How I Would Learn Cyber Security If I Could Start Over in 2024 (6 Month Plan)

UnixGuy | Cyber Security
14 Jun 202419:16

Summary

TLDRThis video script offers a strategic guide for aspiring cybersecurity professionals to land a job in just six months, even without prior experience. It emphasizes building a strong resume, acquiring hands-on skills through platforms like Google's Cybersecurity Search, and broadening knowledge with GRC Mastery. The speaker advises viewers to apply consistently to jobs, engage in virtual internships, and attend cybersecurity events for networking—all while maintaining a balance between learning and enjoying the journey.

Takeaways

  • 🚀 Start with the Google Cyber Security Search for beginners with zero IT knowledge to get hands-on practice with Linux, Python, and MySQL.
  • 📚 Skip CompTIA Security Plus for now to focus on gaining practical skills that are in demand for cybersecurity jobs.
  • 💼 Create a professional resume to showcase your skills and training, which is crucial for standing out to hiring managers.
  • 🔍 Apply to cybersecurity jobs early and consistently to build confidence and learn the job market, even if you feel unprepared.
  • 🌐 Utilize LinkedIn and other job platforms popular in your country to search and apply for cybersecurity positions daily.
  • 👨‍🏫 Become a generalist by gaining a broad set of skills to qualify for a wide range of cybersecurity jobs, especially in small to medium-sized organizations.
  • 📈 Enroll in GRC Mastery to acquire practical skills in governance, risk, and compliance, which are essential for a cybersecurity career.
  • 📝 Complete the Capstone project in GRC Mastery to add a practical project to your resume, demonstrating your hands-on abilities.
  • 🛠️ Participate in free training like the Qualys Vulnerability Management course to familiarize yourself with industry tools.
  • 📚 Take beginner-friendly courses from platforms like TryHackMe to build practical skills in security analysis and incident response.
  • 🏢 Engage in virtual internships offered by major companies to gain experience and add projects to your resume without cost.
  • 🎓 Pursue intermediate level training in the final stages of your job search to deepen your expertise and increase your chances of landing a job.

Q & A

  • What is the main goal of the video?

    -The main goal of the video is to demonstrate a step-by-step plan for landing a cybersecurity job in 6 months, even without prior experience, degrees, or certifications.

  • What is the first step recommended in the video for someone starting with zero IT knowledge?

    -The first step is to take the Google Cyber Security course, which provides a foundation in cybersecurity and hands-on practice with Linux, Python, and MySQL.

  • Why is it suggested to skip the CompTIA Security Plus initially?

    -The CompTIA Security Plus is a beginner-level theoretical course. The focus should be on gaining hands-on skills that are in demand for cybersecurity jobs, which can be acquired later once foundational skills are established.

  • What is the importance of creating a resume early in the process?

    -Creating a resume early helps to showcase skills and training, making it clear to hiring managers that the candidate is serious about a career in cybersecurity.

  • How should the job experience section in a resume be structured according to the video?

    -The job experience section should list only the tasks and skills relevant to a cybersecurity job, even if they represent a small percentage of the actual work done in previous roles.

  • What is the significance of applying to cybersecurity jobs early in the learning process?

    -Applying early helps to build confidence, understand what companies are looking for, and learn to play the numbers game, increasing the chances of landing an interview.

  • Why is it recommended to become a generalist in cybersecurity initially?

    -Becoming a generalist allows a candidate to qualify for a wider range of cybersecurity jobs, especially in small to medium-sized organizations that require a broader skill set.

  • What does GRC Mastery offer that makes it a valuable resource in the learning process?

    -GRC Mastery offers practical skills in governance, risk, and compliance, with a focus on what the job market is asking for, including a Capstone project that can be added to a resume.

  • How does the video suggest incorporating the skills gained from GRC Mastery into a resume?

    -The skills and the Capstone project completed in GRC Mastery should be added to the resume under a 'practical projects' section, demonstrating hands-on experience.

  • What is the role of virtual internships in the job search process described in the video?

    -Virtual internships provide free mini-projects that can be completed and added to a resume, showcasing practical experience and making the candidate more attractive to employers.

  • Why is it important to continue applying to jobs while taking intermediate level training courses?

