🚨Security Career Resource Thread 🚨
1️⃣ 2️⃣ resources to break into the field or take your career to the next level 👇
#infosec #cybersecurity #security
1️⃣ 2️⃣ resources to break into the field or take your career to the next level 👇
#infosec #cybersecurity #security
Learn:
🎓 How to get into various fields: pentesting, SOC analyst, AppSec, ...
🎫 Certs - do they matter? For which roles?
🧪 Doing security research
📣 Building your brand via blog posts, conference talks, and more
💸 How to think about compensation
🎓 How to get into various fields: pentesting, SOC analyst, AppSec, ...
🎫 Certs - do they matter? For which roles?
🧪 Doing security research
📣 Building your brand via blog posts, conference talks, and more
💸 How to think about compensation
📺 Launch your cybersecurity career: @IppSec's advice on how to become a skilled professional
* Technical tips
* Keeping a positive mindset
* Life is what you make it
#bugbounty #bugbountytips
* Technical tips
* Keeping a positive mindset
* Life is what you make it
#bugbounty #bugbountytips
📺 2022 Cybersecurity roadmap: How to get started?
@_JohnHammond joins @davidbombal and shares:
* The first thing to learn
* Recommended resources
* Should you do CTFs?
* Are degrees/certs useful?
and more
@_JohnHammond joins @davidbombal and shares:
* The first thing to learn
* Recommended resources
* Should you do CTFs?
* Are degrees/certs useful?
and more
📺 The best Hacking Courses & Certs? Your roadmap to Pentester success
@rana__khalil joins @davidbombal to discuss the best courses and best cert to become a pentester in 2023
* Skills you need
* How get experience & land a job
* #bugbounty
+ more
@rana__khalil joins @davidbombal to discuss the best courses and best cert to become a pentester in 2023
* Skills you need
* How get experience & land a job
* #bugbounty
+ more
🕵️♀️ So you want to be a SOC Analyst?
@eric_capuano's blog series on landing your 1st role
1. Set up a small VM environment
2. Put on your adversary hat and make some noise, emulate an adversary and craft detections, and more.
blog.ecapuano.com/p/so-you-want-…
@eric_capuano's blog series on landing your 1st role
1. Set up a small VM environment
2. Put on your adversary hat and make some noise, emulate an adversary and craft detections, and more.
blog.ecapuano.com/p/so-you-want-…
🪜 Dropbox Security Engineer Career Framework
Dropbox's documentation that outlines the scope, impact, and other expectations from junior individual contributor through Principal Security Engineer
Great reference 👍
Probably great due to @frgx et al
dropbox.github.io/dbx-career-fra…
Dropbox's documentation that outlines the scope, impact, and other expectations from junior individual contributor through Principal Security Engineer
Great reference 👍
Probably great due to @frgx et al
dropbox.github.io/dbx-career-fra…
👩🔬 Demystifying Security Research
@alexjplaskett covers topic selection, brainstorming and collaboration, motivation and mindset, note taking, surveying related work, and more
🧵 on what makes a good research topic
alexplaskett.github.io/demystifying-s…
@alexjplaskett covers topic selection, brainstorming and collaboration, motivation and mindset, note taking, surveying related work, and more
🧵 on what makes a good research topic
https://twitter.com/alexjplaskett/status/1620503997366022144
alexplaskett.github.io/demystifying-s…
🎓 Reflections on the CS academic and industry job
Candid reflections by @rown
See also his Part 2: "Why I chose OpenAI over academia"
rowanzellers.com/blog/rowan-job…
rowanzellers.com/blog/rowan-job…
Candid reflections by @rown
See also his Part 2: "Why I chose OpenAI over academia"
rowanzellers.com/blog/rowan-job…
rowanzellers.com/blog/rowan-job…
👩💻 Skills you need transitioning from pentester to Product Security
Great thread by @anantshri and many others
#infosec #appsec
Great thread by @anantshri and many others
#infosec #appsec
https://twitter.com/anantshri/status/1625156750453395460
🗺️ Creating a certification plan
Rohit Hegde shares his opinions on the pros/cons of certifications, how one can go about it, developing a plan, and more
abstraction.blog/2023/01/10/cer…
Rohit Hegde shares his opinions on the pros/cons of certifications, how one can go about it, developing a plan, and more
abstraction.blog/2023/01/10/cer…
🗺️ Security Certification Roadmap
473 certs grouped by:
* Communication & network security
* IAM
* Security architecture
* Asset security
* Risk mgmt
* Security assessment & testing
* Software security
* Security operations
By @PaulJerimy
pauljerimy.com/security-certi…
473 certs grouped by:
* Communication & network security
* IAM
* Security architecture
* Asset security
* Risk mgmt
* Security assessment & testing
* Software security
* Security operations
By @PaulJerimy
pauljerimy.com/security-certi…
📈 How to build your InfoSec career
@leifdreizler on why you should be writing blogs, appearing on podcasts, and presenting at conferences... and how to get started!
How to encourage your team to do the same
leif.substack.com/p/share-the-sp…
leif.substack.com/p/the-infosec-…
@leifdreizler on why you should be writing blogs, appearing on podcasts, and presenting at conferences... and how to get started!
How to encourage your team to do the same
leif.substack.com/p/share-the-sp…
leif.substack.com/p/the-infosec-…
💼 Update on being Independent [3 years later]
@zoph shares his reflections and lessons learned after being an independent AWS consultant for several years
zoph.me/posts/2023-01-…
@zoph shares his reflections and lessons learned after being an independent AWS consultant for several years
zoph.me/posts/2023-01-…
@zoph If you found this thread useful, please like/RT so more people can see it 🙏
If you want more like it, you can join 14,000+ of security professionals keeping up with security research in 10min/week:
tldrsec.com
Or follow me @clintgibler for more
If you want more like it, you can join 14,000+ of security professionals keeping up with security research in 10min/week:
tldrsec.com
Or follow me @clintgibler for more
• • •
Missing some Tweet in this thread? You can try to
force a refresh
