How to get a job in Cyber Security. Without a degree!

The rapid change and advancement we are seeing in the technology industry means that every cyber security professional is always learning and updating their skills to keep up with this growth. So, many companies will invest in your training and development as a cyber professional as no matter what level you are all professionals are constantly needing to develop and renew their skills. The industry is desperate for people so if you can show interest in learning about cyber security and you want to work in the industry then you are already halfway there to getting that cyber security job.

Firstly, if you are a TAFE or university student don’t wait for your degree to finish before looking for a job. Companies need people in the cyberspace and will hire motivated individuals and support their journey through their studies and career. If you’re already studying in the field, it makes you a valuable asset to these companies as there is confidence that you would be a good investment. There are government programs as well as private companies that support students studying in these fields. You can work part-time throughout your degree, and in the end, have 4years of experience under your belt.

Whether you are a student, someone making a career change, or just looking at getting into the industry the first thing to do is to learn. Start by building your skills and learn about the fundamentals of cyber security. Start broad and then figure out an area you like and constrain your training to that niche. Once you have a specific profession in mind google jobs with that title. Read through job postings in your area and see what the requirements are to land this job.

Udemy
Udemy has a huge range of free and fee-paying courses to explore. This is a good start to learn some of the fundamentals of cyber security,

CSU free short courses
Charles Sturt University offers free short courses in a range of IT and cyber-related topics. Coming from a university this is quality content and can even be redeemed as university credit if you are studying.

Black hill infosec
Another great resource that is packed with information. Also, check out their YouTube video and sign up for their live boot camps and webinars.

Splunk
Splunk is one of many SIEMs which analysts use to investigate and monitor computer systems.

Azure Cloud
Most businesses are using the cloud in some way making cloud security important. Azure is one of many cloud providers and learning about its system is essential to working in cyber security

AWS cloud
AWS is the Amazon cloud service, another common cloud provider.

PortSwigger
This is the red team training central. It covers everything you need to know about hacking and using burp suite (a popular red team tool).

Blue team training
If you are more of a blue teamer this training module is for you. It provides introductory courses to certification preparation.

TryHackMe
TryHackMe is the go-to for cyber security training in all areas starting with beginner levels and worth your way up to harder ones. It goes over different tools, systems, and strategies used in the industry.

Microsoft
Microsoft offers heaps of free training material that prepares you for industry certifications. You can sometimes sign up for a Microsoft training webinar and get free exam vouchers for these certifications.

With such a high demand for cyber security services, companies and governments are always trying to get people involved in the industry. Simply by being proactive and taking the learning into your own hands you tell a lot about yourself to an employer. Showing initiative and dedication can be enough to land you your first job without having work experience.

As someone working in the industry, I can tell you many of the people I work with don’t have a degree or started with any qualifications at all, and some of the ones who do have qualifications obtained them through on-the-job training. An important thing to remember when applying for any job is that everyone is unique and brings something to the table. If you can effectively promote yourself and present what qualities and skills you provide then you are already halfway there to landing the job.

As you complete short courses and online training put every single one on your resume or LinkedIn profile. Once you begin to have more confidence with what you’ve been learning add a separate list of skills. Doing so will demonstrate all the hard work you have put into learning about cyber security again emphasis your proactive and hardworking skills.

Using what you have learned start playing around with things and build not just your theoretical experience but also your practical skills. You can do this by setting up VMs, participating in online labs, playing around with hardware, etc. Build, break and create things from what you have learned and add this to your resume. Presenting your previous projects when applying for jobs shows your problem-solving and creative skills which are the core skills of any cyber security professional. In a job such as a penetration tester creativity is needed to find new backdoors and exploits and is a valuable skill to have.

Your last addition to your resume is something that is often not talked about. Addressing your travel experience is a unique and important aspect of an individual. You can work in cyber security all over the world so showing international connections and cultural experience are respected by an employer. Whether the company has clients in that area or experience working with a system used in a different country it is worth noting your travel experience.

Next is to apply for jobs, ensuring you tailor your cover letter to the employer. Address the skillset they mention in the job description and provide details of where and how you have used it. Whether it’s something as simple as a university assignment or work you have spun up in your home lab, you should always address the exact criteria in a job posting and relate it to your own work.

To recap:

Don't wait for a job to come around, make the opportunities happen for yourself by reaching out to your network or companies of interest. By making those connections in the industry and expanding your network something will eventually come up. You can do this by:

Find your local cyber security community and attend meetups. Here are just a few around Australia:

Melbourne
Melbourne Cyber Security Meetup
Cyber Security Melbourne

Canberra
Sec talks Canberra
WIC woman in ICT

Brisbane
Sec talks Brisbane

Sydney
OWASP Sydney Chapter
Sydney Cyber Security meetup

Perth
Cyber risk meetup Perth
Perth Dev Sec Ops

Adelaide
Network security study group
Sec talks Adelaide

Australia wide
ACS – Australian Computer Society
AWSN - Australia woman in Security Network
AISA – Australian Information Security Association

Not only is this another opportunity to learn but it is also a great way to meet people in the area and make connections. Here are some events held online and in-person:

Bsides Australia
Bsides is a big hacker conference held in Canberra. People from all over Australia attend and present at this event.

Woman in Security Awards
This is the largest security awards dinner. They hold a gala and dinner event at the end of the year awarding nominated Australian for their work in the field.

Black Hat
Black hat are known for their muti-day cyber security event series presented all around the world.

Cyber Conference
CyberCon is run by AISA is a yearly conference presented by both local and global experts.

By doing this you are going to stand out from all the other applicants. Whether you are contacting about a job, work experience, or trying to make a connection with another professional you should never hesitate to reach out and make those opportunities happen for yourself.