    -Continuing to apply to jobs while training ensures that the candidate stays proactive in the job market, updating their resume with new skills and increasing the chances of landing a job.

  • What is the bonus step suggested in the video for enhancing the learning experience?

    -The bonus step is to have fun and enjoy the journey by attending cybersecurity events and conferences, which can provide networking opportunities and additional learning experiences.

Outlines

00:00

🛠️ Building a Cyber Security Resume from Scratch

The speaker outlines a plan to secure a cyber security job within six months, starting with no experience. They propose creating a strong resume and portfolio, and offer a free resume template. The video promises to guide viewers through the resume-building process, emphasizing the importance of hands-on skills over degrees. The speaker reflects on the evolution of cyber security learning, highlighting the abundance of accessible online courses and labs that simplify the learning process. They also address the challenge of information overload and commit to showing a clear starting path.

05:00

🔒 Starting with the Google Cyber Security Search

The second paragraph focuses on the initial step of the six-month plan: the Google Cyber Security Search. This course is recommended for beginners to gain hands-on experience with Linux, Python, and MySQL. The speaker suggests that while certifications like CompTIA Security Plus or ISC2 CC are valuable, they are not essential for immediate job placement. The paragraph underscores the importance of practical skills and obtaining a discount for CompTIA Security Plus upon completion of the Google course.

10:02

📝 Crafting a Targeted Cyber Security Resume

This paragraph delves into the importance of resume creation, warning against treating it as an afterthought. The speaker provides a free cyber security resume template and instructs viewers on how to tailor it to their experiences and goals. They emphasize the need to highlight relevant skills and training, and to avoid listing every task from previous jobs unless they pertain to cyber security. The speaker also advises starting to apply for jobs immediately after completing the Google Cyber Security Search.

15:03

🌐 Applying to Cyber Security Jobs Widely

The speaker encourages viewers to apply to cyber security jobs daily, using platforms like LinkedIn and other local job sites. They discuss the difference between job requirements at big and small companies, suggesting that a broad set of skills is beneficial for job applications. The paragraph introduces the concept of becoming a 'generalist' to maximize job qualifications and discusses the importance of understanding the job market's needs for various specializations.

🛡️ Becoming a Generalist with GRC Mastery

The fourth paragraph introduces GRC (Governance, Risk, and Compliance) skills as a way to become a generalist in cyber security. The speaker recommends GRC Mastery, a course designed to provide practical skills demanded by the job market. They detail the course's structure, including practical assessments and a Capstone project, which can be added to the resume. The goal is to make the resume more attractive to potential employers by showcasing a broad skill set.

🚀 Advancing with Practical Training and Virtual Internships

The speaker suggests taking intermediate-level practical training courses like those from TryHackMe and participating in virtual internships offered by major companies. These experiences not only enhance the resume but also provide practical skills and confidence for job interviews. The paragraph also touches on the importance of applying for jobs consistently while undergoing training to increase the chances of landing a cyber security position.

🎉 Enjoying the Journey to Cyber Security Career

In the final paragraph, the speaker emphasizes the importance of enjoying the learning process and not being overly stressed. They recommend attending cyber security events and conferences to network and meet others in the field, which can be both enjoyable and beneficial for job prospects. The paragraph concludes by encouraging viewers to have fun and treat the learning journey as an important mission that can change their lives.

Mindmap

Keywords

💡Cyber Security

Cyber Security refers to the practice of protecting internet-connected systems, including hardware, software, and data, from theft, damage, or unauthorized access. In the video's theme, it is the central focus, as the speaker aims to guide viewers on how to land a job in this field within six months. The script mentions building a cyber security resume and acquiring hands-on skills relevant to this domain.

💡Resume

A resume is a document used by individuals to present their relevant skills, experiences, and education to potential employers. In the context of the video, the speaker emphasizes the importance of creating a professional resume to showcase one's cyber security skills and training, illustrating this with the creation of a cyber security resume from scratch.

💡Google Cyber Security Search

Google Cyber Security Search is a training program designed for beginners in the field of cyber security. The video script positions it as an ideal starting point for someone with no IT knowledge, providing hands-on practice with Linux, Python, and MySQL, which are essential skills for landing a cyber security job.

