Thread by @StephandSec

The thing I want to say to newbies and security hopefuls is...no one thing will propel you into a security role.

No cert. No degree. No website. No blog. Nothing.

That is not and should not be the aim of those things. There’s no secret thing that is guaranteed to get you a job

In fact...I was super qualified for a role. And did not get it.

I was SEVERELY UNDERqualified for a role. And I got it.

It doesn’t make any fucking sense. It’s not exact. There is no smoking gun. Just don’t even think that because you will be so pissed off at everything.

Anyone that tells you one thing is guaranteed to get you a security job is lying. In my opinion.

So. That being said. You know what else won’t get you the job? Doing nothing at all. And just wishing you’d get it. Definitely not going to get you the job.

So...what do you do? Prepare for an undetermined length of time where you just learn and meet people and grow and try as many things as possible. For most of us, that’s in our spare time, away from our friends and families and video games. Because poor.

You’ve got to make it fun for you. I wish I had because the journey wouldn’t have been so depressing. If you make it fun, you won’t feel the sour sting of rejection so deeply.

You’ve got to find a way to merge what you already love with this new love. For me, that was writing.

You’ve got to keep hope alive, find a supportive community and a mentor and a sponsor. You’ve got to tinker (I know, I hate when people say that. I’ll explain later what that now means for me.) and get your hands dirty. You’ve got to read and fall asleep watching Professor Messer

You’ve got to ask dumb questions anonymously on Reddit about stuff you have no one to talk to about. You’ve got to take notes and never read them again. You’ve got to shake your fist at the hiring manager gods for passing over you. You’ve got to take a non-security job to survive

You’ve got to go to meetups, find out you don’t fit in and shore up enough courage to try again. You’ve got to attend massive conferences that terrify you but allow you to meet lifetime friends. You’ve got to join slacks. So. Many. Slacks. Volunteer. Speak. Make videos.

Spend lots of time on LinkedIn, even though you hate it. Add a bunch of people. Study other technologies. Enroll in school. Or don’t.

The point is no one can tell you how to get the job but a hiring manager for a specific role and even at that, all hiring managers aren’t equal.

We can give you tips. Tricks. What we did. What we know doesn’t work. Suggestions. Guidance. But at the end of the day, adding security to your lifestyle is the best way to move ahead.

One day, someone will see you and say, “We have this position...can’t make any promises...”

And then, you’ll go on Twitter and tweet, through your happy tears, “One year ago, I was discouraged and knew no one or nothing and now...I’m a Security Analyst! Starting Monday!😊😊😊”

And we’ll all be happy for you.

This isn’t what you want to hear. But it’s the truth...

At least...as I know it.