In preparation for this week's talk at
California State University, Fresno
, I've compiled a list of training and some key points for those thinking about starting a career in cyber or IT.
"Over the years I have had the privilege of working alongside some amazing people." -Me, circa 2024
What makes them stand out as amazing?
- We will spend most of our days together, so we have to work well together
- They are Motivated and always looking to improve | Excited to be here and learn.
- They work hard and have good work ethic.
- They are able to communicate well and have great soft skills
What can you do to Stand out?
- Don't be afraid to experiment with new ideas, tools, technology and processes. Even if initial tests fail, valuable insights can guide you towards more effective solutions and skills that others lack.
- Find hobbies, and things that you think are interesting. Go to places and do meet ups, find other activities that you like to do. This helps you in some many areas, and it's just really Fun!
- Cyber/IT is just a small part of the whole. See what else is out there, and understand the people you are supporting. Its people first!
I was/am all over the place trying different things, enjoying life
Nutritionist | Personal Trainer | Photographer | Cinematographer | Wook working classes | Product Development for Rebook | Owned and operated 3 businesses | Foster parent | Drummer | Gardening | Architecture enthusiast
Get your foundation and then select a focus
?Be Consistent, yet Flexible in Vision and Tactics:
- Maintain a clear purpose but be flexible with the ways to achieve it. Tactics can change over time as long as they align with the overarching mission.
Example: I got out of film and wanted to get back in. So, I started posting on TikTok every day. I slowly grew my following and portfolio.
Example: I wanted to complete more certifications. So, I have a goal of always having a certification I’m working on. Even if that is Mico certifications. EAT The Elephant
Example: Willem Dafoe had a great quote. "Get your foundation and then start to focus in on the details."
How do I gain the “Right” Experience?
- Micro Certifications: Free and Quick to complete. Allows you to add items to your resume and experience. Gives your broad range of skill sets.
- Certifications: Allows you to focus on a topic. But starting with the basics of Security + and Network +.
- Internships / Work Placements: Having a cybersecurity work placement on your resume demonstrates practical experience and commitment to the field.
- CTF (Capture-The-Flag) Events: Participating in CTF competitions provides hands-on experience in solving real-world cybersecurity challenges.
- Volunteering: Consider volunteering for cybersecurity-related projects or events. Check out Skull Games
- Networking: Connect with professionals in the field, attend conferences, and join relevant online communities.
- Set Up Home Labs: Create a lab environment to practice different techniques and tools.
- Contribute to Open-Source Projects: Collaborate on open-source security projects to enhance your skills.
- Bug Bounties: Explore bug bounty programs to find and report security vulnerabilities.
- Find a Mentor: Feedback is Key. The Army has a saying, Shoot – Move - Communicate
What Resources | Training are available?
Network/Security (Free)
- Cisco Skills For All
: Various courses, including cybersecurity.?
- Juniper Learning Portal
:?Free courses through their Learning Portal. You can learn about Junos OS, Mist AI, and more. Additionally, they provide recertification options for existing Juniper certifications.
- Aruba Training
:?Aruba’s training program covers networking and security.
- Palo Alto Networks
:?Free Palo Alto Cyber Certifications
- Aviatrix ACE Program
:?Aviatrix focuses on multi-cloud networking and security. Their ACE program offers certification?and expertise in cloud networking.
- Fortinet Training for Cybersecurity Professionals
:?Fortinet provides free training for cybersecurity professionals.?
- IBM Training - Free
:?Curated learning content used to acquire various skills or knowledge for a specific product, solution, job role or technology area. Collections can also be role-based and include badges
- RIPE.Net
: Setwork and Security Training. Free Training, in preparation for certifications.
Cyber Security Centered (Free)
- AttackIQ Academy
: AttackIQ offers free courses in MITRE ATT&CK, purple teaming, and breach & attack simulation.
- FIRST.ORG
: FIRST is providing several different trainings with the goal to educate new CSIRTs and enhance the capabilities of current teams. Free CSIRT Basic Course.
- CodeRed by EC-Council
: CodeRed offers free courses in cybersecurity.
- ?(ISC)2 1MCC
:?(ISC)2 offers the 1MCC (One Million Cyber Challenge) program.?
- MITRE ATT&CK Training
: MITRE ATT&CK is a framework for understanding adversary behavior. Their training resources help enhance cybersecurity skills and knowledge.
- MAD20 for Individual Skills Development on MITRE ATT&CK
: Threat-informed defense training on MITRE ATT&CK, offensive and defensive skills to combat cyber threats. Earn Continuing Professional Education (CPE) credits and certifications free.
