SOC analyst
Exp: 1+ years
Currently working in a MSSP company.
Microsoft Environments
I have no cert due to no time to study
But packed with L1-L2 exp

Reason for changing company is because the compensation is too low considering working with a lot of clients.

I’ve been in IT for 15 years, database engineer, sysadmin, devops engineer, now senior cyber security engineer.

I have skirted my way here with a large gap in networking knowledge. I don’t even know where to start. I start reading about where to start and I get pulled every which way.

I have my net+. I know the basics. But someone asks me a question and my mind blanks.

The company I work for is bringing on an enterprise grade firewall solution in 2027 and I would like to prepare so I can talk to vendors and teams without sounding dumb. I also want something that looks nice on a resume.

I was thinking about studying and taking the CCNA, but was told since we don’t use cisco, would be a waste of time. I took the ICND1 in 2012 and passed but back then things were way different. I looked into the AWS certified advanced networking certification, but told it’s worthless on a resume because no one knows about it. I will probably be laid off in 2028 so I am preparing myself also for my next venture.

My company pays for trainings so cost is not a factor. I would like to take advantage of this while I can.

What are your thoughts?

Hey everyone,

I am graduating this upcoming spring with my B.S. in Cybersecurity and I am hitting the job hunt hard. Because I am a wheelchair user on disability, working fully remote is not just a preference for me, it is a strict necessity for physical accessibility.

I know remote entry-level IT and security roles are incredibly competitive right now, so I am casting a wide net. My immediate goal is to land a remote Spring internship to gain more production experience, or lock down a full-time Junior SOC Analyst or IT Help Desk role for when I graduate.

Here is a quick rundown of my current background:

Education: Graduating Spring 2027 with a B.S. in Cybersecurity. I also hold an A.A.S. in Cyber Crime Technology, which gave me a solid foundation in computer forensics and core IT skills.

Certs: Earned my CompTIA Security+ this past May.

Homelab: Built a custom 3-VM Wazuh SIEM/XDR environment using VirtualBox, Ubuntu, and Kali Linux. I simulated live SSH brute-force attacks, mapped them to the MITRE ATT&CK framework, and independently triaged over 1,000 alerts to get hands-on experience with alert fatigue.

Hands-on Practice: I am currently in a school-based internship that focuses heavily on Hack The Box (HTB) modules tailored specifically to Blue Team operations.

Competitions: I recently participated in a CTF event and placed 5th overall out of 83 individuals.

Given that I have to secure a remote position, does anyone have advice on specific companies that hire remote Spring interns or are known to be disability-inclusive for early-career full-time IT roles? Any advice is greatly appreciated.

Thank you.

I’m currently a SOC engineer making $125K. There’s an internal GRC position I’m interested in, but it’s one pay grade lower, with a max of $120K and a midpoint of around $110K. I have one year of GRC experience, so I’m not sure what salary they’d offer me.

The thing is, it’s been weeks and I still can’t stop thinking about this job. The posting closes this week, and I’m still going back and forth because taking a pay cut doesn’t make much financial sense.

My boss is pretty close with the GRC manager since they both report to the same CISO. Should I talk to my boss and ask for career advice about moving into GRC? I wouldn’t directly say I want to apply for this job, but I’m hoping he might be able to help somehow.

I’m also wondering if there’s any chance this could eventually lead to a GRC senior position, where I could make my current salary or more.

What would you do? Apply and see what happens, or stay where I am? Anyone ever had experience going to a lower pay grade? Is HR very strict about it?

Hello,

I'm currently a cybersecurity student who is on track to graduate in December next year, and im looking for some advice on how to prepare for this brutal job market 😢

Here's some background information

• I already have an associate's degree in IT.
• I'm pursuing my bachelor's in cybersecurity.
• I work as a university IT administrator, where I get hands-on experience with GitHub, Jenkins, Docker, Kubernetes, and infrastructure management.
• I already have CompTIA Security+.
• I have several cybersecurity and cloud-related projects on GitHub, with more planned before graduation.
• I'm going to start working on earning my AWS Solutions Architect – Associate certification within the next month or two.

I've been studying for the CCNA, but due to the test updating in February and trying to balance school, work, certifications, projects, etc., I'm feeling some burnout.

I'm considering taking a break and eventually switching to Network+ instead because I do still want to develop my networking skills, as it's a very core skill to have in cybersecurity, but I'm not entirely interested in becoming a full-blown network engineer.

