Creating a career roadmap for the cybersecurity beginner

Infosec
25 Jul 202418:12

Summary

TLDRIn this episode of CyberWork Hacks, Professor Robert McMillan offers valuable advice for those beginning a career in cybersecurity. He discusses the importance of creating a career roadmap, bundling certifications, and the different paths in cybersecurity depending on the size of the company. He emphasizes the importance of starting with foundational certifications like Security Plus and suggests strategies for maintaining focus and motivation. Additionally, McMillan highlights the benefits of community involvement and vendor groups for hands-on experience. The episode aims to help novices navigate their career paths effectively and sustainably.

Takeaways

  • 😀 Professor Robert McMillan provides advice for security novices on how to start their cybersecurity career.
  • 🛣️ The script emphasizes the importance of creating a career roadmap early on in one's cybersecurity career.
  • 📚 There is no universal roadmap for cybersecurity, unlike those available for certifications from companies like Microsoft or AWS.
  • 📝 McMillan suggests bundling certifications such as A+, Net+, and Security+ from CompTIA for those interested in becoming a CIS admin.
  • 🌐 For those starting in cybersecurity, he recommends beginning with the CompTIA Security Plus, Azure SC-100, and Offensive Security Pro (OSP) certifications.
  • 🏢 It's noted that in smaller companies, one might have to be a 'jack of all trades', while larger companies may require more specialization.
  • 🎓 A degree is suggested but not strictly necessary to start in cybersecurity; community college can be a good starting point.
  • 🔍 The speaker highlights the value of joining computer clubs or vendor groups to gain experience and network with others in the field.
  • 🎮 McMillan suggests a work-reward system, such as playing video games after completing study or work tasks, to maintain motivation and discipline.
  • 📈 He also mentions the importance of specialization and continuous learning to grow within one's cybersecurity career.
  • 📘 The transcript mentions resources like Certification Magazine (ctm mag.com) for insights into what employers are looking for in IT and cybersecurity roles.

Q & A

  • What is the purpose of the 'cyberwork hacks' podcast?

    -The 'cyberwork hacks' podcast aims to provide a quick, clear, and actionable solution or new insight on how to utilize infosec products and training to achieve work and career goals, specifically focusing on questions asked by cybersecurity novices.

  • What does Professor Robert McMillan suggest as a starting point for someone new to cybersecurity?

    -Professor Robert McMillan suggests starting with the CompTIA Security Plus certification, as it is a good foundation for those new to cybersecurity, and then considering additional certifications like Azure SC-100 and Offensive Security Pro (OSP).

  • Why does Professor McMillan recommend not focusing solely on certifications at the beginning of a cybersecurity career?

    -He advises against focusing solely on certifications because they can limit one's options and pigeonhole individuals into a specific area. It's better to have a broader understanding and then decide on a specialization.

  • What is the significance of a career roadmap in cybersecurity according to the podcast?

    -A career roadmap in cybersecurity is important for helping individuals understand the various paths and certifications that can lead to their desired career goals, and it helps in planning their education and professional development.

  • How does Professor McMillan describe the difference between the roles of a CIS admin in a small company versus a large organization?

    -In a small company, a CIS admin might be responsible for a wide range of tasks, including security, whereas in a large organization, the role is more specialized, and there might be separate cybersecurity teams that do not even interact with the CIS admin team to avoid conflicts.

  • What advice does Professor McMillan give for high school students or those opting to skip college and enter the workforce faster?

    -He suggests starting at a community college or a four-year college if possible, taking generic IT and non-IT classes initially, and then focusing on a specific area of interest after gaining some understanding of the field and what they enjoy.

  • What is the role of vendor groups in helping someone start their cybersecurity career?

    -Vendor groups can provide access to free demo equipment and software, offer networking opportunities, and give insights into the latest technologies and industry practices, which can be valuable for starting and advancing a cybersecurity career.

  • What method does Professor McMillan propose to help stay focused on career development while managing a full-time job?

    -He suggests a work-reward system where one sets goals for studying or working on career development tasks and then rewards themselves with something they enjoy, like playing video games, after completing the tasks.

  • Why is it important to choose a cybersecurity career path that excites you, according to Professor McMillan?

