Hi everyone,

I'm a third-year BCA student in India (graduating 2027). My college is small and not well known, my syllabus is quite dated, and my grades are average, so I know I'll need to stand out through skills and projects rather than my degree.

I was originally planning to go into AI engineering, but I found the math-heavy path hard to keep up with alongside college, so I'm now switching to cybersecurity. I'm genuinely curious about how attacks and defenses work, and I'd like to be job-ready by the time I graduate.

What I have so far: Python, basic web development, and some experience building small projects, which I'm putting on GitHub. I'm just starting with networking and Linux basics.

My questions:

1. Is it realistic to land a junior SOC analyst or similar role right after a BCA, without a master's?
2. Would you recommend Security+ first, or hands-on platforms like TryHackMe first?
3. I'm also considering preparing for NIMCET to do an MCA at an NIT. Did any of you take that route, or did you skip it?
4. For people who started in India or outside the US, what did your first role look like, and how long did it take?
5. Is there anything you wish you had done differently when you were starting out?

Any advice or personal stories would mean a lot. Thank you!

Hi Everyone,

I'm currently based in India and trying to pivot from a Fraud Risk Background into GRC . I have been unemployed since almost 9 months, but instead of mass applying blindly, I've treated this gap like a full time job to upskill aggressively for modern GRC Roles.

Given how tough the current Indian tech market is I want to get some brutal honesty from hiring managers and practitioners on my current stack and strategy.

Where I stand right now :

Background : Fraud Risk (Financial Crime Risk Management)

The Stack : Already certified ISO 27001 Lead Auditor.

In the Pipeline : Actively preparing for my CISA and AWS Solutions Architect Associate to bridge my technical cloud gap.

The X Factor : Building hands-on AI Risk Management projects in the cloud (Mapping LLM Vulnerabilities and Data Privacy Risks to frameworks like NIST AI RMF, ISO 42001 and also OWASP Top 10 LLM)

I know Indian HR Filters can be incredibly conservative regarding employment gaps, but I'm trying to position myself as an immediate joiner who brings a blend of financial risk, traditional governance, cloud infrastructure and emerging AI Risk.

My Questions for this Sub :

1. Target Companies : Based on my profile, what specific types of companies or industries should I be targeting in India ? Like, should I go after fintechs/Big4/Global Capability Centres ? Who values a finance to cyber risk transition the most ?

2. Hiring Landscape : How is the market in India right now for Mid/Associate GRC Roles ? Are companies actually hiring for AI Risk/Governance Skillsets yet or should I hide my AI Projects and strictly anchor my resume around traditional ISO talk ?

3. Bypassing the 9 Month Gap Filter : How do I best frame an 9 month gap to an Indian recruiter ? Is stating that "took a deliberate sabbatical for full time upskilling into Cloud/AI GRC" respected or will automated ATS Portals filter me out before a human even sees my certs and profile ?

4. Fraud to GRC Transition : For anyone in Indian Ecosystem or in International Ecosystem with knowledge on Indian ecosystem who pivoted out of financial fraud/risk ops to infosec, what was the exact framing that made recruiters realise your Risk Experience perfectly translates to Security Risk ?

Be as brutally honest as you need to be. Many thanks in advance !!!

Background: I’m a senior network security engineer (PCNSE, NSE4/5, hands-on with Palo Alto/Panorama, F5/Avi load balancers, FortiGate). Just passed AWS SAA-C03. Planning to move to Toronto for a job search in about 5 months.

Problem: most network security postings I’m seeing in Canada ask for SIEM experience, Prisma/SASE, and sometimes CISSP/CCSP-level certs none of which I currently have hands-on.