💡CompTIA Security Plus

CompTIA Security Plus is an entry-level certification for IT professionals seeking to validate their knowledge in cyber security. The script suggests that while this certification can be beneficial, it is not the primary focus for someone aiming to quickly land a job in cyber security, as it is more theoretical than hands-on.

💡ISC2 CC

ISC2 Certified Cloud Security Professional (CCSP) is a certification for professionals who have expertise in cloud security. Although not explicitly detailed in the script, it is mentioned alongside CompTIA Security Plus as an existing certification that could potentially allow someone to skip the Google Cyber Security Search.

💡Microsoft Cyber Security Analyst

This refers to a role or certification related to Microsoft's approach to cyber security. The script does not elaborate on this term, but it is listed as an alternative to the Google Cyber Security Search for those who already have some form of cyber security training or certification.

💡GRC Mastery

GRC Mastery is a course mentioned in the script that focuses on Governance, Risk, and Compliance (GRC), which are critical areas within cyber security. The course aims to provide practical skills that are in demand in the job market, with a capstone project that can be added to one's resume to demonstrate hands-on experience.

💡Vulnerability Management

Vulnerability Management is the process of identifying, assessing, and mitigating vulnerabilities in systems. The script recommends a free training from Qualys to gain practical experience with vulnerability scanners, an important tool in this process, and advises adding this training to one's resume.

💡TryHackMe

TryHackMe is an online platform for learning cyber security through interactive and practical challenges. The video script highlights it as a beginner-friendly resource for gaining practical skills quickly, specifically mentioning the SOC course, which prepares individuals for roles in security operations.

💡Virtual Internships

Virtual Internships are free mini-projects offered by major companies that can be completed remotely and added to one's resume. The script encourages viewers to take advantage of these opportunities to gain experience and enhance their resume, which is crucial for job applications in the cyber security field.

💡Bsides

Bsides is a community-driven framework for building events around local communities. It is mentioned in the script as a source for cyber security events and conferences that can be attended to network and potentially find job opportunities, emphasizing the importance of community engagement in career development.

Highlights

A six-month plan to land a cybersecurity job without prior experience, degrees, or IT background is presented.

Building a cybersecurity resume from scratch with a portfolio of projects is discussed.

A free resume template for cybersecurity is offered for download.

The importance of hands-on skills over degrees in cybersecurity is emphasized.

Google's Cyber Security Search is recommended as a starting point for beginners.

CompTIA Security Plus and other certifications are suggested for foundational knowledge.

The necessity of creating a professional resume to showcase skills and training is highlighted.

A strategy for tailoring a resume to include relevant job experience and skills is provided.

The recommendation to start applying for cybersecurity jobs after completing the Google Cyber Security Search is made.

The concept of becoming a generalist to qualify for a broad range of cybersecurity jobs is introduced.

GRC Mastery is endorsed as a course for gaining practical skills in governance, risk, and compliance.

The importance of adding practical projects to a resume for a stronger job application is discussed.

Qualys vulnerability management training is suggested to gain experience with industry tools.

TryHackMe's SOC course is recommended for developing skills in security operations.

Virtual internships from major companies are presented as a way to gain experience and enhance resumes.

Intermediate level training courses are advised for the final phase of the job preparation journey.

The encouragement to enjoy the learning process and attend cybersecurity events for networking is given.