My questions are:

1. For someone pursuing cybersecurity engineering rather than network engineering, is CCNA significantly more valuable than Network+?
2. Would Network+, Security+, and AWS SAA be a competitive certification combination for a new graduate?

I'm trying to make the most of my remaining time during college before I graduate, but I don't want to burn myself out to the point where I want to give up. So if anybody can give me any tips or assistance, that would be phenomenal.

Thank you!

Hi all,

Looking for some advice from anyone who’s been in a similar situation.

I’m 29 and have been into cybersecurity since I was 16. Self-taught, spent loads of time on IRC, reading ezines and messing around with computers. Eventually got into web app security and spent a fair amount of time doing responsible disclosure, finding vulnerabilities here and there. Never went down the academic route, but somehow landed a place on a graduate programme at a well-known European consultancy.

I’ve now been in the industry for over eight years, working across three well-known UK consultancies and a European one. I’ve picked up CVEs, Hall of Fame mentions and bug bounty recognition along the way. I know my stuff and can hold my own, but honestly, I’m bored and fed up.

The lack of progression, the bullshit around titles and the salaries have started getting to me. Then there’s the management. I’ve worked with too many managers who have no people skills and seem to have got the job purely because they were good technically. Being good at pentesting doesn’t mean you should be managing people, but that seems to get overlooked constantly. The whole promotion process feels like a mess.

My goal was always to get to $10-15k+ a month. I know that’s a lot of money, and I don’t expect it just because I’ve been doing this for eight years. But looking at what seems to be a £100–150k ceiling for employed pentesting roles in the UK and Europe, I’m struggling to see a route there. It feels like I could keep collecting CVEs and moving between consultancies without getting any closer to what I actually want.

I used to live for computers and pentesting. These days, I care more about making money and having control over my own time. I still enjoy parts of the work, but I don’t want to keep doing the same thing for another ten years just for a different title and a bit more salary.

I’ve wanted to build a business of my own for a while, potentially a consultancy, but I don’t know how realistic that is or whether I’d just be swapping these frustrations for different ones. Now that the employed route doesn’t seem to lead where I hoped it would, I feel a bit stuck.

Anyone else been here? Did you go independent, start a consultancy or move into something else? Would appreciate hearing from people who’ve actually made that jump, especially in the UK or Europe.

For context I am 24 and live in Australia.

So recently I left audio visual installing after working in the industry for almost 5 years, and while job hunting I found an ad on facebook for a place called Cyber Revolution here in Australia that works as an all-in-one cyber security training company. Basically the jist is you pay them between $6-9k for 3-6 months of training in chosen CompTIA certifications and at the end they set you up with a position at a partnered company (e.g. CommBank, Government etc.). It is 100% online learning with mentors that teach the individual certs one at a time.

My question is this; Is it worth doing this training program to get me into the cyber security field as a person with 0 IT related certifications?

My research has shown that like 99% of people recommend getting a job as an IT helpdesk worker, but any job listings I find ask for experience or certs in IT fields. Is this training program a good option or not? And if not how do I get into the field with 0 IT certs and no professional IT experience?

Personally I have been building and selling custom spec PCs since I was 18 as well as dabbling in HTML, C#, Python and a couple game design programs during high school so I know I enjoy that sort of stuff.

Any advice is appreciated, cheers!

I’m trying to transition from security into IT, and I’m stuck between two opportunities.

Option 1: IT Field Technician + Part-Time Security
● $25/hr, full time IT field technician throughout LA County
● Working for a small MSP
● Troubleshooting hardware and network issues at client sites
● Deploying and configuring workstations, printers, and other equipment
● Working with routers, switches, wireless access points, and network closets
● Paid certifications through the employer
● Using my own vehicle to travel between client sites, with mileage reimbursement
● I would also work part-time as a cleared security guard earning $36/hr to help maintain my active Top Secret clearance.
● My long term goal is to move into network engineering or cloud.

Option 2: Union Security Officer in San Francisco
● $46/hr plus around $6/hr in health and welfare benefits
● Union position
● Would allow me to maintain my active Top Secret clearance
● I would stay in security and study for additional IT certifications on the side.
● Significantly higher pay, but I wouldn’t be gaining professional IT experience directly.

I have CompTIA Network+ and Security+, along with home lab experience using Active Directory, Windows Server, DNS, Group Policy, and PowerShell, but no professional IT experience yet.

