r/CyberSecurityJobs

I just wanted to give everyone here an update from the last post I made regarding a call back I got for an interview.

Today I got a job offer starting at 55k plus benefits (unfortunately it’s a bit lower than the original listing at 65k I thought it was gonna be around 70k)

This is my first ever tech job. Junior cyber security analyst for a local outpatient healthcare clinic.

Junior in college.

How did you land your first cybersecurity job with no experience?
I’m currently working toward a SOC Analyst career. I have Security+, building hands-on labs on Tryhackme.
The biggest challenge is the “experience required” barrier. Almost every entry-level SOC role seems to want prior IT/cyber experience.
For those who successfully broke into cybersecurity with no prior experience:
Did you start in IT/help desk/NOC or go straight into SOC?
What projects or certifications actually helped?
How did you prove your skills without professional experience?
What would you do differently if starting over?
Would really appreciate honest advice from people who’ve actually made the transition.

I'm thinking of getting into cyber security learning on my own from online resources instead of getting a university degree on CS from a low tier pvt uni. I don't really like sitting and coding lines after lines, not really interested in software engineering. Networking and cyber security fills my interest.

How's the job market for cyber security jobs ?.. On all ranks ?

Can experts give me some reality checks on the actual experience afterwards ?

Thanks.

Over the last 3–4 years, the tech market has seen continuous layoffs.

Pure development roles (especially junior and mid-level full-stack) have been hit harder, while DevOps, Cloud, and Security domains have remained relatively more stable.

From what I’ve researched, cybersecurity and cloud/infra roles show lower layoff impact and stronger demand due to compliance needs, breach costs, and ongoing talent shortages.

I’m a 2027 graduate with current skills in Node.js, Express, and React. Looking at these patterns, I’m planning a phase-wise switch instead of jumping

randomly:

First move into DevOps (Docker, Kubernetes, CI/CD, Terraform, basic AWS/Azure) while leveraging my development background.

Then shift to Cloud Security (IAM, CSPM, container security, DevSecOps).

Later transition fully into Cybersecurity.

Questions:

1. Is this path (Dev → DevOps → Cloud Security→ pure Cyber) realistic in the current market?

2.Based on recent patterns, which domain has the least layoffs and best job security?

3.For someone with a Node/Express/React background, what’s the best first step to make this switch smoother?

Looking for honest feedback. Thanks!

I'm a recent MCA graduate (6.72 CGPA) and currently building my career in cybersecurity, mainly focused on web security / offensive security.

My academics are probably the biggest weakness on my profile:

- 10th: 50%

- 12th: 55%

- MCA: 6.72 CGPA

But I've spent a lot of time building practical skills outside academics.

Current skills / experience

- Linux

- Networking

- Operating systems

- Cybersecurity fundamentals

- Python

- Bash

- Web security

- Burp Suite

- Caido

- Nmap

- Wireshark

- John the Ripper

- Metasploit

- Netcat

- Gobuster

- Subfinder

- Amass

- Katana

- DNSx

- AlterX

- HTTPx

- OSINT

I've completed 100+ TryHackMe labs, I'm currently around the top 5% on THM, and I've also completed roughly 100+ PortSwigger Web Security Academy labs.

I'm well beyond the absolute beginner stage at this point. I'd consider myself somewhere around intermediate, with a strong focus on networking, operating systems, cybersecurity fundamentals, and hands-on web security.

Right now I'm working on VDPs (Vulnerability Disclosure Programs) to gain experience dealing with real-world targets and vulnerability research. My longer-term goal is to move into bug bounty programs and continue building a track record of practical security work.

My concern

The biggest thing holding me back seems to be my academic record.

I'm worried that the 50% in 10th, 55% in 12th, and 6.72 CGPA in MCA will prevent me from getting into cybersecurity, regardless of my practical skills.

For people already working in cybersecurity:

Can someone with this academic background realistically land a cybersecurity job?

What kind of challenges should I expect during hiring?

Should I focus primarily on:

- Building a strong GitHub/portfolio

- Writing detailed vulnerability reports

- VDP/bug bounty experience

- CTFs/labs and certifications

- Networking with security professionals

- Applying to smaller companies/startups first

Or are there specific types of cybersecurity roles/companies that are likely to reject me automatically because of academic cutoffs?

I'm looking for honest advice from people who have actually gone through cybersecurity hiring. If academics were a weakness in your own career, how did you compensate for them?

Hey guys,

So, I'm a prospective international student in the US, about to pursue my graduate (Master's) degree in the country with a good decent institute that offers STEM programs.

I've been interested in cyber particularly information security, to learn and make a career out of it (SOC Analyst L1/L2 or cyber analyst) once I graduate from my program in the next 2 years.

I've been offered two courses to choose from and I wanted to get clarity that does having a master's degree in "cyber" preferably sets you apart or helps you as a beginner than another degree like "information systems and technologies" or "Information Technology"?

Also, does having a master's degree help you with job sponsorship or settlement pathways?

These are two programs that I've been accepted for and confused about choosing one to pursue that could eventually benefit me in the IT sector especially in the cyber space.

Admitted:

1. MS Cybersecurity Systems

2. MS Information Systems and Emerging Technologies

I'm thinking of choosing more of an information systems program and working alongside my skills or certs, maybe, but genuinely I want to choose a program that really helps me as a beginner or maybe slightly gives me an edge in the job market.