My plan so far:

• CyberDefenders CCD L1 (SOC/DFIR/SIEM fundamentals, hands-on labs) or Security Blue Team Level1 (Currently, struggling to make decision)
• CCSP after that, for the broader cloud security theory + ISC2 recognition
• Self-study on Prisma Access/SSE since I already know the Palo Alto ecosystem from PCNSE

Questions for anyone who’s hired or been hired in this space in Canada:

1. Does CCD L1 or BTL 1 actually register with Canadian recruiters/hiring managers?
2. Is CCSP worth the time/cost for someone with my background, or would CISSP/something else move the needle more for network security roles specifically?
3. Realistically, is 5 months enough to make a meaningful dent in the SIEM/Prisma gap, or should I be leaning harder on networking/local contacts instead of stacking more certs?

Trying not to waste time or money chasing certs that don’t actually convert to interviews any real-world experience welcome.

Hi everyone, I’m 29 and considering making a career change into cybersecurity, and I’m trying to figure out how realistic it would be before spending money on a program.

I have a bachelor’s degree in Accounting with a minor in Criminal Justice. I currently work as a tax Auditor. Before that, I worked in banking for a few years.

I don’t have any formal IT or cybersecurity experience, but I’m interested in getting into the field, particularly as a SOC analyst.

I’ve been looking at an online cybersecurity bootcamp at a college near me and my biggest concern is whether this is actually a realistic way to break into the industry. I currently have a decent stable job, so I don’t want to spend thousands on training only to find out that I need to start over in a lower paying IT support position for several years.

For anyone working in cybersecurity, especially SOC analysts or people who came from a non IT background:

Would my auditing, tax and banking experience help me stand out, or would I essentially be starting from scratch?

Is it even realistic to get a SOC analyst job with a bootcamp and certifications but no real IT experience?

How difficult is it to find entry-level cybersecurity jobs around NY right now?

Would you spend money on a college certificate program, or just self-study for certifications and learn on your own?

How long did it take you to get your first job in the field?

How realistic is it to eventually reach six figures without taking a massive pay cut for years?

I’m not expecting to walk straight into a high paying position but I want to make sure I’m choosing a path that actually has a reasonable chance of paying off.

Any honest advice or personal experiences would be appreciated, especially from people who made a complete career change like I’m looking to do

I know in cybersecurity most people go from IT/Helpdesk for a few years into an SOC Analyst but was wondering is the path to become an AI Engineer any different? I'm planning on doing a 4+1 accelerated program CS Bachelor + AI Master, if I do this can I go straight into AI Security if I stack certifications along with this?

I have the opportunity to get a free scrum master and capm certification and I was wondering can I possibly use that to get a role in cyber. I also have my security plus and experience in creating Audit plans, Cybersecurity trainings and policy documentation completed during my internship at a non profit organization.

​Would adding a Scrum Master certification or CAPM help me stand out for entry-level GRC, Cybersecurity Analyst, or IT Project Manager roles? Any insights on whether recruiters value project management credentials alongside Security+ and non-profit experience would be appreciated!

This year I was impacted by layoffs at one of the big tech companies, where I was an L3 Support Engineer for 4 years. I started as an intern while finishing my CS degree and continued after that full-time.

Previous to the layoff, I was already thinking about my next career move and was finding two very different career paths interesting: Data Engineering or Cybersecurity. At that point, and when I got laid off, I was not very sure of what path to take but was kind of inclined toward Data Engineer roles. However, during my research, I noticed that the Cybersecurity track could use all my previous experience and that my experience could be more valued when being considered for interviews and a possible career change, as opposed to Data, which would be more of a reset in terms of starting from scratch.

Now, while thinking I was going to go down the Data Engineer path and learn the technologies used, I was still applying to basically everything to land a new job and fortunately got a very good offer for a Systems Engineer position in a VMDR team.

Because of this, I now feel that life is taking me more into the Cybersecurity path, and hence I was thinking of carrying on with what "life is suggesting to me" (and I still think it is a path I would like too).

With all this, my doubt is now: how should I refocus my learning so that in the future I could move into a Cybersecurity role and continue growing professionally (and of course in salary as well)?

I probably will need some months or a couple of years to be comfortable in my new position and responsibilities, but looking ahead, I want to have a clear path from now on in which I can invest my free time after work to build the necessary skills to be in a better position to be considered for Cybersecurity roles.