The biggest issue is that taking the San Francisco security job would mean relocating my fiancée and kids to the Bay Area, where housing is expensive. The IT job pays less, but we could stay in LA while I gain hands on experience and supplement my income with part time cleared security work.

What would you do in my situation? Would you take the IT field technician job and work security on the side to build professional IT experience, or take the higher-paying union security job and study for IT certifications outside of work?

Could a year or two at a small MSP as a field technician help me move toward network engineering, or would it be smarter to prioritize higher pay and pursue IT later?

I’d appreciate honest advice

Hi, I’m a Year 12 student in the UK studying A-level Computer Science. I’m looking for one week of school work experience in June 2027 around Reading or nearby areas; the exact school week is still unconfirmed. I’m interested in cybersecurity, networking and cloud, with a technology degree apprenticeship as a possible next step.

I’ve passed my CCNA and AWS Certified Cloud Practitioner exams. I’ve been contacting employers directly, including IT support, networking and cloud companies, but haven’t secured a placement yet. I’d be happy to shadow a team and help with suitable supervised tasks.

For people working in security, which teams are realistic to approach for a school placement this short? Would a managed IT provider or internal infrastructure team be a better starting point than a specialist security team?

If you know of employers or school work-experience programmes around Reading or Berkshire that offer this kind of exposure, I’d appreciate names or published application routes. I’d like to find a suitable host and learn how the work is done in practice.

Thanks for any advice or recommendations.

Hello everyone.

I am an 18 year old and im stuck.

I don't know whether to do an apprenticeship or just go University.

The Apprenticeship is a level 6 and 2 years long while if I go uni it is a level 8 and 4 years long.

For uni I have the exact minimum points to enter the course aswell so if the minimum goes up then I cant go uni.

I have no idea which one to do and im stuck. Please help, what would be better.

I'm a second-year Electronics and Communication Engineering (ECE) student, and I'm trying to decide which field to focus on: cybersecurity or hardware.

I'd love to hear from people working in these fields or students who have explored them.

Which field offers better job opportunities and salary growth in the long run?

Which has better internship opportunities for ECE students?

How is the demand for both fields in India and internationally?

Which field is easier to enter as a fresher, and what skills should I start learning now?

Is combining both through embedded systems security, IoT security, or hardware security a better option?

I want to choose a field with strong future demand and good career growth, not just follow a trend. I'd really appreciate your honest advice and personal experiences.

Hi everyone,

I’m looking for honest advice from people currently working in cybersecurity.

I have 10+ years of experience as a QA Automation Engineer. Currently, I’m upskilling in AI testing to keep my skills relevant as the industry evolves.

However, I’ve been thinking about moving beyond QA and building a career closer to the AI industry. Cybersecurity is one area I have been exploring because I keep hearing about its growing importance, but I want to understand the actual career opportunities rather than make a decision based on current trends.

A few things about my situation:

• I want to leverage my existing technical experience rather than start my career completely from scratch.
• I’m not interested in becoming a pure software developer.
• I’m also not looking to move into Product Management, as I’m concerned about the competition in that space.
• I’m open to learning new technologies and investing time in building practical skills, but I want to make an informed decision before committing to a major transition.

I would be glad to hear your honest opinions on a few questions:

1. Is cybersecurity a good career transition for someone with 10+ years in QA automation?
2. Which cybersecurity roles would make the most sense for my background?
3. What is the current job market actually like? Are companies hiring people transitioning from other background, or do most cybersecurity roles require previous hands-on security experience?
4. How difficult is it to enter the field at a mid-career stage?
5. If you were in my position, would you make this transition?

I understand that no field is completely safe from AI or market changes. I’m not expecting a guaranteed job or an easy transition but want to move from QA domain.

I’d especially appreciate perspectives from people already working in cybersecurity or those who have successfully transitioned from any other technical role.

Thanks in advance for sharing your experiences and advice!