- Vanta Security Awareness Training (SAT)
: Covers essential security topics, including reporting suspicious activity, protecting accounts, and secure data handling.
- Microsoft Defender XDR Ninja Training
: This training program focuses on becoming a Microsoft Defender XDR ninja.
- AWS Educate
: AWS provides educational resources through AWS Educate. It’s a great platform for learning about cloud computing, AWS services, and more.
- Duo Level Up
?: Duo offers a course on protecting applications using their security solutions.?
- Rapid7:
Cyber product Training Free.
- Forage
: Cyber simulation to showcase your knowledge & get noticed by recruiters from top companies.
- Salesforce Trailhead:
Free Training, Badges, and certifications in Cyber + Others.
Cyber Security Centered (Paid)
Google (Security, Network, Developer)
Developer Centered Courses (Free)
- Databricks Training
: Databricks provides training related to data engineering, analytics, and machine learning.?
- Postman Academy
: Postman Academy offers both instructor-led workshops and self-study learning modules. Whether you’re new to Postman or an ongoing learner, you can enhance your skills in API testing and development.
- HubSpot Academy
: HubSpot Academy provides comprehensive online training in marketing, sales, and customer service. Their globally recognized certifications cover topics like inbound marketing, social media, email marketing, and more.
- Snyk Learn
: Snyk Learn offers developer security education and product training. You can explore interactive lessons on finding and fixing vulnerabilities, as well as using Snyk for security
- Cisco DevNet Start Now
: Certifications in network programmability, developer fundamentals, and more. Learn about data serialization formats (XML, JSON, YAML), APIs, Python, Ansible, and Infrastructure as Code (IaC).
Risk Management (Free + Paid)
- FAIR Institute
: The FAIR Institute is a research-driven not-for-profit organization dedicated to advancing the discipline of cyber and operational risk management. Free Cyber Risk Management Course/Certification
- NIST | RMF Introductory courses
: The new online introductory courses are between 45-60 minutes, and available at no cost, and registration is not required.
Courses for Federal, State or Tribal governments. (Restricted + Free)
Internship + Scholarship Opportunities
- NIST Pathways Program | NIST
: The Pathways Program offers clear paths to Federal internships for students from high school through post-graduate school and to careers for recent graduates and provides meaningful training and career development opportunities for individuals who are at the beginning of their Federal service.?
- Intelligence and Cybersecurity Diversity Fellowship Program | Homeland Security (
dhs.gov
)
The program will recruit high-performing individuals in intelligence or cybersecurity career paths from institutions of higher learning to support DHS’s mission. During the 12-week program, participants will be immersed in a federal work environment by collaborating with subject matter expert mentors on projects and performing assigned tasks on the intelligence and cybersecurity track.?
- CyberCorps?: Scholarship for Service (
opm.gov
)
: CyberCorps recruits and trains the next generation of information technology professionals, industrial control system security professionals, and security managers to meet the needs of the cybersecurity mission for Federal, State, local, and tribal governments.?
- BreackLine (A Google Company):
?BreakLine provides education and coaching for exceptional, women, people of color, people with disabilities, and veterans who are interested in accelerating into the next phase of their careers
Cyber Associations + Certification Bodies
Network Focused + Security Certifications
Training Events
- Black Hat | Home
: Renowned computer security conference that provides consulting, training, and briefings to hackers, corporations, and government agencies worldwide.
- DEFCON
: DEF CON is the premier event for hackers, corporate IT professionals, and government agencies aiming to expand their knowledge and skillset in the world of hacking.
- SANS | Cyber Security Training
: SANS Institute, founded in 1989, empowers cybersecurity professionals with practical skills and knowledge to enhance global security. They offer high-quality training, certifications, and resources for individuals and organizations.
BSc (Hons) Cybersecurity Student at Birmingham City University | Seeking a Graduate Role as a Security Analyst or Senior Role within Cybersecurity as well as a Masters or PhD for Cybersecurity |
3 个月Love this ??
California Cybersecurity Task Force: Workforce Development and Education Subcommittee Chair
3 个月Hi Nathan Mechikoff! See you tomorrow on campus! Looking forward to it!
Cybersecurity Student
3 个月Great post with many resources to look thru, thanks a lot! I just passed Comptias' sec+ yesterday and then thought to myself, ok set up a home lab and then what? This will definitely keep me busy.
Auditor | Cybersecurity | Bookkeeping | Customers service | Data Entry
3 个月Please I need a laptop, I have some skills I want to learn please. +2348029893407