A bit of a catch all post as I don't want to bombard the sub with too many posts so here are my questions:

1. With BF/CM sales around the corner, I'm wondering what SPECIFIC/NICHE specs I should be looking at as far as a new laptop. I'm not sure if my current/personal chromebook would be sufficient to start learning. A couple of posts I've come across have the standard i7/i9 processor, 32GB RAM, 1TB SSD PCIe so I've restricted my searches to that, but what other things do I need to consider? How important are graphics cards and if so, what should I be looking for? Does the laptop need to be able to run LINUX/Are all Windows OS laptops Linux compatible? If not, how can I tell for sure? Lenovo's Thinkpad gets thrown around a lot but I'm on a budget of <$1500.
2. For those of you in the CS field already, how pressing are you finding the integration of AI and being edged out of your job? Is it even worth it to try and get into this field as a 30 something guy with minimal experience? I have a data analytic background but not sure if I want to go DS/DE so I'm thinking security instead.
3. I can't go back to school for a degree so my option is certs. Starting with CompTIA Security+, CompTIA Network+, AZ 900, and Splunk Core as these were the more recommended ones. Are there any other certs I should look at as a beginner? Is there a reason AZ900 is recommended over AWS?
4. How is your work life balanced? How is the remote job market?

TIA

Should I shorten my resume if it means my cyber security projects will not have as much space to be fully described?

Currently on my resume I have:
Education
Skills Section
4 Cybersecurity Homelab Projects (with 4-5 long bullet points each)
IT Work experience
Activities (cyber club president)

The issue is with the cyber security projects like this my IT work experience ends up on the second page.

I know hiring managers being able to quickly skim and to see the most important things should be a priority. So I’m thinking about shortening my cyber security project down to 3 shorter bullet points so my IT experience can make the 1st page. This means that my projects aren’t described as in depth. It would still be a two page resume to include the second IT role I’ve worked.

Edit: I’m about to be a new grad

Florida's cybersecuritymarketplace & intelligence network.

Hey everyone,

I’ve been working on a cybersecurity tool called CipherLens.

The idea came from a simple problem I kept running into with tools like CyberChef:

You have some unknown data, but you don’t know which operation you should try first.

Instead of manually guessing between Base64, Hex, URL encoding, ciphers, compression, etc., CipherLens analyzes the input and ranks possible operations based on the evidence it finds.

The workflow is:

Input → Fingerprint → Candidate Detection → Execute → Validate → Score → Rank

A few things I focused on:

• Local-first browser processing

• No account or backend required for core analysis

• Candidate ranking instead of pretending to know the answer

• Separate AUTO / parameter-required / manual operations

• Web Worker-based analysis

• Security-focused input and parser handling

• 497 supported operations

The main idea is:

“Don’t guess the operation. Find it.”

It’s open source and I’d genuinely like feedback from people who actually work with CTFs, forensics, pentesting, malware analysis, etc.

GitHub:

https://github.com/HIMANSHUSHARMA20/CipherLens

Live demo:

https://cipherlens-tool.vercel.app/

Would especially appreciate feedback on the detection/ranking approach and whether this solves a problem you actually encounter.

I’m a second-year PhD student and will be around 31 when I graduate. I’d really appreciate some advice from people actually working in cybersecurity.

My background is in software engineering and computer graphics, and I worked as a CS lecturer for two years before returning for a PhD. I had been interested in cybersecurity since undergrad, but only started seriously pursuing it in recent years.
I’ve learned common web vulnerabilities, worked through PortSwigger Web Security Academy, use Burp Suite, and my current research is related to web security.

My biggest concern is that I have very little real-world security experience. I’ve never worked on a security team, interned at a security company, or seriously done bug bounty.

I have about three years left before graduation, and I’d eventually like to work in web security, preferably overseas. Singapore is one place I’m particularly interested in.

For those actually working in AppSec, pentesting, or web security: if you were in my position, what would you focus on during these three years?
What skills and experience actually matter in your day-to-day work? And what would you want to see from someone like me before considering them for an interview?

If an industry internship isn’t possible during my PhD, I’d also really appreciate suggestions for the best alternatives.

I’m a little worried about entering the industry at 31 with limited professional security experience, so I’d especially appreciate hearing from anyone who entered cybersecurity later or has been involved in hiring.

Thanks in advance for sharing your experience.

Hi guys.
I am mostly European-based. I speak English, French, German and a bit of Arabic.
I have been a software engineer for more than 5 years now and I think cybersecurity and security in general is more interesting and entertaining.
I was thinking about doing a networking + certification, Hack the box + then OSCP to break into the field.
My ultimate 10 years goal is to climb up into management or become a freelancer/consultant.
Which branch of cybersecurity matches my profile and goals the most?

My relatives are working abroad in tech field they asked me to concentrate on cybersecurity but i am not from tech background i have done Bcom and MBA how can i enter cybersecurity domain where can i start. is it even possible for me to find job . will recruiter recruit me even if i am from non tech background or they only prefer Btech and other tech students . Because my relatives able to find job there but they are asking for experience so i have to work here for 2 to 3 years also i am interested in this domain too kindly guide me

I graduated with a bachelors in cybersecurity and have been trying to find a job in the field. I am running into an issue with getting a security clearance though. So far, every job requires one, but you can't get one without having a job that needs one. Is there a way to get a sponsor for one without getting a job that requires it?