Hello guys thank u for ur answers
i have a few question

i'm 20 years old guy from Kazakhstan currently i'm working as system administrator i very love my job but i always had some interest in cybersec prefer red/blue team i resolves some ctf in thm but in the last time because of AI i see a lot of changes on web sites with my courses and i have a feeling that i wastes my time
in my first plan i though that i will try to change my job in 2 years but now i have a little panic and thinks to hurry up

So can you please advice me with some courses or web sites which could help me to start learn "new cybersecurity" usually i use ai to write some scriptes and simple soft (early i learned C# and wrote some projects) on powershell but tbh this is everything
Thank u all for your advices

Buongiorno, sono laureata in giurisprudenza da 8 mesi e vorrei lavorare in futuro nell' ambito della compliance aziendale. Attualmente sto svolgendo un tirocinante in un ente del terzo settore dove mi occupo di appalti e ogni tanto di certificazioni ISO, negli ultimi giorni mi si è presentata una Nuova opportunità un corso regionale (IFTS com titolo di accesso il diploma) in cybersecurity, abito in cui vorrei costruire un profilo giuridico-tecnico ibrido. Il corso durerà un anno ed è molto impegnativo dal punto di vista degli orari. L'unica altra alternativa sarebbe iniziare al pratica forense. Quale decisione dovrei prendere? Investire nel corso di cybersecurity nonostante non sia un master ma un corso regionale tecnico per diplomati o fare la pratica forense? Ovviamente cercherei di far coincidere tutto con il mio tirocinio extracurricolare nell' ente del terzo settore

Hi everyone,

I’m based in Italy and I recently earned my CompTIA Security+.( currently trying to obtain CCDL1)

My goal is to join a SOC analyst team, and I’d love to hear from people already working in the field.

Longer term, I’d also like to move elsewhere in Europe, so any tips on the job market for SOC roles across the EU, and what employers look for in candidates coming from abroad, would be really appreciated.

any advice is welcome!

As a technical writer, I have worked with a few cybersecurity companies. I wanted to pursue further in my previous organization (cybersecurity domain). However, due to my health issues, I had to resign. Now, my current employer doesn't give me much exposure as a writer. To be honest, my current role in this company has become monotonous, with nothing new to do. I miss working in cybersecurity domain where too many things are happening at the same time. I plan to switch from writing to product owner in this domain. Is it a long shot for someone coming from non-engineering background? Is it too late to switch in this domain? I am aware there are already many folks with cybersecurity experience waiting to get hired. Can someone guide me through?

P.S. I have a bachelor's degree in computer applications and post graduation in technical writing.

Hey People!

Myself, a 3rd year undergraduate from IIT Kanpur (not CS) and I've recently started seriously exploring Information Security as a potential career path (Am I too late? T_T). I've always been interested in it and I find myself particularly drawn to the hands-on side of the field, especially CTFs, offensive security and solving security challenges.

I'm currently working through the PClub InfoSec Roadmap and learning the fundamentals. My goal is to secure an internship in this field in Summer 2027 (and I'm willing to relocate).

I'd love some advice on -

1. Learning path: Is completing the PClub InfoSec roadmap a good starting point? What should I focus on beyond it? Since i'm still early in my journey, so I'm trying to figure out how to prioritise my learning rather than jump between too many topics.
2. Projects and experience: What kind of projects, CTF achievements/ certs or GitHub work would make a beginner's application stand out? (Would working on an undergraduate project/research under a prof help)
3. Specialisation: Given my interest in CTFs and practical security challenges, should I initially focus on penetration testing and web security or explore other areas as well? (If yes, please do specify)
4. Internships: Which reputable cybersecurity companies hire interns, including students from non-CS branches? Is reaching out directly to security teams or recruiters worth trying?

I'd especially appreciate advice from people who entered cybersecurity from a non-CS background and I wanna secure my first security internship while still in college.

I'm willing to put in the work; I just want to make sure I'm working towards the right thing :)

Thank you!

Hi can anyone help me with understanding logs I am doing it with ChatGPT and how to build home labs and how to be a job is there any demand for L1 roles in India. Like is there any hope that I would land a job L1 in places like noida and gurugram

Hey everyone,

I'm looking for some advice from people working in digital forensics, DFIR, or corporate cybersecurity in India.

Govt lab openings are basically stagnant, so I'm trying to pivot to the private corporate sector in Delhi NCR (Gurgaon/Noida), but I'm completely lost on how entry-level hiring actually works here.

A quick background on my profile:

• BSc and MSc in Forensic Science (regular).
• Qualified UGC NET (Assistant Professor) in Forensic Science.
• Qualified FACT and FACT+ in Digital Forensics.
• Currently pursuing an MSc in IT through IGNOU to build my technical base.
• Currently preparing for CompTIA Security+.
• Can write scripts in Python and Bash.
• Have theoretical knowledge of standard forensic tools, but zero hands-on experience in corporate environments.
• Past internship was with state police in the audio/video division and field work, not cyber cells or corporate setups.
• Location is strictly Delhi NCR (cannot relocate).

