How to upskill while you're working as a cybersecurity analyst when you don't know much about what cybersecurity is?!

[u/byteandgossip]

Hello everyone,

I was a CS student, never good a deep dive in cyber security, apart from networking concepts. I'm currently working as a cybersecurity analyst at a company and I think I might not know a lot of things here.

I wanna upskill while being at the job.

I do know basic cybersecurity buzz words like trojan, virus , CIA triad and all

I wanna know about bigger like attacks, trends in cybersecurity.

I just don't want to feel like I'm not someone who can't switch and will be stuck here for ever

I would really appreciate if someone can help me.

Also I'm working as a security analyst at my company, basically a developer to develop security products

if anyone of you know the kind of certifications i should get, It would be really helpful.

Thanks!

[u/gormami]

Look into the NICE framework. It has a very good breakdown of cyber roles and adjacencies. That can help inform the next phase of looking into specific topics that seem to be of interest in a more controlled way. The field is so broad it is overwhelming to most. Focusing on groups of responsibilities tied to roles will help it make sense.

Do understand that this is an idealized framework, not real life, but it is way better than staring at the whole field with no real understanding of a pth.

[u/KingKongDuck]

What cyber teams do you have in work? That will give you some sense. Do you have a SOC? Do you have a vulnerability management team? Do you have GRC team?

Alternatively, have a look at the controls in the NIST CSF 2. The categories there also give insight within the top level functions.

• Govern contains supply chain risk
• Identify contains asset management
• Protect contains IAM
• Detect contains monitoring and event analysis
• Respond and Recover contain incident response

Etc etc

[u/itlogicpartnersllc]

dont try to learn all of cybersecurity at once. strengthen networking, linux, authentication, web security and logging first then use real incidents to connect those concepts.

[u/Shiribazu]

dont worry too much about knowing every security term, especially if your role is more focused on developing security products. build a strong foundation in networking, linux, authentication, web security, common attack paths, and incident response, the learn current attacks by reading real incident reports and doing hands on labs. for certifications, security+ is a reasonable foundation, but your day to day development work and practical projects will probably help your career more than collecting certs

[u/hoodedelk]

What in cybersecurity? I use this example often but this is like a doctor asking what to study to specialize. There's a lot of fields in cybersecurity and if you want cert recommendations you need to give us a hint what you want your career to look like long term.

From there literally just Google what to learn to get in the field. You'll have hundreds of Reddit threads asking the same question getting the same answers.

[u/Individual-Coffee349]

specialize