If I Were to Start in Cyber Security, I'd Do This

Summary

In this video, cybersecurity expert Ben, known as theam sec, reflects on his 10-year journey in the field. He shares insights and advice for newcomers, emphasizing the importance of learning the basics, understanding both offensive and defensive cybersecurity, coding, and joining supportive communities. Ben also highlights the value of showcasing work, participating in CTFs, and pursuing project-based learning to advance one's career in cybersecurity.

Takeaways

• 😀 Ben, known as theam sec, has 10 years of experience in cybersecurity and shares his insights for those starting out.
• 🎓 Learning the basics of cybersecurity is crucial, including understanding computing, networking, and the internet.
• 🏫 Ben regrets not taking cybersecurity more seriously during his college days and recommends a structured learning program.
• 🔒 Understanding both offensive (red team) and defensive (blue team) cybersecurity roles can give a well-rounded perspective.
• 💻 Coding and scripting are valuable skills in cybersecurity, with coding offering an advantage in understanding developer mindsets.
• 🛠️ Practical experience, such as setting up web servers or developing applications, can provide an edge in cybersecurity careers.
• 📝 Showcasing work through GitHub, write-ups, or participating in CTFs can help network and demonstrate expertise.
• 🤝 Joining communities and networking is essential for support, learning, and collaboration in the cybersecurity field.
• 📚 Project-based learning is an effective way to gain knowledge and showcase the ability to build and learn actively.
• 🔍 Exploring the full spectrum of cybersecurity, including different roles and technologies, can open up diverse career paths.
• 📈 Ben emphasizes the importance of continuous learning and adaptation in the ever-evolving field of cybersecurity.

Q & A

What is the main theme of Ben's 10th-anniversary discussion in cybersecurity?

The main theme is reflecting on the lessons learned over the past decade in cybersecurity and sharing advice on what he would do differently if starting today.

Who is Ben, and what is his online persona known as?

Ben is a cybersecurity professional and public speaker, known online as theam sec. He is recognized as a hacker and bug bounty hunter who has hacked into major organizations like Airbnb, Snapchat, Apple, and the Department of Defense.

What does Ben consider as the foundation for anyone starting in cybersecurity?

Ben considers learning the basics, such as computing, networking, and the fundamentals of the internet, as the foundation for anyone starting in cybersecurity.

What does Ben recommend for those without a cybersecurity background to get started?

Ben recommends taking a postgraduate program in cybersecurity by Simply Learn, which covers a variety of topics and provides hands-on projects to build a strong foundation in cybersecurity.

Why does Ben emphasize the importance of understanding both offensive and defensive cybersecurity roles?

Understanding both sides helps in effective communication within organizations and gives an edge in one's work, whether in hacking or defending, by knowing the strategies and tools used by the opposing side.

What is Ben's stance on the necessity of coding skills in cybersecurity?

Ben believes that while coding is not strictly required for all cybersecurity roles, it is beneficial for career progression and gives an advantage, especially for those on the offensive side.

How does Ben suggest one can showcase their work in cybersecurity?

Ben suggests showcasing work through GitHub, participating in online CTFs, and engaging in bug bounty programs, which can be used for networking and demonstrating expertise.

What is the importance of joining communities in cybersecurity according to Ben?

Joining communities is crucial for networking, learning from others, finding support, and collaborating, which are all essential for personal and professional growth in cybersecurity.

What is Ben's advice on the breadth of knowledge one should have in cybersecurity?

Ben advises not to limit oneself to one area of cybersecurity but to explore different realms such as red team, blue team, and development to gain a comprehensive understanding.

How does Ben view project-based learning in the context of cybersecurity?

Ben sees project-based learning as an effective way to learn and showcase skills, actively demonstrate learning, and build a portfolio of work that can enhance one's resume.

What is the role of scripting and coding in advancing one's career in cybersecurity according to Ben?

Scripting can automate tasks and coding can be used to develop applications, both of which are valuable skills that can provide an advantage in understanding and exploiting systems in cybersecurity.