Transcripts

play00:00

this is the most important cyber

play00:02

security video that you will watch

play00:04

because I will show you exactly how I

play00:06

would land the cyber security job in 6

play00:09

months if I had to start over without

play00:11

any Sears or degrees or any it

play00:14

experience I will show you how to build

play00:16

a saber security resume from scratch

play00:18

with a projects portfolio like this and

play00:21

I will even give you that resume to

play00:23

download for free so make sure you watch

play00:25

the video to the end because we will

play00:27

build it together in a way that will

play00:29

make you stand out to hiring managers

play00:31

now I've been in the cyber security

play00:33

industry for over two decades but so

play00:36

much has changed since then and if I'm

play00:38

honest with you learning cyber security

play00:40

has never been more accessible than it

play00:42

is today you don't need overpriced

play00:44

degrees and you don't need to go to

play00:46

obscure internet forums and beg people

play00:49

for information like we did I even had

play00:51

to read hundreds of pages of Unix

play00:53

manuals just to get a tiny piece of

play00:56

information but fast forward to today

play00:58

and you have an abundance of training

play01:00

courses with Hands-On practical Labs

play01:02

that cover pretty much everything that

play01:04

you need to learn a cyber security job

play01:07

and you can do it all from home from

play01:08

your laptop but this comes with a

play01:10

challenge as the amount of information

play01:12

available online can be overwhelming

play01:15

it's really hard to know where to start

play01:17

so let me show you how so let's imagine

play01:19

that I don't have any it knowledge and

play01:21

I'm starting from the absolute zero and

play01:23

I only have 6 months to land a job so I

play01:26

will follow five steps that if

play01:29

implemented correctly correctly will not

play01:30

only give you a cyber security job in 6

play01:33

months but it will also help you to

play01:35

level up as a professional you will

play01:37

stand out and you'll always have job

play01:39

opportunities coming your way even in

play01:42

times of recessions and layoffs starting

play01:44

with step number one foundation so if I

play01:47

had zero technical knowledge while I'm

play01:49

watching this video then this means I

play01:51

know how to turn on a computer therefore

play01:54

the best starting point for me will be

play01:56

the Google cyber security search it's a

play01:58

perfect start for someone with zero it

play02:00

knowledge it will ease you in the

play02:02

industry but more importantly it will

play02:04

give you Hands-On practice with Linux

play02:07

Python and MySQL and having Hands-On

play02:09

skills is key to Landing your first

play02:12

cyber security job now I'm starting from

play02:14

scratch so I don't have any

play02:16

certifications but if you've done the

play02:18

compa Security Plus or isc2 Cc or the

play02:22

Microsoft saber security analyst set you

play02:25

can technically skip the Google cyber

play02:27

security set but in my opinion it's

play02:29

worth doing it will take you about a

play02:31

month or so give or take depending on

play02:33

how fast you learn but if you've done

play02:36

other stuff before then you'll finish it

play02:38

even faster there is honestly no

play02:40

downside to doing this the Google cyber

play02:42

security search so just get it done I'll

play02:44

leave a link to it in the description

play02:46

box below and by the way when you finish

play02:48

it you get a 30% discount code to do the

play02:51

comps Security Plus which I definitely

play02:53

think you should take advantage of but

play02:55

if I want to landar a job in 6 months

play02:57

then I will personally skip the security

play03:00

Plus for now the Security Plus is a

play03:02

beginner level theoretical set it's good

play03:05

it will introduce you to some Concepts

play03:07

but if the goal is to learn the job as

play03:09

fast as possible then your focus should

play03:11

be on gaming Hands-On skills that the

play03:14

jobs are asking for once you build some

play03:16

solid Hands-On skills then you can come

play03:19

back later and do the security plus if

play03:21

you really want to and it will make so

play03:23

much more sense because you'll actually

play03:25

understand the things that you're

play03:26

reading because you've done them in a

play03:28

lab remember which trying to land cyber

play03:30

security job our goal is not to spend 2

play03:32

years building Foundation of multiple

play03:34

choice exams the goal is to land the

play03:37

cyber security job in 6 months and we're

play03:39

trying to go straight to cyber security

play03:41

we're not trying to land the help desk

play03:42

job but without the next step you might

play03:45

be neglecting one of the most important

play03:47

aspects of Landing a cyber security job

play03:50

which is Step number two creating a

play03:52

resume or a CV I've seen this a lot I

play03:54

