this hard to hook up monitors :dead:

I assume SSCP and CySA are part of the bachelors otherwise I would say scrap them and focus on tooling specific certifications to easily break back into cybersecurity than working as a SOC analyst.

You can go the long route and try to learn a bunch of stuff (Splunk, Akamai, Cisco, Crowdstrike, Okta, etc) + AWS. If you want to be a pentesting then learn some python and get your OSCP and ignore the below:

I sound like a broken record, but an easier route is to learn Microsoft security tooling certifications. Its more mature than AWS inbuilt security and is rapidly evolving in terms of SIEM (Sentinel), identity (Entra), XDR and vulnerability management (Cloud and Endpoint), Compliance and DLP, and even their networking/application security (Azure WAF and Firewall) is rapidly maturing.

This will be much easier than learning 10 different vendors products and is being rapidly adopted across enterprises since most already use some combination of Microsoft device management, identity, OS, cloud, and applications. This will be 1 of Microsoft's drivers for revenue going forward especially now since they take it way more serious than say 5 years ago. I expect them to eat up marketshare in all these domains as they've done with Azure.

Speaking from personal experience. After graduating, you will not lack for cybersecurity roles or compensation if you were to say obtain a sc-200, sc-100, and if you felt really good ms500 or az500. If you want to tilt to compliance/identity then sc-900, sc-300, sc-400 are also decent certs to look into
 
Top