登录查看更多内容

Last updated on 2024年7月29日

How can you effectively enter the information security industry?

由人工智能和领英社区提供技术支持

Information security is a fast-growing and dynamic field that offers many opportunities for professionals who want to protect data, systems, and networks from cyber threats. However, entering the information security industry can be challenging, especially for beginners who lack experience, credentials, or connections. In this article, you will learn some practical tips on how to effectively enter the information security industry and start your career.

此文章中的业界达人

由社区从 14 条内容中精选。了解更多

Alexandre Murakami

Security Practice Director Latam
Ryan Flores

Data | Technology | AI | Security | Forward Looking Threat Research | Blackhat Asia Review Board Member
Alexandra Mercz

?? Cybersecurity & Data Privacy | ??Transformation, Strategy and Governance | ?? Risk Management | ?? ISO 27001 Lead…

1 Assess your skills and interests

The first step to enter the information security industry is to assess your current skills and interests and identify your career goals. Information security is a broad and diverse field that covers various domains, such as network security, application security, cryptography, forensics, governance, risk management, compliance, and more. Each domain requires different skills, knowledge, and tools, and may appeal to different types of personalities and preferences. You should research the different domains and find out which ones match your strengths, passions, and aspirations. You can also take online quizzes, courses, or certifications to test your skills and interests and get a better sense of your potential career path.

添加您的观点

Ryan Flores

Data | Technology | AI | Security | Forward Looking Threat Research | Blackhat Asia Review Board Member
举报内容
Cybersecurity is a very broad field that's why it's important to assess your skills and interests to align to specific niche areas under the cybersecurity umbrella. Interested in offensive security? Penetration testing and red teaming is for you. Interested in policy, processes and governance? Compliance and audit. Interested in administration? Infrastructure security. Interested in investigations? IR and threat hunting. Interested in data and logs? SOC and SIEM. Interested in programming? Security automation and solution integration.

已翻译

赞
Alexandra Mercz

?? Cybersecurity & Data Privacy | ??Transformation, Strategy and Governance | ?? Risk Management | ?? ISO 27001 Lead Auditor | ?? SG 100 Women in Tech
举报内容
Begin by evaluating your skills and interests. Remember, this field is diverse and inclusive, offering opportunities for various skill sets and backgrounds. Whether your strengths lie in technical aspects like network security or governance and risk management, there's a place for you. Explore different domains to discover what aligns with your passions and aspirations.

已翻译

赞
Alexandre Murakami

Security Practice Director Latam
举报内容
Temos um campo de atua??o muito amplo na área de seguran?a da informa??o, isto é, temos uma área mais focado em governan?a (processos, compliance, riscos, prote??o de dados pessoais) e outra mais tecnológica. Porém, as duas áreas convergiram para atender o negócio organizacional, e seguran?a da informa??o está mais estratégico do que operacional. O profissional além dos desafios de estar sempre "antenado" e atualizado, precisa ter uma vis?o de negócio.

已翻译

赞
Shah Mijanur

Head of Security at Inmagine Group
举报内容
Build a resume that takes you at least from negative to neutral impact, which means knowing basic technical skills picked up in things like software engineering, system administration or network engineering. The best route to security straight out of college is going into a non-security technical role to learn the basics and then transitioning into the security team internally.

已翻译

赞
Rogerio Reis

Serial Entrepreneur (5 Companies Sold) | Cybersecurity Executive | Board Member | Investor | M&A Advisor | Startup & SMB Mentor
举报内容
é recomendável obter um diploma em áreas como Ciência da Computa??o ou Cybersecurity e buscar certifica??es reconhecidas como CISSP ou CompTIA Security+. Ganhe experiência prática através de estágios ou projetos próprios. Mantenha-se atualizado sobre as tendências e amea?as mais recentes em seguran?a cibernética. O networking é crucial, ent?o participe de conferências e grupos de discuss?o. Habilidades como resolu??o de problemas e comunica??o eficaz s?o importantes, assim como o conhecimento das leis de prote??o de dados. Experiência em TI ou desenvolvimento de software pode ser uma boa base, e participar de simula??es de seguran?a, como CTFs, pode aprimorar suas habilidades práticas.

已翻译

赞

加载更多内容

2 Build your knowledge and skills

The second step to enter the information security industry is to build your knowledge and skills in the domains that interest you. Information security is a constantly evolving field that requires continuous learning and updating of skills. You should be familiar with the fundamental concepts, principles, and best practices of information security, as well as the latest trends, threats, and technologies. You can learn from various sources, such as books, blogs, podcasts, webinars, online courses, certifications, or academic programs. You should also practice your skills by applying them to real-world scenarios, such as solving challenges, participating in competitions, or working on projects. You can use platforms like Hack The Box, TryHackMe, or CTFTime to find resources and opportunities to practice your skills.

添加您的观点

Eran D.

IT Manager | CISO | Cyber Security Specialist
举报内容
Continuous learning is key to building a strong knowledge base. Enriching yourself with the fundamentals through professional courses can help you achieve your goals and improve your skills. Be sure to attend conventions related to your field of study. These events are great opportunities to meet potential employers.

已翻译

赞
Khushboo Chauhan

Information Security Engineer @ Airtel | Data Privacy | Network and Security | 3x LinkedIn Top Voice
举报内容
The very first thing to enter information security, is not about knowing everything about it but knowing the relevant skills and technology. Practicing those skills by applying into practical scenarios or doing certifications and learning is the right way. From a student perspective there are a lot of CTF hackathons to apply their learnings and findings.