I have seen that certs are very valued, or at least help pass the HR filter, like Security+, or job posts requesting things like CISSP, CISA, CEH, GSEC, or CRISC. However, I see there are lots of them that I can choose from, so I'm not sure what would be the best path for my situation.

Additionally, I have some good discounts on Microsoft Learn, so there is also SC-900, SC-200, or any of the other SC certifications, which I have seen in some job posts too. But that increases the list where I can choose from, and hence I'm not sure where I should start, then which one to get after the first one, and so on.

Any guidance or advice to clear my doubts and help me choose the best option going forward will be appreciated!

Hey everyone! I'm a B.Tech IT student in India interested in cybersecurity, especially VAPT, penetration testing, and digital forensics.

I'm exploring opportunities in police cyber cells and government cybersecurity organisations alongside private-sector jobs.

I'd love to hear from people with experience in this field:

• Work culture: What's the actual day-to-day work like?
• Salary: What can a fresher realistically earn?
• Work pressure: How are working hours, workload, and work-life balance?
• Technical exposure: Do you get hands-on experience with investigations and cybersecurity tools?
• Career growth: Government vs private sector in terms of learning, salary hikes, and job security?
• Entry route: Where should freshers apply for paid internships or technical roles?

I'm primarily interested in technical cybersecurity roles, not becoming a police officer.

Would appreciate honest insights, especially from people working in India. Thanks!

I’m frustrated with my company’s and my own personal reliance on AI, and I’m wondering if there is a space in cybersecurity that isn’t as reliant or isn’t required to use AI.

For some context, I (23M) am a recent graduate that was lucky enough to get a job as a SOC Analyst right out of college, and have been working as one for a little over a year now. I work for a mid-level corporation that doesn’t specialize in tech.

Ever since starting here, I’ve been feeling a lot pressure to use AI tools to get my job done. On one hand, I understand, these tools can dissect information so much faster than I can and they do genuinely speed up my work flow.

On the other hand however, I’ve just begun to feel so empty using it. I don’t feel like I’m genuinely problem solving anymore, and I feel like more and more of my job is asking AI more questions.

I still like my job, it offers a lot of benefits, my coworkers are nice, the hours are good (I’m lucky enough to be on day shift!) but when I think about my career trajectory, I think I want to move away from AI.

The problem is I don’t even know what can be constituted as “away from AI” anymore. I’ve thought about it some and I thought maybe I could go back to school and be a professor? Then the majority of my job would be lesson planning and improvising teaching the students. I also thought maybe tech sales since it’s such a social job would be less AI focused.

I don’t know, I feel like I’m in a good spot and my career could blossom in a bunch of different directions, but I don’t want to be stuck doing something I’m not happy with. I’m just a guy who likes using his brain and having a real conversation with someone.

TL;DR I have AI fatigue and need guidance on which direction to take myself in.

Im 53 with a bachelors in cybersecurity and over 20 years in customer service experience under my belt. My question is given my age, is it worth it? My thinking was to buy a tryhackme subscription to get started.

I am currently going back to community college and getting an associates in network administration and a degree in cybersecurity. Is it worth getting a bachelors or a masters degree in network admin? Are there any other majors or minors that I should get as well?

Hi i finished my clg at 2026 may and till now I am unemployed and I got rejected in interview for communication issues. I will try till dec. If not I planning to do pg . I have interest in the domain of cyber security.so it is worth . If it is worth where I want to do pg abroad or india

Even though I didn't get any call. can anyone please review what is wrong in my resume? I'm applying for SOC tier 1 or IT technical support but no call yet!!! I'm very frustrated

" I'm a GC holder"

Technical Skills

SOC Operations: SIEM/EDR triage, endpoint investigation, IOC analysis, incident escalation, vulnerability scanning, threat

hunting, MITRE ATT&CK, CrowdStrike, regex, Microsoft Defender for Endpoint, Microsoft 365 sign-in and audit logs

Identity & Access: Okta, Active Directory, Microsoft Entra ID, Microsoft 365 administration, MFA enrollment, account

provisioning and offboarding, least-privilege and privileged access reviews, Group Policy, Google Workspace

Compliance Foundational knowledge of ISO 27001 and NIST CSF.