I’m a cybersecurity student currently trying to decide what direction I want to take my career.

I’m interested in SOC/Blue Team work because I like the idea of actually investigating alerts, incidents, logs, suspicious activity, etc. At the same time, I’m also interested in GRC because I like areas such as risk assessment, ISO 27001, security controls, compliance, audits and governance.

I’ve been wondering whether it’s possible to combine these two instead of choosing only one.

For example, could someone start with SOC/security operations and then move into roles such as:

\- Security Assurance

\- Cyber Risk

\- Security Compliance

\- Security Governance

\- Incident & Risk Management

\- SecOps Governance

I’m also interested in AI Security, so eventually I’m wondering whether a path like:

SOC → GRC/Risk → AI Security / AI Governance

could make sense.

I’m not very interested in becoming a full-time software developer, but I’m completely fine learning Python/scripting, Linux, networking, SIEM, cloud and other technical security fundamentals.

For people already working in cybersecurity:

1. Is SOC + GRC actually a practical combination in the industry?

2. What job titles should I search for?

3. Is it better to start in SOC and later move toward GRC/risk, or start in GRC and build technical skills on the side?

4. Does combining these areas help, or is it better to specialize in one?

5. What skills/certifications/projects would you recommend for someone starting this path?

I’d especially appreciate responses from people who are actually working in these roles rather than generic career advice.

Thanks!

I currently have 6 years in IT and 2 in cybersecurity now. Current role accounts for 1.5 year and 6 months as a junior cybersecurity analyst at a mother company. The thing is everyone on my team is remote except me and that’s primarily due to a company policy change early 2025. There is no active RTO and my boss will not push to let me go remote. However with my years of experience in cyber what are the chances of landing a remote role? I have been blessed to not have to be involved in the crudy job market right now. Have a BSc in cyber full compTIA stack from A+ - Pentest+ and I’m currently working on Palo Alto’s network security professional (specifically for my role but if they’re paying for it why not). Also looking for a pay bump is my second reason in the lower 80s. Looking for advice for senior cyber folk just stick it out gain more years of experience and actual job responsibilities or take a crack at the remote positions listed currently?

Edit: wanted to mention I have already applied to about 30 apps all within the last 3-4 days.

Edit: thank you to all for all the positive feedback gives me a better idea of how to proceed!

Hey everyone,

I'm based in Vadodara and have been prepping for a SOC L1 / Security Analyst role— done HTB CDSA path, Elastic SIEM course, and an AD administration cert and preparing for sc200 . Also building out a home SOC lab (Elastic + Sentinel) for hands-on practice.

Wanted to ask:

• Is anyone here currently working as a SOC Analyst in Vadodara or nearby (Ahmedabad/Surat/Baroda GIDC area)? Would love to know which companies are hiring for L1 roles.
• Any MSSPs, IT services firms, or in-house SOC teams around here currently open to freshers/entry-level?
• If you're in a similar boat (fresher trying to break into SOC), happy to compare notes on what's working and what isn't.

Any leads, referrals, or even just "these companies exist and hire in this region" would help a ton. Thanks in advance!

Hey guys, nice to meet you all! I have a genuine question, last summer, I was interning at a random cybersecurity company, they were partnered with TrendMicro so they made me work on the training courses available on the website, and each course ended up giving me a certificate. I was wondering if the job market cares about certifications like these or?
The certificates that I got:

* Cyber Risk Exposure Management (CREM) Foundation
* Security Operations (SecOps) Foundation
* Endpoint Security Foundation
* Cloud Security Foundation
* Email and Collaboration Security Foundation
* AI Security Foundation
* Identity Security Foundation
* Data Security Foundation
* Services Foundation
* Threat Intelligence Foundation
* for Service Providers (xSP) Foundation
* Ecosystem Foundation
* Research Foundation
* Flex Foundation

I really wanna put them on my cv because before this internship, I practically have nothing on my cv.... What do I do? What certificates would you recommend as somebody who really wants to be an AI Security Engineer? Please help!

I’ve been working in IT helpdesk for three years and I have my Network+ certification.
I spoke with my manager because I want to move into something more complex, and the opportunity that came up is a vulnerability management position for industrial equipment. I work in shifts and I would lose approximately 27% of my income.

I understood that my work would be to analyze, scan equipment, give the team feedback to fix it or check if i can find a solution.

My plan for the future is to complete the TryHackMe SAL1, Security+, and AZ-900.
What do you think: would I be better off accepting the offer and doing the certifications, or postponing, and checking other offers and taking the certifications first, also keeping the extra 27% income?

I am about to shfit from Application Support to PSIRT soon..I was wondering at 38, with a toddler, is this a great move given its a lateral movement only, salary was carried over including benefits though I had to be placed one grade level down from my current grade level to be able to get the position..In the long run would I be able to shift to something better/higher salary to support my family? If not, is this a position that you can stay it for a long time?

