Ask HN: Getting foot between the door in cybersecurity

https://news.ycombinator.com/item?id=39509636

by juhohe • 2 years ago

1 2 2 years ago

news.ycombinator.com

Dear all,

I'm a fullstack developer with about 12 years of experience. I have been about 4 years interested in cybersecurity and have studied it independently. For example, I have completed certifications CSSLP and OSCP.

My challenge is that to get work in cybersecurity jobs it seems that you need some experience in such work. I'm a senior developer but as a security person I'm novice. However, I have an idea that getting some "security developer" type role would be a good starting point, and then I could little by little move to a more cleanly security job. Especially I'm interested in jobs about reverse engineering and pen testing.

Would you have any tips on how to achieve transition to cyber security? I'm situated in Finland.

brudgers• 2 years ago

I'm interested in jobs about reverse engineering and pen testing.

Are you interested enough to leave "jobs about" from that sentence?

What I mean is being interested in a job doing X, is not the same as being interested in X. Because a job doing X has external dependencies (e.g. the hiring process). But simply being interested in X can be pursued all on your own.

And when it comes to hiring for people to do X, an interest in doiong X trumps an interest in a job doing X.

Finally, an academic degree in X is a standard way to demonstrate an interest in doing X to potential employers. If nothing else an academic credential shows a committed interest.

Good luck.

mikasa71• 2 years ago

I did the same transition 20 years ago. Apply for “product security” or “application security” positions. Not for “IT security” positions.

Ask HN: Getting foot between the door in cybersecurity

Related Stories