Security Tools: Splunk, Elastic SIEM, Wazuh, Snort, Wireshark, Nmap, OpenVAS, Burp Suite, ZAP, YARA, VirusTotal,

AbuseIPDB, Ghidra, Detect It Easy (DIE), HashMyFiles, Nessus, Qualys, OWASP Top 10

Networking and Security: TCP/IP, DNS, DHCP and Wi-Fi, HTTP/S, network traffic, firewalls, VPNs, IDS/IPS(Snort)

Systems: Windows Server, Linux,(including Kali Linux), Windows 10/11 and macOS ,Microsoft 365

Programming: Python, PowerShell, Bash, SQL, Java, C/C++, SQL, XML, HTML

Certifications and Training

CompTIA Security+ — ISC2 Certified in Cybersecurity (CC) — Cisco Cybersecurity Defense Analyst — Splunk The

Cybersecurity Landscape — Cisco Introduction to Cybersecurity — Microsoft The Cybersecurity Threat Landscape —

Microsoft Security Essentials: Concepts, Solutions, and AI-Powered Protection — Essentials in System Administration by

Microsoft — CompTIA CySA+ — in progress

Professional Experience

Cybersecurity Specialist Intern — PROJXON Oct 2025–Present

• Triaged approximately 200 security alerts monthly using Splunk, Microsoft Defender for Endpoint, and network security tools,

with threat intelligence enrichment (VirusTotal, AbuseIPDB); escalated about 12 validated cases monthly to Tier 2 analysts.

• Tuned about 20 Splunk correlation searches with security engineering and 12 alert rules using IOC enrichment, reducing the

proportion of alerts classified as false positives from 40% to 20% and cutting average triage time from 15 to about 9 minutes.

• Supported incident containment by isolating affected endpoints through EDR, blocking malicious indicators, and coordinating

compromised-account disabling with IT.

• Investigated credential attacks and suspicious PowerShell activity through endpoint, Entra ID, Microsoft 365, and network log

correlation; mapped findings to MITRE ATT&CK.

• Prioritized vulnerability remediation across 80+ assets using CVSS severity, public exploit availability, asset exposure, and

business impact; coordinated with IT to close 5 Critical/High findings within 14 days and validated fixes through version

checks, change-record reviews, and Nessus rescans.

• Administered onboarding, offboarding, and least-privilege permissions through Active Directory and Google Workspace,

auditing 50+ accounts and correcting 8+ permission inconsistencies weekly.

• Streamlined onboarding through documentation updates for 20+ interns, reducing average setup time from 45 minutes to

under 20 minutes.

• Reviewed approximately 40 administrative accounts and identified a help desk account with 3 unnecessary administrative

group memberships; validated access against job requirements, documented the risk, and coordinated removal with the AD

team, verifying required business access remained intact.

• Strengthened security procedures and awareness by drafting 2 incident response protocols in collaboration with the security

team , updating 10+ SOPs, and developing 5 training materials reaching 80+ employees, with approximately 30 employees

trained directly.

AI Trainer — Scale AI Jan 2024–Apr 2024

• Evaluated 2,000+ AI-generated responses monthly for factual accuracy, policy compliance, and adherence to task guidelines;

documented issues and provided feedback to engineering and quality teams.

• Labeled training data with 98% annotation accuracy and conducted 100+ quality reviews weekly to identify inconsistencies

and maintain dataset quality.

• Created and tested 50+ prompts weekly to evaluate model behavior, identify edge cases, and assess response quality.

• Helped reduce annotation inconsistencies by 15% through guideline adherence, peer feedback, and detailed quality reviews.

Graduate Teaching Assistant – Network Security — ***\* University Aug 2023–Dec 2023

• Guided 25+ graduate students in cryptography, firewalls, VPNs, and intrusion detection systems for CMPE 209: Network

Security and Applications.

