Cybersecurity/Info security career

Originally Posted by Unregistered

Is this still a bad place? Not much good reviews from the first few pages

Consider not bad for mid career switcher.

Originally Posted by Unregistered

cookie cutter pen testing

Which is just right for mid-career switcher, since the job will be primarily on bread & butter VA/PT, the learning curve won’t be that steep (for most).

I was from there. Flexible and homely environment.

Originally Posted by Unregistered

Which is just right for mid-career switcher, since the job will be primarily on bread & butter VA/PT, the learning curve won’t be that steep (for most).

I was from there. Flexible and homely environment.

Good place to learn? Where u move on to?

I just got CISSP but I'm considering working towards OSCP next to get my foot into pentesting. Is there any benefit in that? I'm currently in a security administrative/incident response role. No major shift work since we hire vsoc

Originally Posted by Unregistered

I just got CISSP but I'm considering working towards OSCP next to get my foot into pentesting. Is there any benefit in that? I'm currently in a security administrative/incident response role. No major shift work since we hire vsoc

Too many pentesters in the market. Nowadays, fresh grads from infosec degree are quite well-trained in school and can be fairly competent pentesters within a year. Can try look for opportunities at defenders side since you already have some experience (less "exciting" but also less competitive and very essential)

Hi guys, can you recommend me a few good companies for SOC analysts to start for entry level career. Thanks very much in advance !

Originally Posted by Unregistered

I just got CISSP but I'm considering working towards OSCP next to get my foot into pentesting. Is there any benefit in that? I'm currently in a security administrative/incident response role. No major shift work since we hire vsoc

Your side got pentesting

Originally Posted by Unregistered

I just got CISSP but I'm considering working towards OSCP next to get my foot into pentesting. Is there any benefit in that? I'm currently in a security administrative/incident response role. No major shift work since we hire vsoc

Pentester looks cool but real life doesn't.

Stick with CISSP become management and ask Pentester deliver for u.

Originally Posted by Unregistered

Pentester looks cool but real life doesn't.

Stick with CISSP become management and ask Pentester deliver for u.

Cissp need 5 yr of job exp to aquire and you properly wun be hired as a management directly as a fresh grad.

If you are talking about vendor management, I would advise you to avoid. Basically anything related to security you will throw it to the vendor, while you are doing the pmo job. Plus this role dun really need you to have much security exp, basically any ppl can do it mean that you can be ezily replaceable

Some of my friends stuck in that role cos they learn nothing and is very hard for them to exit.

If starting out or finding a new direction in infosec career, can look at cloud security. Had a job interview with Big 4 partner who didn’t think pentest is lucrative anymore and wants to focus more on cloud security since both everyone in public and private sectors is migrating to cloud.