    -Choosing a career path that excites you is crucial because it leads to greater job satisfaction and motivation. A high-paying career that isn't interesting can feel like a prison, making it difficult to stay motivated and engaged.

  • What resources does Professor McMillan recommend for individuals looking to enhance their cybersecurity skills?

    -He recommends using resources like infosec skills, where he has created learning paths for securing operating systems like Windows Server 2019 and Windows 10, and also suggests joining computer clubs and vendor groups for hands-on experience and networking.

Outlines

00:00

🎓 Introduction to Cybersecurity for Novices

Professor Robert McMillan offers advice for those starting their cybersecurity careers, emphasizing the importance of initial decisions in shaping one's career path. Viewers are encouraged to check out the episode for more insights.

05:02

📚 Purpose of Cyberwork Hacks

The Cyberwork Hacks series, a spin-off of the Cyberwork podcast, aims to provide clear and actionable solutions to fundamental cybersecurity questions. Professor Robert McMillan, a seasoned instructor, returns to discuss creating a career roadmap for cybersecurity novices.

10:04

🗺️ Understanding Career Roadmaps

Robert McMillan explains what a career roadmap is and what it isn't. He highlights the lack of a definitive cybersecurity career roadmap and suggests bundling certifications, starting with CompTIA’s A+, Network+, and Security+ for aspiring system administrators.

15:06

🔒 Certification Bundling Tips

McMillan advises starting with the Security+ certification from CompTIA and then pursuing Microsoft's Azure SC-100 and Offensive Security Pro (OSP). He underscores the importance of aligning certifications with career goals and organizational needs.

🎓 Navigating Education Choices

McMillan discusses the importance of starting with a broad IT degree and taking foundational courses early. He suggests community colleges for cost-effective education and emphasizes the value of gaining certifications alongside formal education.

🖥️ Finding Your Passion in Cybersecurity

Sharing his personal experience, McMillan encourages newcomers to explore and find their passion in cybersecurity. He recommends joining computer clubs, participating in vendor groups, and gaining hands-on experience with equipment to discover what excites them.

💡 Using Work-Reward Systems

McMillan suggests using a work-reward system to stay motivated, especially for young professionals. He shares his method of balancing work and play to maintain focus and continue progressing in learning and career development.

📜 Available Infosec Skills Paths

McMillan highlights the skills paths he has created on Infosec Skills, including courses on securing Windows Server 2019, Windows 10, Windows 11, and Windows Server 2022. He advises choosing paths that align with personal interests and career goals.

🎤 Conclusion and Viewer Engagement

The video concludes with a call to action for viewers to share the content, subscribe to the podcast, and suggest topics for future episodes. It promotes the 12 most in-demand cybersecurity roles video as a resource for choosing the right career path.

Mindmap

Keywords

💡Cybersecurity

Cybersecurity refers to the practice of protecting internet-connected systems, including hardware, software, and data, from attack, damage, or unauthorized access. In the video, cybersecurity is the central theme, with the discussion focusing on how to start and advance a career in this field. The transcript mentions creating a career roadmap in cybersecurity, indicating its importance in the digital age.

💡Career Roadmap

A career roadmap is a strategic plan outlining the steps an individual should take to achieve their career goals. In the context of the video, the term is used to emphasize the importance of planning and setting clear objectives for those starting out in cybersecurity. The script discusses creating a career roadmap before the first interview, suggesting a proactive approach to career development.

💡Certification

Certification in the video refers to professional credentials that validate an individual's skills and knowledge in a specific area, such as cybersecurity. The script mentions various certifications like CompTIA Security Plus, Azure SC-100, and Offensive Security Pro (OSP), which are recommended as starting points for building a cybersecurity career.

💡CompTIA Security Plus

CompTIA Security Plus is a certification that demonstrates foundational cybersecurity knowledge and skills. In the script, it is suggested as one of the initial certifications for those entering the cybersecurity field, indicating its relevance for beginners to establish a baseline of understanding.

💡Azure SC-100

Azure SC-100 is an entry-level certification from Microsoft that validates a candidate's understanding of cloud security within the Azure environment. The video script highlights this certification as a good starting point for those interested in cybersecurity, especially in cloud-based systems.