• Evaluated 200+ security exercises and lab assignments, communicating technical findings and actionable feedback to reinforce

network defense practices.

Graduate Researcher — ***** University Aug 2022–Dec 2023

• Designed a lightweight, extensible LOLBin detection framework using regex-based (regular-expression) tokenization and

correlation-based pattern matching to accommodate diverse Windows command structures and incorporate new patterns.

• Implemented command parsing, tokenization, and normalization to generate reusable patterns from a 650-command corpus

comprising 350 malicious commands from LOLBAS and 300 benign commands.

• Evaluated training-set sizes and correlation thresholds, achieving a 98.8% true-positive rate and a 4.9% false-positive rate in

separate experiments using 300 reference patterns and a 90% correlation threshold.

• Published the work through ProQuest; collaborated with advisor on IEEE journal submission.

IT Support — ******* University Jun 2021–Aug 2022

• Provided Tier 1 and Tier 2 IT support for approximately 2000+ users across Windows, macOS, Microsoft 365, VPN, and

hardware, resolving 300–400 requests monthly with a 75–80% first-contact resolution rate.

• Remotely diagnosed and resolved hardware, software, network, and VPN issues, managed account provisioning and credential

lifecycle ,role changes, offboarding, license assignments, and group permissions in Active Directory and Microsoft 365, processing

5–10 account creation and offboarding requests monthly while enforcing least-privilege access.

• Supported Microsoft Authenticator enrollment for 80+ users and configured MFA for 5–10 new users monthly, maintaining

above 95% coverage and resolving most MFA and lockout issues within 15–30 minutes.

• Administered Okta identity and access tasks for employees, including user provisioning, Single Sign-On (SSO), password resets,

account unlocks, and MFA enrollment; troubleshot authentication issues to restore access to business applications.

• Audited 90–100 user and service accounts quarterly, including privileged accounts, correcting 5–10 access findings per review

by disabling inactive accounts, removing unnecessary permissions, and updating group memberships.

• Set up laptops applications, and peripherals for 3–8 new hires weekly, tracked 100–120 devices and licenses in ServiceNow, and

completed quarterly inventory audits.

• Tracked incidents and service requests in Jira Service Management and ServiceNow, documenting troubleshooting and

resolutions; escalated 5–10% of tickets with logs, error details, and reproduction steps and maintained knowledge-base articles

for recurring issues.

Career Break – Family Caregiving — Jan 2011–Aug 2022

• Took a career break to raise children before returning to graduate study and pursuing cybersecurity.

I am on my last few classes at WGU to get my IT Management degree. And I'm not sure where I go from here. I want to get into third-party risk, IT audit, or GRC, but it feels like they don't actually have an entry-level role. My actual experience is in customer service and management. How do I land there? What certs should I add? How do I actually get my foot through the door? Or what else can I do with this degree/ my experience? I pivoted from Accounting to IT Management, and now that I'm close to graduation and have no job prospects, I feel like I made a mistake...

Any guidance would be greatly appreciated..

Hey everyone hope you all doing good. I’ve been working as an IT Infrastructure & Support Engineer in a security-aligned role for over 1.7+ years now. My day-to-day mostly involves IAM ops, Microsoft Defender XDR monitoring, IR /threat hunting with KQL, endpoint security and handling intune/Entra .I’m looking to plan my next move soon ideally pivoting deeper into a dedicated SOC, Cloud Security. Im also bit confused on how to make the switch or reach out to people ..​Any advice, harsh truths, or general tips would be super appreciated. Cheers!

I have a Bachelor’s degree in Cybersecurity and the CompTIA Trifecta (A+, Net+, Sec+), which certification will have the most significant return on investment, CCNA or OSCP? I have applied for more than a dozen IT, Networking and SysAdmin roles and have not had any callbacks. My end goal is to work a SOC analyst role and later a PenTesting/Red Team role. Should I get CCNA to increase my chances of landing an “entry level” role mentioned above or just jump into getting the OSCP and aim for a cybersecurity role. Which cert path returns the highest ROI?

