Creating a career roadmap for the cybersecurity beginner

Summary

In this episode of CyberWork Hacks, Professor Robert McMillan offers valuable advice for those beginning a career in cybersecurity. He discusses the importance of creating a career roadmap, bundling certifications, and the different paths in cybersecurity depending on the size of the company. He emphasizes the importance of starting with foundational certifications like Security Plus and suggests strategies for maintaining focus and motivation. Additionally, McMillan highlights the benefits of community involvement and vendor groups for hands-on experience. The episode aims to help novices navigate their career paths effectively and sustainably.

Takeaways

• 😀 Professor Robert McMillan provides advice for security novices on how to start their cybersecurity career.
• 🛣️ The script emphasizes the importance of creating a career roadmap early on in one's cybersecurity career.
• 📚 There is no universal roadmap for cybersecurity, unlike those available for certifications from companies like Microsoft or AWS.
• 📝 McMillan suggests bundling certifications such as A+, Net+, and Security+ from CompTIA for those interested in becoming a CIS admin.
• 🌐 For those starting in cybersecurity, he recommends beginning with the CompTIA Security Plus, Azure SC-100, and Offensive Security Pro (OSP) certifications.
• 🏢 It's noted that in smaller companies, one might have to be a 'jack of all trades', while larger companies may require more specialization.
• 🎓 A degree is suggested but not strictly necessary to start in cybersecurity; community college can be a good starting point.
• 🔍 The speaker highlights the value of joining computer clubs or vendor groups to gain experience and network with others in the field.
• 🎮 McMillan suggests a work-reward system, such as playing video games after completing study or work tasks, to maintain motivation and discipline.
• 📈 He also mentions the importance of specialization and continuous learning to grow within one's cybersecurity career.
• 📘 The transcript mentions resources like Certification Magazine (ctm mag.com) for insights into what employers are looking for in IT and cybersecurity roles.

Q & A

What is the purpose of the 'cyberwork hacks' podcast?

The 'cyberwork hacks' podcast aims to provide a quick, clear, and actionable solution or new insight on how to utilize infosec products and training to achieve work and career goals, specifically focusing on questions asked by cybersecurity novices.

What does Professor Robert McMillan suggest as a starting point for someone new to cybersecurity?

Professor Robert McMillan suggests starting with the CompTIA Security Plus certification, as it is a good foundation for those new to cybersecurity, and then considering additional certifications like Azure SC-100 and Offensive Security Pro (OSP).

Why does Professor McMillan recommend not focusing solely on certifications at the beginning of a cybersecurity career?

He advises against focusing solely on certifications because they can limit one's options and pigeonhole individuals into a specific area. It's better to have a broader understanding and then decide on a specialization.

What is the significance of a career roadmap in cybersecurity according to the podcast?

A career roadmap in cybersecurity is important for helping individuals understand the various paths and certifications that can lead to their desired career goals, and it helps in planning their education and professional development.

How does Professor McMillan describe the difference between the roles of a CIS admin in a small company versus a large organization?

In a small company, a CIS admin might be responsible for a wide range of tasks, including security, whereas in a large organization, the role is more specialized, and there might be separate cybersecurity teams that do not even interact with the CIS admin team to avoid conflicts.

What advice does Professor McMillan give for high school students or those opting to skip college and enter the workforce faster?

He suggests starting at a community college or a four-year college if possible, taking generic IT and non-IT classes initially, and then focusing on a specific area of interest after gaining some understanding of the field and what they enjoy.

What is the role of vendor groups in helping someone start their cybersecurity career?

Vendor groups can provide access to free demo equipment and software, offer networking opportunities, and give insights into the latest technologies and industry practices, which can be valuable for starting and advancing a cybersecurity career.

What method does Professor McMillan propose to help stay focused on career development while managing a full-time job?

He suggests a work-reward system where one sets goals for studying or working on career development tasks and then rewards themselves with something they enjoy, like playing video games, after completing the tasks.

Why is it important to choose a cybersecurity career path that excites you, according to Professor McMillan?

Choosing a career path that excites you is crucial because it leads to greater job satisfaction and motivation. A high-paying career that isn't interesting can feel like a prison, making it difficult to stay motivated and engaged.

What resources does Professor McMillan recommend for individuals looking to enhance their cybersecurity skills?

He recommends using resources like infosec skills, where he has created learning paths for securing operating systems like Windows Server 2019 and Windows 10, and also suggests joining computer clubs and vendor groups for hands-on experience and networking.