💡Offensive Security Pro (OSP)

Offensive Security Pro (OSP) is a certification that signifies advanced skills in cybersecurity, particularly in penetration testing and ethical hacking. The script positions OSP as a valuable certification for those looking to specialize in more technical aspects of cybersecurity.

💡CIS Admin

CIS Admin, short for Certified Information Systems Security Professional Administrator, refers to a role focused on managing and securing an organization's information systems. The script discusses the responsibilities of a CIS admin, which often include aspects of cybersecurity, even if not their primary focus.

💡Infosec Skills

Infosec Skills is a platform mentioned in the video that provides training and resources for individuals looking to develop their cybersecurity skills. The script refers to it as a place where viewers can start learning and practicing with various modules, including those created by Professor Robert McMillan.

💡Vendor Groups

Vendor groups are organizations or communities associated with specific technology vendors. In the video, they are suggested as valuable resources for gaining access to demo equipment, software, and networking opportunities, which can be instrumental in advancing a cybersecurity career.

💡Work-Reward System

The work-reward system is a motivational strategy discussed in the script where individuals complete a set amount of work or study to earn a reward, such as playing video games. This system is highlighted as a technique to maintain discipline and continue learning in the midst of a busy work life.

💡Community College

Community college is a type of educational institution that offers two-year associate degree programs and certificates. In the script, it is suggested as a cost-effective starting point for those pursuing higher education in cybersecurity or related fields, emphasizing the practicality of such an approach.

Highlights

Cyberwork Hacks is aimed at security novices and provides advice for career path decisions in cybersecurity.

Professor Robert McMillan shares advice for creating a career roadmap in cybersecurity.

Career roadmaps are essential but non-existent for cybersecurity students, prompting the need for guidance.

Bundling certifications like A+, Net+, and Security Plus from CompTIA is suggested for aspiring CIS admins.

In larger organizations, cybersecurity teams may not interact with CIS admin teams to avoid conflicts.

For beginners, starting with Security Plus, Azure SC-100, and Offensive Security Pro certifications is recommended.

The importance of understanding the difference between working in small versus large companies in cybersecurity is discussed.

Certification Magazine (cermag.com) is highlighted as a resource for understanding employer needs in IT and cybersecurity.

The challenge of deciding a career path at a young age and the importance of starting with a broad educational foundation.

Community college is suggested as a starting point for those without the funds for a four-year college.

The value of starting with non-IT classes to build a foundational understanding of the world is emphasized.

Joining computer clubs and vendor groups can provide hands-on experience and networking opportunities.

The excitement of setting up a server at home can indicate a passion for a career in cybersecurity.

Free Geek and similar initiatives can offer hands-on experience and equipment for learning.

The work-reward system is introduced as a method to stay disciplined and motivated in learning and career development.

Robert McMillan's learning paths on InfoSec Skills for securing Windows Server 2019, Windows 10, and other systems.

The importance of pursuing a career that aligns with personal interests to avoid job dissatisfaction.

Invitation for listeners to share the episode, like, subscribe, and comment with topics they want covered in future episodes.

Transcripts

play00:00

okay today's cyberwork hack is for

play00:02

security novices people who are just

play00:04

getting started in learning cyber

play00:06

security and looking for their career

play00:07

path Professor Robert McMillan is an

play00:09

infos seex skills path author and he

play00:11

gives you some fantastic advice for

play00:13

making the decisions at the very

play00:15

beginning to help you steer your career

play00:16

to all the places you want to go get

play00:18

your cyber security career started make

play00:20

sure you check out today's episode of

play00:22

cyberwork

play00:24

[Applause]