see candidates who clearly have spent

play03:57

time and money doing training and

play03:59

certification they've studied hard but

play04:01

when it come to creating a resume they

play04:03

treat it like an afterthought they

play04:05

literally spend 5 minutes on it now let

play04:07

me tell you a secret people out there

play04:09

hiring managers and Company they can't

play04:12

know how amazing you are unless you let

play04:14

them know you need to Showcase your

play04:16

skills and you need to showcase the

play04:18

training that you've done and you need

play04:19

to put it in a professional way in a

play04:21

resume this is the only way that

play04:24

companies and hiring managers will know

play04:26

that you're serious about your career in

play04:28

cyber security now because of I'm

play04:29

starting from zero I don't even know

play04:31

what a resume or a CV is but thankfully

play04:34

Unix guy from the future has created a

play04:37

free cyber security resume specially for

play04:39

you I'll put a link to it in the

play04:41

description box below but before you

play04:43

download it please make sure that you

play04:44

watch this video till the end because we

play04:46

will be building it together I will

play04:49

teach you how to edit that resume so you

play04:51

can tailor it to your own goals and

play04:53

using your own experience and training

play04:56

now the resume as it is it's really

play04:58

simple it will only have the gole cyber

play05:00

security se but I would personally add

play05:02

one line to mention the labs that are

play05:04

included in the certificate this way if

play05:06

someone doesn't know the content of the

play05:08

certificate you let them know that

play05:10

you've had some practice with these

play05:11

tools now under the experience section

play05:14

for me it says receptionist because this

play05:16

is the work that I've done before I

play05:18

worked in cyber security for you this

play05:20

will be something completely different

play05:22

but what I want you to notice is under

play05:24

receptionist I didn't list each and

play05:26

every task that I've done as a

play05:28

receptionist instead

play05:30

I only added things that are relevant to

play05:32

my goal job so anything that's relevant

play05:35

to a cyber security job and that could

play05:37

be interpersonal skills or communication

play05:40

skills or even simple work on the it

play05:42

system the purpose of the job experience

play05:44

section is not to list everything that

play05:46

you've done in your current job but to

play05:49

list the things that are relevant to

play05:50

your go job even if those things are 10%

play05:54

of what you did in your current job this

play05:55

is key this is a mistake I see over and

play05:58

over especially from from people who

play06:00

trying to change career for example if

play06:02

someone has been working as a nurse for

play06:04

the last 10 years then don't add each

play06:06

and every detail about your nursing jobs

play06:09

instead just say that you worked as a

play06:11

nurse for 10 years list the names of the

play06:14

hospitals that you worked at and

play06:15

highlight your communication skills your

play06:17

patient care skills and even any work

play06:20

that you've done on the nursing it

play06:22

system for example this way we keep our

play06:24

resume brief but it's also highly

play06:27

targeted to a cyber security job but the

play06:29

real question is when should I start

play06:31

applying to cyber security jobs and the

play06:33

answer is now is the time even if I

play06:36

don't feel that I have the confidence to

play06:38

apply to cyber security jobs I

play06:40

absolutely must start applying to cyber

play06:43

security jobs so the right time is after

play06:46

you finish the Google cyber security SE

play06:48

now can I get a job with only the Google

play06:50

cyber security SE the answer is yes it's

play06:53

possible but probably not there are few

play06:56

people in my Discord who landed the job

play06:58

with only the Google security Ser but

play07:00

they are the exception not the norm this

play07:03

person right here on the screen is the

play07:05

most recent one now the reality is yes

play07:07

it's really hard to land a cyber

play07:09

security job only with the Google cyber

play07:11

security search but the point of

play07:13

applying to cyber security jobs is for

play07:15

you to start building your own

play07:17

confidence it's for you to hopefully be

play07:19

in an interview setting where you get to

play07:21

learn what companies are asking for but

play07:23

more importantly is for you to learn how

play07:26

to play the numbers game if you have two

play07:28

people with the exact same

play07:29

qualifications and the exact same resume

play07:31

one of them applies to three jobs whilst

play07:34

the other person applies to 300 jobs who

play07:36

do you think will have a higher

play07:38

likelihood of Landing an interview the

play07:40

person who applied for three jobs got

play07:42

rejected then went then went on to

