10 Reasons Why It’s So Hard To Get Into Cybersecurity

Summary

In this video, Josh Maor discusses 10 challenges people face when trying to break into cybersecurity. He covers the high demand for specialized skills, the need for experience, and the constantly evolving field. Other hurdles include certification requirements, intense competition, and complex screening processes. Josh emphasizes the importance of soft skills, the stress of working in cybersecurity, and the need to navigate various standards and regulatory frameworks. He offers practical advice on how to stand out and succeed, drawing from his own experiences and expertise in the industry.

Takeaways

• 😀 High demand for specialized skills in cybersecurity requires foundational knowledge beyond traditional IT roles.
• 😀 Many cybersecurity jobs require some level of experience, even for entry-level positions, making it a common barrier to entry.
• 😀 The cybersecurity field is constantly evolving, requiring professionals to continuously learn and adapt to new threats and solutions.
• 😀 Certifications and formal education are helpful but time-consuming and expensive; however, they increase your employability.
• 😀 The cybersecurity job market is highly competitive, making it essential to distinguish yourself from other applicants.
• 😀 Screening processes can be inefficient, with applicant tracking systems sometimes filtering out well-qualified candidates.
• 😀 Cybersecurity roles involve a wide range of skill sets and disciplines, making it difficult to know where to focus your studies.
• 😀 The work environment in cybersecurity can be stressful due to the need to manage human behavior and collaborate with various teams.
• 😀 Navigating numerous standards and regulations (like NIST, PCI DSS, and HIPAA) is essential but can be overwhelming.
• 😀 Soft skills, including communication and teamwork, are critical to success in cybersecurity roles, as they can outweigh technical expertise in some cases.

Q & A

What is the primary focus of Josh Maor's channel?

Josh Maor's channel is focused on helping people get jobs in IT and cyber security. He provides insights, resources, and advice on entering and succeeding in these fields.

Why is cyber security considered a mid-level job field even for entry-level roles?

Cyber security is considered a mid-level field because entry-level positions often require foundational IT knowledge and skills. This is necessary to understand what you're protecting and how to manage risk effectively.

What is the significance of experience in getting a job in cyber security?

Experience is crucial for landing a job in cyber security. Many employers expect candidates to have some experience, even for entry-level roles. Gaining this experience can be challenging, but creating content, working on personal projects, or completing internships can help.

How does the constant evolution of the cyber security field affect job seekers?

The ever-evolving nature of cyber security can make it challenging for job seekers. New technologies and methods used by attackers and defenders require constant learning. However, focusing on the fundamentals and adapting to changes can help break into the field.

What are the challenges associated with obtaining certifications and education for cyber security?

Obtaining certifications and formal education in cyber security can be time-consuming, costly, and mentally exhausting. While these qualifications aren't strictly required, they can enhance a candidate's employability by improving their resume and interview readiness.

Why is the job market for cyber security professionals highly competitive?

The cyber security job market is highly competitive due to the increasing demand for professionals in the field. Many people are trying to enter the industry, and without distinguishing yourself from others, it can be challenging to secure a position.

How do screening processes affect the chances of getting hired in cyber security?

Screening processes, such as applicant tracking systems (ATS), can make it easy for candidates to be overlooked if their resume is not formatted properly. It's essential to ensure that your resume is optimized for ATS and that you effectively present your qualifications during interviews.

What makes the skill set for cyber security so complex and varied?

Cyber security covers a wide range of disciplines, from physical security and identity management to security operations and governance. The diversity of roles and specialties can make it difficult for newcomers to know what to focus on when studying for a career in the field.

What challenges does the work environment in cyber security present?

The work environment in cyber security can be stressful due to the need for collaboration and behavior modification. Professionals often need to work with others to change behaviors related to cyber hygiene, which can be more stressful than technical challenges like incidents or breaches.

How do regulatory frameworks and standards affect the cyber security industry?

Cyber security professionals need to be familiar with various standards and regulatory frameworks, such as NIST, HIPAA, and PCI DSS. Understanding these technical terms and frameworks is essential for success in interviews and day-to-day job performance, though they can be confusing due to overlaps between them.

Why are soft skills crucial in cyber security roles, and how do they impact hiring decisions?

Soft skills, such as communication and interpersonal abilities, are crucial in cyber security roles. Even if a candidate is technically skilled, poor soft skills can hinder job prospects. Companies often prioritize candidates who are personable, can accept criticism, and are willing to learn, even if their technical abilities are not perfect.