play00:27

hacks hello and welcome to a new episode

play00:30

of cyberwork hacks the purpose of this

play00:32

spin-off of our popular cyberwork

play00:34

podcast is to take a single fundamental

play00:36

question and give you a quick clear and

play00:38

actionable solution or a new insight on

play00:40

how to utilize infosec products and

play00:42

training to achieve your work and career

play00:44

goals um my guest today is Professor

play00:47

Robert McMillan now Robert's been the

play00:49

instructor and creator of our skills

play00:50

modules for a long time and he was a

play00:52

guest on an early episode of cyber

play00:53

workor and I'm really glad to have him

play00:55

back uh for a series of cyberwork hacks

play00:58

aimed squarely at the questions asked by

play01:00

cyber security novices and we hear from

play01:03

you all a lot and we hear what you're

play01:04

asking and we're hoping to answer some

play01:06

of it so today's hack specifically is

play01:08

about creating a career roadmap for

play01:10

yourself before you even step foot out

play01:12

of your fir out step foot out on your

play01:15

first interview so uhh welcome back to

play01:17

the show Robert it's always great to

play01:18

talk to you thanks Chris it's good to be

play01:20

back uh I really enjoyed our last get

play01:23

together and I hopefully I can help out

play01:25

some some people that are new to the

play01:27

industry absolutely so um uh yeah

play01:30

Roberts let's start at the beginning and

play01:31

explain what a career road map is and

play01:34

also I guess what it isn't like what

play01:36

should you be trying to understand or

play01:37

clarify for yourself before you know by

play01:40

creating a career road map for a career

play01:41

in cyber security and you know also the

play01:44

the what it's not like it's it's not

play01:45

going to solve certain problems I

play01:46

imagine but yeah yeah you're right about

play01:49

that uh you know career road maps are

play01:51

interesting if you go to say Microsoft

play01:54

to look at what their their

play01:56

certification road map is you know AWS

play01:59

has the same thing but there's really no

play02:02

road map out there just for security

play02:05

cyber security students and so I'm

play02:08

hopefully going to you know clear up a

play02:09

little bit of that for you because I I

play02:11

do see uh education from multiple

play02:14

different angles you know I started out

play02:16

as an employee I you know went on to

play02:19

become a consultant and then a business

play02:21

owner and now an educator and so I kind

play02:24

of see it you know all these these uh

play02:26

the big picture you know basically and

play02:29

so one of the things you could do is you

play02:30

could bundle certification together if

play02:32

we step away just from the whole degree

play02:34

plan and things like that temporarily

play02:36

let's look at bundling

play02:38

certifications um so you know a lot of

play02:41

people that want to go into CIS admin

play02:43

work will bundle the A+ the net plus and

play02:46

the Security Plus from CompTIA and those

play02:49

that's a good you know uh three

play02:50

certifications to start with one of the

play02:53

things is if you're going to be a CIS

play02:55

admin which is typically not a security

play02:56

role it doesn't mean you don't do

play02:58

security you're still going to be doing

play03:00

a lot of security it's just it may not

play03:01

be your focus now in a smaller company

play03:04

you are the main security person as well

play03:07

as the CIS admin as as well you might

play03:09

also be doing Voiceover IP and webcams

play03:11

and things like that but in a larger

play03:13

organization you're going to have a

play03:15

cyber security team which what I have

play03:18

found is really interesting they are not

play03:21

even allowed to talk to the CIS admin

play03:23

team because there could be a conflict

play03:25

there there could be some collusion

play03:26

there so you know larger companies don't

play03:28

even allow them to talk so let's talk

play03:30

about certification bundling besides

play03:33

just for assis admin um what I suggest

play03:36

for those of you who are just getting

play03:37

started start with the Security Plus now

play03:40

uh the Security Plus does have some

play03:41

requirements from from CompTIA but

play03:43

they're not really enforced I mean they

play03:45

say oh you've got to be a security

play03:46

professional for a couple of years and

play03:48

you know things like that they're not

play03:49

really enforced it does it's not going

play03:50

to stop you from taking the security

play03:52

plus uh then the Azure sc100 is a good

play03:56

one for from Microsoft Microsoft has

play03:58

moved away from on premises types of

play04:01

certifications uh you know much to my

play04:03