play07:44

Reddit to complain about how the market

play07:46

is so rough or the person who applied to

play07:48

300 jobs and and continue their studying

play07:52

Journey anyway therefore if I want to

play07:54

landar a cyber security jobs in 6 months

play07:56

or less I need to start applying to

play07:58

cyber sec commity jobs every single day

play08:01

I should spend 30 minutes every day you

play08:03

don't need to spend any longer and just

play08:05

make it a habit of searching and

play08:07

applying to cyber security jobs this is

play08:09

how I want you to search for cyber

play08:11

security jobs go to LinkedIn and filter

play08:14

for the word cyber then filter for the

play08:16

city that you live in and search for

play08:18

jobs and apply now depending on where

play08:20

you live there might be certain website

play08:22

that are applicable for you locally for

play08:24

example in the US there is Monster

play08:27

indeed and dice whil in Australia we

play08:30

have se but LinkedIn is universal so no

play08:32

matter where you live chances are cyber

play08:34

security jobs are also advertised in

play08:36

LinkedIn so I recommend you use LinkedIn

play08:39

plus whatever is popular in your country

play08:42

now when you apply to cyber security

play08:43

jobs for the first time you will notice

play08:45

something confusing some jobs want you

play08:48

to be an ethical hacker whereas other

play08:50

jobs want you to conduct cyber security

play08:52

risk assessment both are completely

play08:54

different skill sets you will see that

play08:56

jobs are asking for a wide spectrum of

play08:59

skills and different specializations so

play09:01

how do we solve this problem should we

play09:04

specialize early on or should we try and

play09:06

learn everything at the same time well

play09:08

this my friend is one of the biggest

play09:10

problems that you will face as you're

play09:12

trying to land your first cyber security

play09:14

job but the next tactic will make all

play09:16

the difference and it will solve this

play09:18

problem for you which is Step number

play09:20

three become a generalist the idea is to

play09:23

cast a wide net meaning gain a broad set

play09:27

of skills so you can qualify for for the

play09:29

maximum number of cyber security jobs

play09:32

advertised but to really understand why

play09:34

I want you to understand the difference

play09:36

between small and big companies from my

play09:38

experience in cyber security Consulting

play09:40

where I work with both small and large

play09:43

organizations the main difference that I

play09:45

see is this big companies usually need

play09:48

to hire individuals who are highly

play09:50

specialized for example they may have

play09:52

someone who specializes in application

play09:54

security and perhaps they'll have one

play09:56

individual or a group of individuals who

play09:59

only do incident response or only do

play10:02

threat management or they only

play10:03

specialize in spun whereas small to

play10:06

mediumsized organizations they can't

play10:08

afford this luxury so usually they need

play10:10

to hire one person who can do so many

play10:13

things so they want that person to be

play10:14

able to do cyber security risk

play10:16

assessments read vulnerability

play10:18

management reports analyze and respond

play10:20

to fishing attacks and at least be able

play10:22

to interpret penetration testing reports

play10:25

this is very common in the industry

play10:26

therefore if I wanted to get a cyber

play10:28

security jobs in 6 months or less I need

play10:31

to maximize the number of jobs that I

play10:33

can qualify for I will aim to First be a

play10:36

generalist learn a little bit about

play10:38

everything and then later specialize and

play10:40

go deep in one or two areas and you can

play10:43

always specialize after you learn your

play10:45

first cyber security job now the way to

play10:47

become a generalist is definitely not by

play10:50

collecting multiple choice based

play10:51

certifications and exams instead if you

play10:54

want to be a top 1% candidate you'll

play10:56

need to differentiate Yourself by adding

play10:59

broad spectrum of practical skills that

play11:01

are applicable to so many different jobs

play11:04

to do that we will need to add

play11:05

non-technical cyber security skills

play11:08

which we collectively refer to as GRC

play11:11

GRC stands for governance risk and

play11:13

compliance and for GRC you don't need to

play11:16

look further than GRC Mastery I designed

play11:19

it in such a way that the course will

play11:20

give you the practical skills that the

play11:22

job market is asking for without any

play11:25

fluff or any nonsense I looked at the

play11:27

training courses available in the market

play11:29

and I found that they didn't really

play11:31

teach you what the job market is asking

play11:33

for so I solved this problem for you in

play11:35

GC Mastery the course has each module in

play11:38

the course has a practical assessment

play11:41