Would love to hear your story and thoughts :)

I've been working in GRC for around 2 yrs, and I'd want to know other what GRC folks think about their Jobs. For me, it feels hectic, too much work on Excel, word and PowerPoint, feels a lot like a clerical work. Feels boring, tiring and questioning my life choices lol. And there's also pressure from management on getting certs which I think would be waste of time and money.
What I've been doing: working as a GRC consultant, doing internal audits for orgs, preparing reports, policies, procedures, helping during the final audits, conducting user access reviews, doing vendor risk assessment, gap assessment, maintaining vulnerability tracker, filling out tonnes of questionnaire. And it has lots of dependency on other teams and I hate that. Is this all what you do? And how do you feel about it?

Edit for clarification: I am not looking to get hired anytime soon. I am not looking to start work underqualified or with minimum training. I am looking into where to begin learning

Hello, I am considering switching careers into cyber security. I am not sure where to begin studying/training, but currently have practically no knowledge of this field. I've spoken to chatgpt who laid out a 12 week plan, starting with watching and taking notes from a YouTube channel (messer I believe) for week one.

In the past I've been interested in being an ethical hacker, so perhaps I could be a person who tests systems for defense holes?

What would you recommend I do to begin? Should I self study, enroll in a university class, go for a certification, apply to an internship, or read a certain book?

TIA

I’m getting into cybersecurity and considering GRC or IAM. I’m not very technical and want a less technical path with strong six-figure potential. I’m taking Google Cybersecurity courses and considering Security+ and Network+. I also have an active Secret clearance. Any advice?

I’m 16 and currently in the UK. I’m a beginner in IT, and I’m wondering whether, if I earn several relevant certifications and build a strong cybersecurity portfolio with practical experience, could I enter the cybersecurity field without a cybersecurity degree and eventually progress into senior-level roles?

EDIT: A lot of people are telling me no, and I would be required to get experience first. What would this experience entail first? Would it entail being a Helpdesk technician? Getting into QA Engineering?

How do you guys prepare for a 2-hour Intel cybersecurity interview? Is it mainly technical, or is there a mix of technical + behavioral/project questions?
What topics should I focus on? Any advice would be appreciated!

I’m a senior in college, and in my second semester I have to take cooperative training. Currently, I have the CCNA, I can program, I know Linux, and I have a couple of other technical skills I learned in college. But I’m still not a penetration tester, which is what I really want to be.

I’m worried that companies will start thinking I’m more interested in networking or defensive security. Even my projects have mainly been network security related. Don’t get me wrong I love networking but I don’t see it being my full time job, It’s more of a hobby that I really enjoy.

Any advice on what I should be doing right now?
What tools/skills should I start learning right now?

I’m starting to study for the CPTS from HTB. Is that a good move or is there something else I should be doing right now?

DOL Cyber Database Admin Cert

For context I’m in the military and this is something I was able to obtain in hopes it’ll look good on my resume once I get out. For those already in the field does this?

I am a US citizen who recently completed my bachelors in cybersecurity from an Indian institute my gpa is 3.6/4.0 and I have 7 months of experience and have recently obtained my CompTIA security + certification, I’m applying to a lot of different jobs in the us but I’m not getting any good responses. My family is suggesting to do masters in the US. What public university do you think is best for cybersecurity masters and if any of you are perusing/ have perused please let me know your experience. And also any way I can land a job even if it’s help desk and what job portals did you guys use to actually land one. Please help me

I feel the cybersecurity field has become really crowded, and anyone can just get in without a degree, unlike other fields where you have to get a degree, which limits who can apply. There are more applicants than jobs, and employers are so picky.

I wish I could be in a field that is not crowded, where I can be something unique and employers appreciate me and my qualifications.

Cybersecurity has become a really toxic field where you always feel like you are not enough, and the attitude is basically, “We can throw you away if you’re not GREAT enough or if we find someone better than you.”

Also, the community, where many people can just talk down to you and make you feel like you are lower than them, or that you are not smart or “hacker enough” to be in the field.

When I look at engineers, doctors, or people in other fields, they seem more educated and respectful toward each other. It doesn’t feel like cybersecurity, where a lot of people talk and act like they are underage, not grown, educated adults.

I feel like I’ve had enough of this world, even though I really love cybersecurity. Everything around it just feels toxic.

The question now is: I don’t know what field I can choose that would be less competitive, have a more respectful community with more educated people, value qualifications more, and make it easier to get a job.

Thanks for your time.

**Additional Context**
Just to add some context for anyone who’s willing to help: I’m currently serving in the Marine Corps and I’m looking for an entry-level IT position to get my foot in the door and start building relevant experience. I’m not expecting to jump straight into cybersecurity or a SOC analyst role—I’d rather start somewhere I can learn, gain hands-on experience, and build the foundation I’ll need to transition into cybersecurity down the road.

Credentials:

B.S., Cybersecurity Technolgy; Minor in Computer Science (4.0 GPA / Highest Honors)
CompTIA Sec+
CompTIA Net+
CompTIA A+

I’ve applied for about 20 entry level positions so far but having trouble even trying to find jobs to apply to. I’ve been using Indeed, Dice, using a variety of job role searches and AI to help look.

I am looking for an entry level help desk, security/SOC analyst position, or any entry level IT/cybersecurity role. Any tips on where to look for jobs or just over guidance on this journey. I am worried about getting my foot in the door, I appreciate any help!

Hi guys. Been in the industry for 2 years now, first in Help desk and EDR administration and then got lucky and landed an offensive security role (basically, security evaluations to certificate products as secure, half of the job is pentesting work).

My intention is to stay where I am for some time, farming experience, knowledge and certifications, and eventually look for a remote position in other EU countries (or even the US). I'm based in southern Europe, so salaries in the northern countries are significantly higher.

Would it be possible to work remotely for a company in those countries while staying in mine? Has anyone done something similar? I know some Indian folks are constantly doing that with western countries, so that's why I thought of the possibility.