已翻译

赞
Waqar Ahmed

Founder and CEO @ Securitanium | Black Hat Speaker | Member FPCCI Committee on Cyber Security
举报内容
Not only do you need to polish your skills but you also need to prove it to potential employers. One way to do that is to get relevant certifications but there is also another option of completing labs or boxes on online platforms to prove your skills. Bug bounty is great as well if you want to prove skills on offensive side.

已翻译

赞
Anderson Flor Ferreira

Coordenador/Supervisor em Seguran?a da Informa??o na área de GRC | Analista/Especialista/Consultor em Seguran?a da Informa??o (GRC)
举报内容
Existem muitos recursos online para desenvolver habilidades em seguran?a da informa??o. Plataformas como Coursera, Udemy e Cybrary oferecem cursos desde fundamentos até tópicos avan?ados. Livros como "Hacking: The Art of Exploitation" e "The Web Application Hacker's Handbook" s?o ótimos. Além disso, praticar em laboratórios virtuais e participar de comunidades como Hack The Box ou Reddit's r/NetSec pode ajudar a aplicar e expandir seus conhecimentos.

已翻译

赞

3 Build your network and reputation

The third step to enter the information security industry is to build your network and reputation in the community. Information security is a collaborative and social field that relies on sharing information, ideas, and feedback. You should connect with other professionals, mentors, peers, and employers in the information security industry and learn from their experiences, insights, and advice. You can network online or offline, through platforms like LinkedIn, Twitter, Discord, or Meetup, or by attending events, conferences, or workshops. You should also showcase your skills, knowledge, and achievements by creating a portfolio, a blog, a podcast, or a YouTube channel, or by contributing to open source projects, publications, or forums. You can use platforms like GitHub, Medium, or HackerOne to build your portfolio and reputation.

添加您的观点

Alexandre Murakami

Security Practice Director Latam
举报内容
Uma ótima forma de construir sua rede de reputa??o é participando de inúmeros eventos que hoje inundam o mercado de seguran?a. Praticamente temos um evento por semana, onde diversos profissionais participam e compartilham conhecimento. Também existe a possibilidade de aos poucos almejar um posicionamento como palestrante de um dos eventos, assim poderá ganhar grande visibilidade.

已翻译

赞

4 Prepare for the job search

The fourth step to enter the information security industry is to prepare for the job search and application process. Information security is a competitive and demanding field that requires a high level of professionalism and competence. You should prepare a resume, a cover letter, and a LinkedIn profile that highlight your skills, knowledge, achievements, and value proposition. You should also research the companies, roles, and requirements that interest you and tailor your application materials accordingly. You should also prepare for the interview process, which may include technical, behavioral, and situational questions, as well as practical tests, such as coding, hacking, or analysis. You can use platforms like Glassdoor, Indeed, or CyberSeek to find job listings and reviews.

添加您的观点

5 Keep learning and growing

The fifth step to enter the information security industry is to keep learning and growing as a professional. Information security is a dynamic and challenging field that requires constant adaptation and improvement. You should seek feedback, mentorship, and guidance from your colleagues, managers, and mentors, and learn from your successes and failures. You should also pursue further education, training, or certification to update your skills and knowledge and advance your career. You should also stay updated on the latest developments, innovations, and issues in the information security industry and participate in the community. You can use platforms like Coursera, Udemy, or SANS to find courses and certifications.

添加您的观点

Alexandre Murakami

Security Practice Director Latam
举报内容
Como o ecossistema de fabricantes na área de seguran?a é muito amplo, temos as certifica??es que s?o focadas a estes "vendors", comprovando o expertise do profissional para a solu??o tecnológica em quest?o. Mas também o profissional de seguran?a poderá buscar as certifica??es que s?o agnósticas a "vendors", como exemplos ISACA, SANs, as ISOs, EC-Council, etc.

已翻译

赞

6 Enjoy the journey

The sixth and final step to enter the information security industry is to enjoy the journey and celebrate your achievements. Information security is a rewarding and fulfilling field that offers many opportunities for personal and professional growth, as well as for making a positive impact on society. You should appreciate the challenges, opportunities, and experiences that come your way and have fun along the way. You should also recognize your accomplishments and contributions and share them with others. You should also balance your work and life and take care of your physical and mental health. You can use platforms like Reddit, Hacker News, or Infosec Twitter to find inspiration, motivation, and support.

添加您的观点

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Brendon F.

?? Strategic Leader | Governance & Operations Architect | Driving Organizational Excellence & Innovation | Aligning Strategy with Business Outcomes | CISSP, CISA, CDPSE, PCIP, RISK
举报内容
When breaking into the information security field, consider gaining relevant certifications like CompTIA Security+ or Certified Ethical Hacker (CEH), building practical skills through hands-on experience, staying updated on industry trends, networking with professionals, and showcasing your expertise through a strong online presence or a portfolio of projects. Additionally, pursuing a formal education in cybersecurity can enhance your qualifications.

已翻译

赞

Information Security

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How can you effectively enter the information security industry?

1

2

3

4

5

6

7

1 Assess your skills and interests

2 Build your knowledge and skills

3 Build your network and reputation

4 Prepare for the job search

5 Keep learning and growing

6 Enjoy the journey

7 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

更多Information Security相关文章

更多相关阅读内容

How can you effectively enter the information security industry?

1

2

3

4

5

6

7

1 Assess your skills and interests

2 Build your knowledge and skills

3 Build your network and reputation

4 Prepare for the job search

5 Keep learning and growing

6 Enjoy the journey

7 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

查看其他技能