but more importantly at the end of the

play11:42

course there is a large Capstone project

play11:45

that you can add to your resume as you

play11:46

build up your portfolio now GRC Mastery

play11:49

on average will take you a month and a

play11:51

half to 2 months to finish just a caveat

play11:54

with GC Mastery you're meant to watch

play11:56

the videos at least two times and you're

play11:58

meant to take notes because a lot of the

play12:00

topics will be new to you and the idea

play12:02

is not to finish it as fast as possible

play12:04

but to absorb the knowledge in the

play12:06

course so you can be confident in an

play12:08

interview setting and you can

play12:10

demonstrate your knowledge to hiring

play12:12

managers I talked about GC Mastery in

play12:14

detail in this video where I did a deep

play12:16

dive on each module so please check it

play12:18

out now this is how I will add the

play12:21

skills that I gained from GC Mastery to

play12:23

the resume and suddenly our resume looks

play12:26

so much better and we can qualify for so

play12:28

many more jobs now because GC Mastery

play12:31

has a Capstone project so I will add a

play12:33

section in the resume called practical

play12:35

projects and I'll add one bullet points

play12:38

describing the Capstone practical

play12:40

project that I did in GC Mastery now I

play12:43

know some people like to add their

play12:45

practical portfolio or projects to

play12:47

GitHub you can definitely do that I

play12:50

personally don't do it I think GitHub is

play12:52

more appropriate for professionals who

play12:54

do coding and programming for a living

play12:57

for cyber security not so much I only

play12:59

recommend it to people who do

play13:02

programming within cyber security or who

play13:04

created specific coding programming

play13:06

tools that are used for cyber security

play13:09

so we can skip GitHub for now now I will

play13:11

continue to apply to jobs for at least

play13:14

30 minutes every day and some of you

play13:16

will definitely find the job at this

play13:18

point we will be 2 and 1 half months to

play13:20

3 months into our journey now assuming

play13:22

you haven't found a job yet the next

play13:24

skill that I want to add to our resume

play13:27

is vulnerability management there are

play13:29

tools in the industry that we refer to

play13:31

as vulnerability scanners they they scan

play13:33

systems to try and find weaknesses and

play13:35

they will generate a report that details

play13:38

those weaknesses so the IT team can fix

play13:40

those vulnerabilities now in GRC Mastery

play13:43

you will actually know what

play13:44

vulnerability management is and when and

play13:47

why we perform it but this particular

play13:49

free training from qualis will show you

play13:51

how to use qualis which is a really

play13:53

prominent tool that we use in the

play13:55

industry so this will give you a chance

play13:57

to practice with the tool for free you

play13:59

can finish this training in 1 week or 2

play14:01

weeks maximum now there are more free

play14:03

training courses from qualus you can do

play14:05

them later but if my goal is to land the

play14:08

job as fast as possible I will skip them

play14:10

for now and this is how I will add the

play14:12

qualus training to the resume it will

play14:14

just be one simple line item that says

play14:16

that I finished qual vulnerability

play14:18

Management training a common mistake

play14:20

that I see is people add the training

play14:23

but then they create another section

play14:24

they call it skills and they copy paste

play14:26

the same thing so they have

play14:28

vulnerability management and then

play14:29

vulnerability management again as a

play14:30

skill I personally don't recommend that

play14:33

we need to be strategic about how we use

play14:35

space in our resume if you mention it

play14:37

once you don't need to repeat it at this

play14:39

point we're halfway through our journey

play14:41

we're 3 months in and chances are some

play14:44

of you will landar the cyber security

play14:45

job at this point things will start to

play14:48

look a lot clearer but to build even

play14:50

more confidence so we can smash that

play14:52

first interiew the next training course

play14:54

that we will do is from try hack me

play14:56

there are so many other training

play14:58

platforms out there but the reason why I

play15:00

picked try hackme is because it's really

play15:02

beginner friendly and it can get you

play15:04

those skills that we want really fast

play15:07

the first course that I want you to do

play15:08

from tryhackme is the sock one course

play15:11

this will give you the practical skills

play15:13

that will enable you to work as a

play15:15

security analyst in a security Operation

play15:17

Center or even as a generalist you will

play15:20

learn how to analyze security incidents

play15:22

and how to respond to them this course

play15:24

will take you one or 2 months it depends

play15:26

on how fast you learn which means you

play15:28

will be 4 months in your journey now in