What I want to understand:

1. What entry-level jobs should I target in Gurgaon/Noida?
2. Is it realistic to land a junior digital forensics or DFIR role directly with this background, or do I have to start in an L1 SOC / triage role first?
3. How do private firms (like Big 4, consulting) view candidates with a traditional forensic science MSc + IGNOU IT? Do FACT/FACT+ hold any value in the private sector?
4. What practical things should I focus on learning right now to actually stand a chance in technical interviews?

From Warehouse to Blue Team – My Journey Towards SOC L1 and Eventually DFIR

Hey everyone!

Back in 2010, I was doing some amateur web design, which I continued until around 2014. After that, my PC was pretty much just for gaming. I've always been a gamer, and I've always wanted a job that involved computers, but you know how life goes. I never had the experience, and probably not enough motivation to actually make it happen.

But over the past year, something changed. My motivation has been stronger than ever, and I finally decided to do something about it.

I spent about two months just watching videos, reading, researching, and trying to figure out what I actually wanted to do.

At first, I thought networking was the way to go, so I started with Cisco Packet Tracer and completed Network+ and Security+. But deep down, cybersecurity was always something I wanted to get into, even as a kid.

So I decided to fully commit to it. My long-term goal is DFIR (Digital Forensics and Incident Response).

I know this path takes a lot of hard work, patience, and curiosity. Luckily, I've got plenty of curiosity and motivation!

Over the last month and a half, I've been studying pretty much every day. I completed the TryHackMe SOC Level 1 pathway, along with a few additional rooms related to SOC and incident investigation.

At the same time, I've been doing LetsDefend and BTLO labs almost daily.

Here's a rough overview of what I've been learning and working with:

• Linux & CLI: Bash, sed, awk, grep, manually extracting data, filtering and investigating logs through the command line, including Linux and web server logs.
• Windows Event Logs: Spent quite a bit of time learning Sysmon, Security Event Logs, and System Events.
• Log analysis tools: Timeline Explorer for CSV files, Hayabusa for deeper Windows event log parsing, and occasionally DeepBlueCLI.
• Network analysis: Zeek logs, some basic RITA, Wireshark, and a bit of TShark through the CLI. Enough to start recognizing things like DNS exfiltration and suspicious network activity.
• Malware & email analysis: Basic malware investigation and analyzing suspicious email attachments using CLI tools.
• Memory forensics: Worked through a few labs involving raw memory dumps.
• SIEM: Hands-on experience with Splunk, ELK/Kibana, and Microsoft Sentinel. Splunk feels the most comfortable to me, although I have to admit that I find SIEM work a little boring compared to digging through logs manually in the CLI.
• Threat intelligence & enrichment: IP reputation checks, sandbox analysis, and other enrichment techniques during investigations.

I also have a ridiculous amount of printed cheat sheets lying around, and I'm constantly trying to learn several things at once.

And that's exactly where my problem starts.

After roughly a month and a half of seriously focusing on SOC L1 skills, I feel like I've hit a wall.

There's just so much to learn, and I'm starting to realize that trying to keep up with everything at the same time isn't sustainable. The more tools and techniques I discover, the harder it gets to decide what actually deserves my attention.

I enjoy digging into logs, investigating suspicious activity, and figuring out what happened. But I'm also aware that what I personally enjoy and what an entry-level SOC analyst actually needs to know might be two different things.

So here's my main question for you guys, especially anyone currently working as a SOC L1 analyst or who started their career in that role:

What should I REALLY focus on to become job-ready for a SOC Level 1 position?

Which skills should I know really well, and which ones am I probably going too deep into for an entry-level role?

I'm not looking for shortcuts, and I definitely don't expect to become an expert overnight. I'm more than willing to put in the hours. I just want to make sure I'm putting those hours into the right things instead of spreading myself too thin.

My motivation is huge, but I'm starting to understand that motivation alone isn't enough if there's no structure behind it.

Any advice, even a rough roadmap based on your real-world SOC experience, would mean a lot.

Thanks to anyone who takes the time to read this and share some advice!

Cheers!

