Episode 14

full
Published on:

10th Oct 2023

Ep15: How I Got a Job in Cyber Security without Experience

Getting a job in cybersecurity without direct experience can be challenging but not impossible. Here are some strategies to help you break into the field:

  1. Education and Certifications: Obtain foundational certifications like CompTIA Security+ and consider advancing to others like CISSP, CEH, or Cisco's CCNA Cyber Ops.
  2. Network: Attend cybersecurity conferences, seminars, and meetups. Engage with professionals and peers in events like DEFCON or platforms like Meetup.com.
  3. Internships and Entry-Level Positions: Pursue internships or related entry-level positions, such as IT support roles, to gain relevant industry experience.
  4. Projects and Portfolio: Establish a home lab, explore security tools, or conduct ethical hacking on systems where you have permission. Document and showcase your endeavors.
  5. Online Platforms: Engage in platforms like Hack The Box, TryHackMe, or participate in Capture The Flag (CTF) challenges to hone practical skills.
  6. Blogs and Publications: Write about cybersecurity topics to demonstrate your knowledge and passion for the field.
  7. Additional Training: Use platforms like Cybrary, Udemy, and Coursera to take courses in cybersecurity and further develop your skills.
  8. Soft Skills: Highlight your analytical, problem-solving abilities, and other vital soft skills that are in demand in cybersecurity roles.
  9. Transferrable Skills: Emphasize skills from previous roles or experiences that can be applied to a cybersecurity position.
  10. Stay Updated: Regularly update your knowledge on the latest trends, news, and threats in the cybersecurity domain.
  11. Further Education: Depending on your aspirations, consider pursuing degrees in cybersecurity or related disciplines.
  12. Seek Mentorship: Connect with industry professionals who can provide guidance, insights, and potential introductions.
  13. Volunteer Opportunities:
  • Contribute to local non-profits, schools, or community centers by offering cybersecurity services or training.
  • Use the experience to develop practical skills and expand your professional network.
  • Highlight your dedication to the industry and community on your resume.

Starting Your Own Business:

  • Demonstrate your entrepreneurial spirit, initiative, and proactive approach.
  • Gain hands-on experience by tackling real-world cybersecurity challenges for clients.
  • Develop and hone both technical and business skills, such as client relations and project management.
  • Establish credibility through success stories, case studies, or client testimonials.

With a combination of these strategies, you can build a robust resume and gain valuable experience, positioning yourself effectively for a career in cybersecurity, even if you're starting without direct experience in the field.

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

Next Episode All Episodes Previous Episode

Support Byte Sized Security

A huge thank you to our supporters, it means a lot that you support our podcast.

If you like the podcast and want to support it, too, you can leave us a tip using the button below. We really appreciate it and it only takes a moment!
Support Byte Sized Security
A
We haven’t had any Tips yet :( Maybe you could be the first!

Listen for free

Show artwork for Byte Sized Security

About the Podcast

Byte Sized Security
Snackable advice on cyber security best practices tailored for professionals on the go
In a world where cyberattacks are becoming more commonplace, we all need to be vigilant about protecting our digital lives, whether at home or at work. Byte Sized Security is the podcast that provides snackable advice on cybersecurity best practices tailored for professionals on the go.

Hosted by information security expert, Marc David, each 15-20 minute episode provides actionable guidance to help listeners safeguard their devices, data, and organizations against online threats. With new episodes released every Monday, Byte Sized Security covers topics like social engineering, password management, multi-factor authentication, security awareness training, regulatory compliance, incident response, and more.

Whether you're an IT professional, small business owner, developer, or just someone interested in learning more about cybersecurity, Byte Sized Security is the quick, easy way to pick up useful tips and insights you can immediately put into practice. The clear, jargon-free advice is perfect for listening on your commute, during a lunch break, or working out.

Visit bytesizedsecurity.com to access episodes and show notes with key takeaways and links to useful resources mentioned in each episode. Don't let cybercriminals catch you off guard - get smart, fast with Byte Sized Security! Tune in to boost your cybersecurity knowledge and help secure your part of cyberspace.
Support This Show

About your host

Profile picture for Marc David

Marc David

Marc David is a CISSP-certified Staff Security Engineer with 8+ years in dedicated security roles inside regulated healthcare, and the host of Byte-Sized Security. He describes his work in one line: "I get security tooling adopted by engineering teams who do not report to me." Most security programs fail at adoption, not at tool selection. Marc has driven API security monitoring, device trust, browser-based data loss prevention, and continuous mobile penetration testing to full coverage across engineering, IT, and platform groups where he holds no authority over anyone. His background spans HIPAA, HITRUST, and SOC 2 compliance, security automation, and awareness training built for people who never wanted training. Marc lives in the San Francisco Bay Area and speaks on security adoption, healthcare compliance, and automation.