pain because I have a lot of them sure

play04:06

and yeah and has moved to uh you know

play04:09

mostly Cloud I mean there are a couple

play04:11

of hybrid ones out there the 800 the 801

play04:14

but the sc100 is a great intro cyber

play04:17

security

play04:18

certification and then the last one I

play04:20

suggest is the OSP the offensive

play04:23

security pro uh very good certification

play04:25

all these are available uh at The infc

play04:28

Institute as you know uh you know videos

play04:31

and uh you know uh you know labs and

play04:35

quizzes and you know a great way to get

play04:39

started go ahead go ahead I'm sorry no

play04:41

I'm sorry I just k then you can take the

play04:43

certifications from there yeah yeah

play04:45

absolutely well yeah I think that's

play04:46

that's a an important distinction to

play04:48

make and that'll sort of come into our

play04:49

next question but like you said if

play04:50

you're going to work for a small company

play04:52

you're going to have to be uh a jack of

play04:54

all trades and master of none and if

play04:56

you're going to come work for a large

play04:57

company you're going to need to

play04:59

specialize a bit more and sort of drill

play05:01

down on what your specialty is going to

play05:03

be and what's going to set you apart

play05:04

from people on your team I imagine

play05:06

exactly oh you know there's there's a

play05:08

MAG there's some magazines out there but

play05:09

I really like um the certification

play05:12

magazine I don't know if you've seen

play05:13

this one before but um it's put out by

play05:15

test out uh it's it's at cerm mag.com

play05:18

and they every month they have a lot of

play05:21

great uh articles about what employers

play05:24

are looking for for various different

play05:26

types of IT jobs and of course security

play05:28

is a big one among them yeah wow what a

play05:31

what a cool what a cool resource i' I've

play05:33

that's literally first time I'm hearing

play05:35

of it so I'm glad you mentioned that so

play05:37

yeah yeah C mag ctm mag.com check it out

play05:40

love it so Robert whether you're a high

play05:43

school student who's studying getting

play05:44

ready to go off to college or or you

play05:46

know someone who's opting to skip

play05:47

college and pursue your skills on your

play05:49

own to enter the workforce faster you

play05:51

know I think we can agree it could be a

play05:52

bit overwhelming to look up at your

play05:54

imaginary career ladder and imagine what

play05:56

path you're going to take to climb it

play05:57

and so I I wonder if you have any advice

play06:00

we making Career Road mapping into kind

play06:02

of a manageable and useful process for

play06:03

yourself rather than the you know the

play06:05

big scary open-ended question what do I

play06:07

want to be when I grow up yeah isn't it

play06:10

crazy and a little bit ridiculous to go

play06:12

I you were 17 once right and and I was

play06:16

17 months and I I just find it

play06:18

ridiculous that you you you go up to a

play06:20

17-year-old and you say it's time now to

play06:23

decide what you're going to do for the

play06:24

rest of your life yeah yeah yeah yeah

play06:27

you you and your non-developed

play06:28

prefrontal cortex I'm I'm sure this is

play06:31

going to go great

play06:33

yeah so uh here's here's my advice on

play06:37

that um certifications are not

play06:39

everything uh a degree is a great idea

play06:42

um now can you can you get started

play06:43

without a degree yes you can but let's

play06:46

let's take the mind of a 17-year-old

play06:48

right now who who by the way knows

play06:50

everything you know in their mind they

play06:53

believe they know everything uh but you

play06:54

really don't uh so here's what I suggest

play06:57

is that you start out um if you don't

play06:59

have the money start out at a community

play07:01

college you there are loans available

play07:03

for that if you do have the money and

play07:05

and the uh ability to get into a

play07:06

four-year college or university also a

play07:09

great way to go when you pick your uh

play07:13

your degree that you're going to go for

play07:15

uh what I suggest is you go for a fairly

play07:17

generic um you know it degree if if

play07:20

that's where you're headed and start out

play07:22

with the real basic classes the math the

play07:25

English you're going to remember it

play07:26

better anyway because you just finished

play07:27

high school right you you don't want to

play07:29

finish with math because that's four

play07:31

years later or two years later uh you

play07:32

want to start out with some of these

play07:34

non-it classes as many as you can take

play07:36

ahead of time let yourself start

play07:39

understanding the world a little better

play07:41

around you start networking with people

play07:44

and getting their opinions on things uh