play15:30

the next step we will take a little bit

play15:32

of a break from doing certifications but

play15:35

we will add even more practical work to

play15:38

our resume which is Step number four

play15:40

virtual internships those are free mini

play15:43

projects available to you that you can

play15:45

do and you can add to your resume and

play15:47

they are from some of the biggest

play15:49

companies in the world and the crazy

play15:50

thing is they are completely free you

play15:52

have no reason not to do all of them

play15:55

there are a total of nine virtual

play15:57

internships each one of them will take

play15:59

you 1 to 2 hours in total it will take

play16:02

you 20 hours to finish but the good

play16:04

thing about them is that a lot of these

play16:06

topics will be like a review for you

play16:08

you'll find that you've learned most of

play16:10

these topics in GC Mastery and in try

play16:13

hack me stock one now the forage will

play16:15

also teach you how to add those virtual

play16:17

internships to your resume I'll leave a

play16:19

link to this in the description box

play16:21

below I will not do this for you because

play16:23

I want you to learn how to do it

play16:25

yourself so you can have that skills of

play16:27

creating and modifying resumes now the

play16:29

next step in my opinion is where the

play16:32

real fun begins which is Step number

play16:34

five intermediate level training you're

play16:37

in the final month or two of your

play16:38

journey and this is where things will

play16:40

get a lot more serious we need to pick

play16:43

an intermediate level Hands-On practical

play16:45

training and we need to do it as we do

play16:48

it we should continue to apply to jobs

play16:50

the idea is as you do training you apply

play16:53

to jobs you finish that training you

play16:54

update your resume you apply to more

play16:56

jobs if you learn the job fantastic

play16:59

you've reached your goal if not then you

play17:00

need to pick another certification do it

play17:03

apply for jobs again rinse and repeat

play17:06

until you reach your goal this way it's

play17:08

really impossible to fail if you do

play17:10

these courses if you put in the time if

play17:13

you actually apply to jobs consistently

play17:15

there is no reason why you can't reach

play17:17

your goal now the courses that I

play17:19

recommend in no particular order are

play17:21

from try hack me you can do the Cyber

play17:24

defense course or the sock2 course or

play17:27

you can do hack the Box CD SA or Blue

play17:30

Team level one these are all great pick

play17:32

one run with it apply to jobs if you

play17:34

reach your goal great if not rinse and

play17:36

repeat until you reach your goal there

play17:38

are other courses that are also great

play17:40

like from let's defend and cyber

play17:42

Defenders they all touch on the same

play17:44

topics so pick the one that you like and

play17:46

run with it and run with it until you

play17:49

reach your goal now if you reach this

play17:50

far in this video then there is a bonus

play17:53

step for you and in my opinion it will

play17:55

make all the difference for your journey

play17:57

as cheesy as it may sound but it's

play17:59

really important to have fun and enjoy

play18:02

the journey I don't want you to be

play18:04

constantly stressed out as you study

play18:06

this is not the goal here the goal is

play18:07

for you to treat this like a mission a

play18:10

really important mission that your life

play18:12

depend on because at the end of this

play18:13

Mission you will change your life and

play18:15

there is no reason why this Mission

play18:17

can't be fun now a great way to have fun

play18:19

in this journey is to try and go to

play18:22

cyber security events and meet to cyber

play18:24

security events and conferences you

play18:26

don't need to go to expensive ones you

play18:28

can simply Go to meetup.com and search

play18:31

for cyber security events in your area I

play18:34

also recommend you go to Google and you

play18:36

type bides and then the name of your

play18:38

city bides is a cyber security

play18:41

conference that's usually cheap I highly

play18:43

recommend that you go to these

play18:44

conferences because it's a good chance

play18:47

for you to meet other people who are on

play18:49

a similar Journey but you never know you

play18:51

might get a job from these events in

play18:53

fact one of our Discord members landed

play18:56

her first cyber security job through

play18:59

someone she met in a bsides event so

play19:01

this could be you now if you want a deep

play19:04

dive into GC Mastery which is an

play19:06

essential part of this plan then please

play19:09

go and watch this video because I broke

play19:11

down each module of GRC Mastery in

play19:14

detail and I'll see you there

Rate This

5.0 / 5 (0 votes)

Etiquetas Relacionadas
Cyber SecurityResume BuildingHands-OnCareer PathSkill DevelopmentJob MarketTraining CoursesCertificationsProfessional GrowthCareer Change
¿Necesitas un resumen en inglés?