Here's how you can enter the field of Information Security without prior experience.

If the security domain peeks your interest you can dive into it from different angles. Be it using your technical skills, getting involved with incidents (or reading up about them), or coming at it from the perspective of risk management. Cross-fertilizing across these is key to the success of cyber/information security, and being a growing field there is a lot of demand for people who want to contribute.

Estude, estude muito. Existem cursos livres muito acessíveis sobre cybesecurity. Cogite a possibilidade de se graduar e se certificar na área.

Here are some resources to start with: ● Python for Everyone (free course) by Charles Severance. ● Hack the Box academy (free courses & practice) from the official HTB website. ● Kali Linux Training (free course) from the official website for Kali.

I have to disagree with some of the posts here! Entering network security prior to having experience has it own faults; but if you leverage education + certifications you will understand what you're working on prior to entering the field! I did this myself with Network Engineering and today I've spent the past 10-15 years as either a Network Architect or a Network Engineer for multiple different companies. Focus on the CISSP certification, as well as, CEH, and CHFI certifications. These ALONE will give you more knowledge then some people I've worked with in Network Security. I also HIGHLY recommend getting the Network+ and/or the CCNA as these will give you general networking knowledge that only add to your knowledge when entering!

Certification(s) certainly help, and it will demonstrate that your interest is both genuine and serious. Start indeed with the general understanding, the CompTIA one being a good starter. Depending on where you want to take things you can dive into specific fields of interests. CISSP is very comprehensive, rather something for further down the road ... also at it assumes and requires real experience.

A security professional with practical hands-on experience is an invaluable asset. Arm-chaired or text-book security professionals are competencies you definitely want to avoid. If you wish to establish credibility, then you have to walk the talk & not just throw the rule-book at teams who look to you for guidance and support. If you wish to consult on secure coding practices, know the basic of code and be familiar on how to read code. If you want to talk about container security to DevOps teams, then you should first be comfortable deploying a container using Docker and Kubernetes. What we observe is that it is not just enough to understand the security part alone. We also have to understand the underlying technology aspects of it as well.

Realizar cursos onde existam exercícios práticos, com o uso de laboratórios realísticos é fundamental para consolidar seu conhecimento em cybersecurity. Ter um laboratório próprio, onde você fará seus estudos é muito recomendado também.

Mantenha-se ativo na comunidade de cybersecurity através de redes sociais, eventos, aplicativos de mensageria, fóruns de discuss?o. Além de consumir conhecimento é muito importante compartilhar o que se sabe, esta troca só fará você crescer profissionalmente.

Networking has been a cornerstone in my journey from a junior engineer to a leader in the AI industry. The connections I've made at conferences and online forums have kept me informed about the latest trends and opened doors to collaborations that were pivotal for TetraNoodle's success. Engaging with peers in the field has provided me invaluable mentorship and insights into the ever-evolving landscape of AI and cybersecurity, underscoring the importance of community in driving innovation and growth.

Starting a career in information security without prior experience is possible by beginning with roles like help desk technicians, which provide foundational IT knowledge. Progressing to a tier one SOC analyst offers valuable insights into security operations. The key to success in InfoSec is a strong willingness to learn, as it's a continuous journey of growth and adaptation, not a fixed destination. Each role and challenge faced enriches one's skills and expertise in this dynamic field.

Various routes are possible, and at times it will happen almost naturally. For example as an engineer having a look into the security features for the platform(s) you are managing or maintaining, then volunteering to assist the security colleagues to activate or finetune more of them.

O processo de aprendizado em cybersecurity tem um come?o, mas n?o tem um fim. Para se manter atualizado é essencial sempre ter um tempo dedicado ao estudo, de preferência de forma auto didata.