play07:47

get you know professors opinions on

play07:49

things and then go ahead and start

play07:51

focusing on exactly what you want to do

play07:54

knowing what you want to do at 17 it's

play07:57

it's just almost impossible

play08:00

so after that then you can say okay I

play08:02

really like cyber secur I've been this

play08:03

for in for a couple of years I really

play08:05

like cyber security I'm going to finish

play08:07

my degree in cyber secure or or you know

play08:09

uh CIS admin work or programmer devops

play08:11

whatever it is that that you want to do

play08:14

um so can you just start out with

play08:16

certifications right out the door you

play08:17

can uh but you're going to find that

play08:19

your your options are limited you're

play08:21

going to get kind of pigeon hold into a

play08:23

specific area and if you don't like that

play08:26

area you might be in too deep to get out

play08:27

of it at that point might start getting

play08:29

bills you know things like that like oh

play08:31

I can't afford to quit my job now so uh

play08:34

uh yes you can absolutely get

play08:36

certifications to start with another

play08:38

interesting thing is getting

play08:40

certifications or taking classes uh that

play08:44

also offer certifications there's for

play08:46

instance a lot of CCNA uh certification

play08:49

classes A+ certification classes you

play08:51

know and other things like that not a

play08:52

lot of cyber security ones yet I have

play08:54

seen some cissp ones but that's a little

play08:56

bit tough to start out with that's

play08:58

that's sort of like the PHD of security

play08:59

I don't know if you want to start out

play09:00

with that ISC squared one quite yet but

play09:03

um if you can find some uh classes that

play09:06

also teach to the certificate or

play09:07

certification then then it's two for one

play09:11

yeah no totally now uh to that end I

play09:13

guess um I'm thinking here in terms of

play09:17

uh you know people who are just starting

play09:19

to sort of feel that out and they're

play09:20

like oh you know they they Tak a few

play09:21

computer science classes oh this is

play09:23

interesting and then they start

play09:24

realizing there's certain things I

play09:25

really like oh I like capturing the flag

play09:27

or you know I like securing Network or I

play09:30

like actually just watching my computer

play09:32

processes running to see how information

play09:34

is transported but like do you have any

play09:36

advice for taking the things you're

play09:38

interested specifically and and sort of

play09:41

moving them into kind of a a a path of

play09:44

of learning and action and and sort of

play09:46

career mapping yeah yeah you know this

play09:48

this is kind of how I started out so uh

play09:51

at the office where I was working they

play09:53

had a a Windows server that was being

play09:56

retired now this goes back a few years

play09:58

this is nt4 this wasn't even pre Windows

play10:00

2000 yeah well I Windows 2000 had been

play10:04

out but they were just retiring the nt4

play10:06

and uh so I said can I have this this is

play10:09

okay and uh they said sure So I I took

play10:11

it home and this thing was a beast it

play10:13

probably weighed 100 pounds back then

play10:15

you know it was it was it was a big old

play10:17

HP no compact it was a compact server

play10:21

and uh so I got this thing running and I

play10:24

set up my first DHCP server and I

play10:26

connected uh a computer to it and it got

play10:28

an IP address addess automatically my

play10:31

wife thought I was nuts but I

play10:32

practically jumped up and down I was so

play10:34

excited when you have that kind of

play10:36

excitement you know you're in the right

play10:39

place you're you're headed towards the

play10:40

right kind of career and those are the

play10:42

kinds of things that uh you know can get

play10:45

you started there's a lot of great great

play10:47

places I know that in the Portland area

play10:48

in Portland Oregon where I am uh they

play10:50

have a a free geek place and I'm sure

play10:53

other cities have similar things where

play10:55

you can go and you can work there for

play10:59

equipment so uh like you they teach you

play11:02

how to to repair computers they teach

play11:04

you how to do all different kinds of

play11:06

things on computers um and then you go

play11:08

to work for them as a volunteer and then

play11:11

you get equipment uh for your

play11:13

compensation you take that home you

play11:15

start playing with it you know and and

play11:17

get really excited about all the things

play11:19

you can do and I I love that kind of

play11:21

stuff um so the other thing you can do

play11:23

join computer clubs either in high

play11:26

school or college whichever you're in

play11:28

and if you're not in high school College

play11:30

