launch your CSIA career
Here are some helpful resources, tips, and data to help you in your career exploration and job search.
Here are some helpful resources, tips, and data to help you in your career exploration and job search.
The best entry-level cyber security jobs often don't have the words "Cyber" or "Security" in the title. Look at the job description!
Jobs like IT Support, Help Desk, or Junior Network Technician usually include some cybersecurity or info assurance function. Try these jobs first to get your foot in the door, as well as hands-on experience.
Several cyber security jobs have a security clearance requirement. Catch 22 - the only way you can get a clearance is to have your employer sponsor it. For more information, check out clearancejobs.com.
Look for cyber security jobs in other industries besides IT - try Business, Finance, Sales, and Healthcare.
Check out some helpful articles:
Ultimate Guide to Starting a Career in Cybersecurity, October 3rd, 2018
Getting Started in Cybersecurity with a Non-Technical Background, March 2018
CompTIA: Start a Cybersecurity Career. 2019
How to Get Into Cybersecurity, Regardless of Your Background. October 2018
Helpful websites like Cyberseek.org and IndianaCareerConnect.com will give you an idea of what the current demand for cybersecurity specialists are, nationally and by state. Below is a screenshot taken in April 2020 - visit the heatmap for more current data.
The world of cybersecurity has a language all its own. So you’ll need to be fluent in the highly technical vocabulary spoken by cyber professionals. For example: You can be certain that anyone who asks about your “white hat” capabilities will not be inquiring about your headgear. All kidding aside, be sure you have a solid grasp of essential industry terms and acronyms from A to Z (Advanced Persistent Threats to Zero-Day Attacks). Here are a few helpful resources:
The CyberWire, a cybersecurity-focused news service and thought leader
The National Initiative for Cybersecurity Careers and Studies, an online resource for cybersecurity training under the Department of Homeland Security
Cybrary.it, a cybersecurity and IT workforce development platform focused on preparing cybersecurity and IT professionals for the next step in their career
The cybersecurity ecosystem can seem like a whole other world to newcomers. In addition to unfamiliar, Sci-Fi-sounding terminology, there is a constant flow of news and new trends and techniques, developments and advancements.
Reading blogs and exploring influential industry websites is one of the best ways to get your virtual finger on the pulse. Start by checking out one of the many lists of top cybersecurity blogs and websites put together by industry advocates.
Nobody’s going to make the mistake of applying for a chief information security officer job right out of college, but you’ll want to develop a clear idea of what jobs are realistic given your specific level of skill, education and experience.
Three such potential jobs are discussed in a SecurityIntelligence.com article titled “How to Land an Entry-Level Cybersecurity Job,” which spotlights Information Security Analyst, Junior Penetration Tester, Network and Computer Systems Administrator.
One industry resource that is designed specifically for cybersecurity job seekers at all levels is Cyberseek.org, which helps connect the dots between specific skills such as software development, systems engineering and IT networking, and specific opportunities (entry-level, mid-level and advanced) in cybersecurity.
Are you an engineering type or a natural-born IT whiz? A tech-savvy quick study with solid leadership skills? Cybersecurity is an extremely broad and diverse field. So it is often advisable for entry-level professionals to decide what area of cybersecurity they want to focus on.
Much of this will depend upon your existing proficiencies, as well as your aptitude for learning highly technical skills that will expand your spectrum of opportunities. But determining what areas you are most interested in will help you set goals, both short term and long term, as you gain skills and experience with an eye on specific types of jobs.
There are multiple pathways to success in cybersecurity. For example, this is a field where it is not particularly unusual to find super-skilled high school or college dropouts pulling down six figures alongside co-workers who have earned a master’s degree.
The path to success as a cybersecurity professional is different for everyone. However, a tried-and-true approach shared by many is to combine real-life experience with some academic and technical training (such as advanced degree programs and certifications) to further expand your overall knowledge and capabilities, as well as to develop some specialized skills.
Cybersecurity career resource Circadence.com advises entry-level job seekers to explore internships, apprenticeships and alternative pathways to gaining experience. Doing so is part of a “go-getting attitude” that is helpful in most career searches, cybersecurity included.
The article points out that internships are available through many community colleges, technical colleges and universities, some of which “have well-oiled practices of connecting students with local companies.” It touts apprenticeships as a valuable “learn while you earn” experience that is beneficial for both the company offering the opportunity and the apprentice.
Like nearly all cybersecurity career advocacy organizations, Circadence places heavy emphasis on gaining experience however you can, and distinguishes between three types of experience.
In addition to “real-world training experience,” it cites the value of:
Technical experience – One example of this is the knowledge and skills gained through industry certification programs.
Degree experience – Though not all cybersecurity jobs require a degree, many positions, especially higher-level jobs, will require or at least prefer a combination of all three types of experience.
Chuck Bane, a longtime cybersecurity expert now serving as academic director of the University of San Diego’s online Master of Science in Cyber Security Engineering, notes that some academic programs provide opportunities to gain simulated work experience by challenging students to conduct virtualization experiments in a safe “sandbox” environment — building secure systems, running scans, then analyzing and acting on the results, just as they would in many cybersecurity jobs.
Though there are cybersecurity jobs that do not require a technical background, having a working knowledge of programming is extremely helpful. Demand for qualified workers is high, so many organizations are open to hiring people from different backgrounds. An article exploring “How to Get Into Cybersecurity, Regardless of Your Background” by Springboard.com offers helpful advice on entering the cybersecurity workforce from a non-technical background.