Graduated in 2023 with a computer science degree, worked as a developer intern for 6 months, then got into graphic design and did that until Nov 2025.

Freelanced for a bit after that, but eventually decided to leave design because of AI and my parents wanting me to get into something related to what I studied 💀

Now I’m trying to get into cybersecurity, learning slowly but struggling to catch up with everything. Meanwhile, I have a career gap of 1 year building up on my resume and I’m switching domains AGAIN.

Be honest, am I cooked? 😭 Is it still realistic to get an entry-level cybersecurity job in this situation, or have I made things unnecessarily difficult for myself?

Ps, looking for serious validation:( i feel soo bad idk how I managed to create an year gap

Hey everyone!
It’s been over five months since I started applying for jobs, and I’ve been finding it difficult to get interview callbacks. I’m a cybersecurity graduate actively looking for opportunities in the field.
I’d really appreciate any advice from cybersecurity professionals on how I can improve my profile, strengthen my resume, or make myself a more competitive candidate.
I’m also struggling to understand what the cybersecurity interview process typically looks like how many rounds there are, what kind of technical questions to expect, and how best to prepare for them.
If anyone has been through a similar experience or is currently working in the industry, I’d love to hear your insights or guidance.
Thanks in advance for your help!

I’ve started preparing for entry-level SOC analyst roles, but I often hear people say that the entry-level cybersecurity market is already saturated.

Is that true? If so, how can beginners realistically break into cybersecurity? Would you recommend focusing on defensive security or exploring offensive security instead?

I’d appreciate honest advice from people in the field.

​

Ciao a tutti, qualche mese fa ho postato qui chiedendo cosa avreste fatto se aveste avuto un tempo limitato per cambiare completamente carriera e costruire un futuro nell'IT/cybersecurity.

Aggiornamento veloce: ho continuato.

Da allora ho ottenuto le certificazioni CompTIA A+, Network+ e Security+, ho costruito un piccolo homelab con Windows Server/Active Directory/Linux, ho continuato a studiare Informatica e ora sto per iniziare il mio primo vero lavoro in IT come tecnico informatico nel settore sanitario.

Quindi finalmente sono entrato nel settore IT.

La mia motivazione originale per scegliere questo campo è stata sempre la cybersecurity, in particolare la Red Team/sicurezza offensiva. Ma più studiavo il mercato, più mi rendevo conto che cercare di tuffarmi direttamente nel pentesting con un paio di certificazioni e senza esperienza reale nel settore IT probabilmente non era il percorso più intelligente.

Ora sto cercando di decidere su cosa costruire nel prossimo paio d'anni.

Un piano che sto considerando è all'incirca:

Supporto IT → Ingegnere Cloud → automazione/AI → Sicurezza Cloud/Identità → eventualmente Sicurezza Offensiva / Red Team

L'idea è di costruire prima una carriera tecnica forte, commerciabile e finanziariamente stabile, mentre continuo a sviluppare competenze di sicurezza finché non ho abbastanza esperienza per perseguitare seriamente ruoli offensivi.

Il Cloud mi interessa perché mi costringerebbe a sviluppare competenze in infrastruttura, networking, Linux, identità, Python/PowerShell, Terraform, container e automazione — tutte cose che dovrebbero anche trasferirsi bene nella sicurezza.

Allo stesso tempo, l'AI sta cambiando rapidamente l'industria, quindi non voglio passare i prossimi 3–5 anni a seguire un percorso che sta già diventando obsoleto.

Quindi la mia domanda ora è diversa dal mio post originale:

Se fossi nella mia posizione oggi, essendo appena entrato nel settore IT, su cosa punteresti la tua attenzione dopo?

Andresti prima sul Cloud/DevOps e poi sulla sicurezza? Andresti direttamente verso la sicurezza? Ci sono aree emergenti che coinvolgono il cloud, l'AI e la cybersecurity che pensi diventeranno particolarmente preziose?

Le mie priorità sono fondamentalmente:

lunga domanda + stabilità finanziaria + solide competenze tecniche + eventualmente avvicinarmi il più possibile alla Red Team/sicurezza offensiva.

Sono particolarmente interessato a sentire persone che lavorano già nel Cloud, DevOps, Ingegneria della Sicurezza, Pentesting o Red Team.

Il primo passo era entrare nel settore IT. Ora voglio assicurarmi di scegliere la direzione giusta per il prossimo passo.