vendor groups are a great idea uh vendor

play11:33

groups will get you into places where

play11:35

the vendors you know there like you know

play11:37

there's firewall vendor you know Palo

play11:38

Alto and Cisco and all these different

play11:40

places they have vendor groups in all

play11:42

the major cities if if you're fortunate

play11:43

enough to to be you know near them they

play11:45

will provide you with uh you know some a

play11:48

lot of times some free demo equipment

play11:50

some free software uh things like that

play11:53

and you can take that home and you can

play11:55

start your own projects as well um so

play11:58

you know lots of lots of really good you

play12:00

know uh ways that you can do that I I

play12:02

remember doing that uh you know early on

play12:04

with um you know one of the the firewall

play12:07

companies um you know that's uh not not

play12:10

a lot of people have are using anymore

play12:12

but um and and it was it was so great I

play12:15

got to talk to other people having the

play12:16

same problems that I was were was having

play12:18

you know in getting started in a career

play12:20

and uh you know those those folks really

play12:22

helped me out that's cool uh I've never

play12:24

heard that before either so yeah we're

play12:26

learn all kinds of stuff together now

play12:28

you had mentioned before you almost uh

play12:30

quoted one of my lines in here talking

play12:32

about getting your first job but uh you

play12:34

know so you know as speaking for

play12:37

listeners who are maybe ramping up their

play12:39

training now they're getting some

play12:40

experience they might have even landed a

play12:42

first job do you have any advice for

play12:44

helping them stay focused on their

play12:45

career road map and and pushing

play12:47

themselves into new learning new

play12:48

opportunities to keep growing so like

play12:50

you said it's really going to be easy

play12:52

you get your first job you start to have

play12:54

to pay bills work starts piling up your

play12:57

your day-to-day seems like it takes

play12:59

your entire day to get all your work

play13:01

done and then you're coming home and

play13:02

you're like I don't want to like study

play13:04

tonight like what how do you sort of

play13:05

keep how do you sort of keep yourself

play13:07

going so that you don't just sort of

play13:09

like drift into that same spot forever

play13:12

well you know that's this is a tough one

play13:13

for young people um it's it gets a

play13:15

little bit easier as you get older

play13:17

because you know you kind of settle down

play13:18

and your brain isn't quite as wired uh

play13:21

you know uh for the next uh quick thing

play13:24

but especially with people with

play13:25

disabilities like ADHD that's especially

play13:27

tough for those folks and I there's

play13:29

medications that can help and not

play13:30

everybody you know wants to do that

play13:32

because it makes them feel strange and

play13:33

stuff um so being a disciplined person

play13:36

is not easy it's not necessarily natural

play13:39

you know for us um it it takes a certain

play13:42

amount of security uh when I was earning

play13:44

my degrees um I had a business I had a

play13:47

wife and three kids and a lot of bills

play13:50

um so one of the things that I and

play13:52

there's there's a lot of different uh

play13:53

you know ways you can do this but let me

play13:55

just give you one way that I think works

play13:57

out great a lot of us play video games

play13:59

do you play video games Chris um in the

play14:02

arcade in the retro arcade now again I

play14:03

don't have oh you love the Retro I love

play14:05

that too yeah we got this place for 20

play14:08

bucks you go there and you play as long

play14:09

as you want same here yeah Galloping

play14:11

ghost out in Bowling yeah yeah in

play14:13

Brookfield oh that's so cool yeah so um

play14:17

what I use is is this risk or not risk

play14:19

but work reward system the work reward

play14:21

system basically goes like this is that

play14:24

you know you have your favorite video

play14:26

game in front of you right you may maybe

play14:28

play Playstation or Xbox or your know PC

play14:31

gaming that kind of thing and uh what I

play14:33

do is I say okay I'm going to read x

play14:35

amount of pages of my book or I'm going

play14:37

to do my lab I'm going to take this quiz

play14:41

and I'm going to reward myself you know

play14:43

by being able to play 30 minutes of of

play14:45

video games or or whatever it is that

play14:47

excites me what you know what I like to

play14:48

do and um then you go on to the next

play14:51

thing and so over the course of you know

play14:53

two or three hours you might find that

play14:56

you get all of the rewards that you need

play14:58

and at the same time you get um a lot of

play15:01