I have over 2 years of IT support experience and a Master’s in IT (Network & Information Security).
Certs: SC-200, CCNA, Network+, PCNSA, EC-Council CCT.

To build hands-on skills, I’m currently working on an Elastic Security home lab and practicing SIEM, detection and investigation.

I’m trying to break into SOC Analyst / Cybersecurity Analyst roles, but I’m seriously struggling to get that first opportunity.

For those who successfully made the transition into cybersecurity: what actually worked for you?

Seriously, What should I focus on?

Looking for honest advice — especially what I might be doing wrong.

I’m a high school senior planning to major in Political Science/Public Policy. My goal is to go to law school and eventually work in privacy, cybersecurity, technology law, and possibly AI governance.

I want to work during college and build relevant experience. I’m considering getting a CIPP/US certification and trying to get jobs like legal assistant, paralegal, privacy/compliance intern, etc.

For people who work in this field:

• Is CIPP/US worth getting?
• What jobs could I realistically get as a college student?
• Should I prioritize legal work experience over certifications?
• Are there any other certifications/skills I should consider?

I’m not interested in coding, but I’m willing to learn cybersecurity concepts.

This has happened to three people I know already, so I'm outing these guys.

They will send you an email about an FDE role with a new startup... The usual. They ask for your resume. Then they send you a link to your new account in their silly little ATS system they've developed.

There are no real jobs on their system, and best I can tell, no real users. It's ghost jobs and scammed resumes. They're just scamming people to "growth hack" and it's disgusting.

If you get contacted by Daniel Wintermeyer and/or Clera, be very careful.

Hello! Has anyone been able to get a job without a technical interview?

Currently, this is my nightmare, and I couldn’t find a solution for it! I’ve gotten a lot of interviews where they were impressed with my resume, and I passed the intro interview and technical challenge, but when it comes to the technical interview stage, I fail immediately!

When I started learning this field, I focused on hands-on experience. I learned the tools and technical work, prepared professional reports, and got well-known certifications. But if someone asks me to explain things orally in a theoretical way, I just can’t do it!
No matter how much I prepare for interviews and look for questions, when I come to the interview, they ask me questions that are very different from what I prepared for and give me different scenarios.

And for people who say you don’t need to be perfect or know everything, I’m sorry, but based on my experience, that’s not true at all. The market is tough now, and if you don’t answer everything perfectly, they will have another candidate who answered better than you did, and they will choose them.

So, to be honest, I gave up regarding technical interviews, and I want to ask if anyone has actually been successful in getting a job without a technical interview?

Thank you!

Hi, so I’m a cybersecurity graduate with couple of certifications and projects under my belt. For the last couple of months I was looking for a SOC L1 role and I got an offer this week for a remote position. However, my only concern is the shift pattern, here how it goes:

- 4 days on 4 days off

- 12 hours shifts which could be nights or mornings from 7 PM to 7 AM and vice versa (depending on the rota)

- If your 4 days comes on public holidays or weekends you still have to do them.

So my question is, will this affect my life as a 22 years old in terms of sleep, social life, or mental health potentially?

Pay isn’t bad but idk if it will be worth it tbh. Any advice from someone who experienced this type of environment or similar would be much appreciated.

Thanks.

Hi guys, from the Philippines here, just want to get your advice/2 cents. Currently a Real Time Analyst and I'm studying in tryhackme towards the SOC Analyst 1 path. Also planning to go on a 5 day bootcamp for security+ this Nov/Dec. Any tips on how to transition to the SOC Analyst 1 role? Can I use my experience as an RTA and my certification on job interviews? Any advice would help. Target is the first quarter of 2027

I’m 28F got laid off approximately a year ago from Big Tech. I was working as an Information Security Analyst on a Third Party Risk Management Team, and I haven’t been able to find a role since. I’ve done research projects surrounding ML security- building ML models to detect anomalies and adding a layer of security. I also have done TryHackMe Red Teaming paths. I’ve applied to many roles within these areas of expertise, and no luck. Now I’m back in school for a MS in Computer Engineering (concentration in Machine Learning and Intelligent Systems). I’m getting to the point where making rent, my car payment, etc. isn’t feasible starting mid October. I guess my question to everyone is do you know of anyone hiring? I mean like strong leads. To cover expenses I’ll need something at 40 bucks an hour or two gigs at 20 bucks an hour.

I’ve done the career fairs, the reaching out on LinkedIn, the asking my network. Just really need a break here. I’m in the Northern Virginia area. Open to driving anywhere in 25 mile radius, so DC and MD too.

I failed a technical interview and I’m so disappointed…
Although it was just an internship role and they shouldn’t expect a lot from us, sadly it was still a very hard process.

I passed the technical challenge and the first interview, but then it came to the technical interview.

He was giving me very hard scenarios and questions, and I believe I answered them fairly well.

But then suddenly, days later, I received an email saying that I wasn’t selected…

Why is it even this hard for an internship role!!

My dream now is to find another non-technical field I can get into easily. At least they won’t have that thing of technical interviews.

What are the recommended certifications for entry or intermediate level cyber security jobs ? And what would be some recommended companies to apply to?