Hacker News new | ask | show | jobs
by M5x7wI3CmbEem10 715 days ago
may I ask if you have any career advice?
2 comments

Try 5 years to get into foreign service, then pivot to IS?
Yes. Or more general: work hard to get something. Even if you will never reach it, you might still improve enough in general, to be ready to do and get something else instead.
Correct
Unless you have broken software and hardware since the 1990s or 1980s, and then gotten a degree in management or engineering, my path is hard to replicate.

But I certainly can offer some advice:

1. Be hardcore and really interested in security. Read everything. Deep diving into networks, software, vulnerability, risk management.

2. Get a CISSP certifiaction, then maybe an ISO 27001 cert and then also something juicy from SANS (I have none of these).

3. Get an AWS or a public cloud of your choice certification

Also

* Cia triad

* Mitre attack framework

* Cis controls

* Nist framework

* Ise 62443

* Zero trust framework from NIST

Get work experience, projects, situations, grow and evolve

If you're interested in someone else's take on this: don't get a CISSP, and ISO 27001 is generally something a company gets, not a person.
True, it would be more toward security leadership in things like CISO roles or equivalent.

Yet if one takes them, they will certainly help.

Again, just in case you're interested in a second take on this, no.
Why no? CISSP is often requested on job postings for cybersecurity.
They're disproportionately requirements for the worst, lowest-status jobs in cybersecurity, and many of the best known and "highest placed" practitioners in the industry (not just in vuln research and xdev but also in management) don't have one.
I am intersted in your version of my answer. I don't think picking at elements from my list and just saying "no" is fruitful.
I disagree, and am deliberately not trying to start a protracted debate here. I'm just offering a data point, nothing more.