the work done as well it's like I said I

play15:03

understand it's not easy and it does

play15:05

take you know some maturity but this is

play15:07

this is a way that worked for me and

play15:09

maybe it'll work for you as well yeah no

play15:11

if we're talking about reward systems

play15:12

yeah for for mine the equivalent is get

play15:14

20 minutes of reading done and you can

play15:15

listen to an LP or you know an album or

play15:18

you know or whatever so yeah but um yeah

play15:21

and yeah I think the thing that I've

play15:22

notied too is when you when you get on a

play15:24

good role you're like well I freed 45

play15:26

minutes and I get 20 minutes for reward

play15:28

and 45 minutes and then at a certain

play15:29

point like you start skipping the

play15:31

rewards at a certain point you get so

play15:32

locked in that you're like let's just

play15:34

keep going you yeah which is good that's

play15:37

exactly where you want to get to you

play15:38

know you get into flow so um so yeah so

play15:41

one last question here uh Robert um if

play15:44

if um people want to you know if if

play15:47

listeners are are are logging into

play15:48

infosec skills today like what are some

play15:50

of the the skills paths that you've

play15:52

created that they can they can check out

play15:54

that are uh Robert McAn certified yeah

play15:57

there you go well if you haven't done so

play15:58

make sure you create your account in

play16:00

infos SEC and get your account started

play16:02

there is a free trial when you sign up

play16:04

and then you can start watching videos

play16:06

and taking Labs on various different

play16:07

subjects now here's what I suggest is do

play16:10

what excites you you're going to hate a

play16:12

career that pays you a lot of money that

play16:14

isn't interesting uh because as we

play16:16

mentioned before it it feels a little

play16:18

bit like you're in prison where you just

play16:20

you can't you can't get back out of it

play16:21

however um I have created some learning

play16:24

paths and um I started out with the uh

play16:27

Windows uh uh server 2019 and Windows 10

play16:30

I have since upgraded for Windows 11 and

play16:32

Windows Server 2022 um and it's all

play16:35

about securing those operating systems

play16:38

securing those operating systems uh not

play16:40

necessarily for homes you know it's not

play16:41

going to be the home version of Windows

play16:43

you know 10 or 11 it's going to be you

play16:45

know the professional the Enterprise

play16:47

versions you know how to secure them

play16:49

using group policy with active directory

play16:52

uh you know with all the built-in

play16:53

utilities as well as many third party

play16:55

utilities uh determine whether or not

play16:57

you've been comp rised your your servers

play17:00

have been compromised you know all those

play17:01

different things um are uh you know very

play17:04

important to you know most offices and

play17:07

and businesses and uh I think that

play17:09

people will get a lot out of them that's

play17:11

great uh well uh Professor Robert

play17:13

McMillan thank you for helping our loyal

play17:15

listeners on their path to their

play17:16

preferred type of security career so

play17:19

glad to be here Chris look forward to

play17:20

the next one all right and uh thank you

play17:22

all for watching this episode if you

play17:23

enjoyed this video and felt that it

play17:25

helped you uh please do share it out

play17:26

with your colleagues and on any forum

play17:29

that you're on and on your social media

play17:30

accounts the more people that know about

play17:32

us the more of this that we can do and

play17:34

of course please like this video And

play17:35

subscribe to our podcast you can just

play17:37

type in cyberwork infos SEC into YouTube

play17:40

uh and you will find all of our past

play17:41

episodes just like magic there so

play17:43

there's plenty more to come uh for

play17:44

Learners of all levels including more

play17:46

with Professor Robert McMillan so if you

play17:48

have any topics that you want us to

play17:49

cover just drop them in the comments

play17:50

below we're reading them all until then

play17:52

we will see you next time and Happy

play17:54

learning hey if you're worried about

play17:56

choosing the right cyber security career

play17:58

click here to see the 12 most in demand

play18:00

cyber security roles I ask experts

play18:02

working in the field how to get hired

play18:04

and how to do the work of these security

play18:05

roles so you can choose your study with

play18:07

confidence I'll see you there

Rate This

5.0 / 5 (0 votes)

الوسوم ذات الصلة
Cybersecurity CareerInfosec SkillsCareer RoadmapCertification AdviceProfessional DevelopmentEducational PathSecurity NovicesCompTIA CertificationsMicrosoft AzureOffensive SecurityCareer Growth
هل تحتاج إلى تلخيص باللغة الإنجليزية؟