Hello,

I'm looking to get my feet wet and I know there are a number of labs that I can do online to get some street cred. However, this first one I did is asking me to download a trail software. That's reasonable, but to get the trial software I have to give up all this info. I know that's not uncommon. I know there are ways to mitigate an abundance of spam, BUT, what's the point if it doesn't even actually help get a job?

TLDR: Is any of this legit? Does it actually help? Is it just an elaborate marketing ploy?

I’m interviewing for a permanent Senior Identity and Access Engineer position paying $110K–$125K at an IT consulting and managed services company.
I have approximately 7 years of cybersecurity GRC experience, including familiarity with security frameworks and compliance. I’m looking to transition into a more technical cybersecurity engineering role.
Here are some of the responsibilities:

Own the identity security standard, including Conditional Access baselines, tiered administrator models, privileged access configuration, and phishing-resistant MFA.
Enforce MFA across client remote access, VPNs, and internal applications while blocking legacy authentication.
Implement privileged access management, including just-in-time elevation, separate cloud administrator accounts, and on-premises tiered administration with LAPS.
Deploy and maintain identity security controls across client environments.

I’d appreciate honest feedback from people currently working in IAM or identity security engineering.

How difficult are these responsibilities for someone transitioning from GRC into engineering?
What technical skills would I need to be comfortable with on day one?
How much hands-on experience with Microsoft Entra ID, Active Directory, PowerShell, and Conditional Access would you expect?

Does this sound like a realistic step up, or would you consider it a stretch role?
What would you ask the hiring manager before accepting?
I’m not looking for reassurance. I want an honest assessment of the technical expectations and learning curve.

Hey, I need some help formatting my CV for an end-of-studies cybersecurity internship. My background is a bit unique—I actually already hold a diploma in AI and data science, but I am now pivoting into cybersecurity.

Right now, I am an engineering student, but our academic system is structured a bit differently: we don't dive into our specialized major until the final year, and even then, it's only for a single semester. The second semester of this fifth year is dedicated entirely to our graduation internship. Because of this timeline and my recent pivot, I don't have any formal, academic cybersecurity projects on my resume yet, which is making me a bit nervous.

However, I have a very strong foundation in data science and AI. I want to figure out how to highlight these data skills—like Python scripting, handling massive datasets, and machine learning—and frame them as a massive advantage for cyber roles. What is the best way to approach this situation on my CV, any help is much appreciated thank you.

A lot of cybersecurity work involves sensitive company systems, internal investigations, and security incidents that can't be shared publicly.

When applying for a new role, how do professionally demonstrate the impact of their work without revealing confidential information of companies?

Do hiring managers value sanitized case studies, personal projects, or detailed explanations during interviews more?

I'm a current SOC Analyst and I'm stunned by this. Even my current employer places zero values in Hack The Box. They have even told me not to waste any time on it and just focus on getting more CompTIA certs (namely CYSA+) or getting my CISSP done.

It seems other employers are the same. Which stuns me! I feel like HTB education is miles ahead of everyone else. You actually not only have to memorize concepts/facts but you have to physically prove you can implement the concepts in real life scenarios.

Maybe too many people in Cybersecurity are very academia oriented and only care about knowing concepts and not hands on learning? I'm not anti-academia at all. I think academia can be a great thing (I have a Master's in Cybersecurity myself) but it just baffles me that hands on learning just isn't more common or more utilized.

It's been 8 months since I quit my previous job and currently been focusing on SOC analyst. I've been learning everything on "tryhackme" and also using some VM's and tools for learnings. And the only thing I'm really concerned about is project ideas and lack of experience in specific domain, even though I've a "one year" experience as ERP Consultant in MNC, and I really don't know whether the experience will count or not. But I genuinely believe that needy skills and realtime projects will help to get a job.

*I need "projects" that attracts recruiters and job seeking Guidance\*

Hi I interned for a company where I helped some of my team members with vuln management. That was back in 2024 and now I work back with the company after some team changes.

Even though I am relatively new to the industry and the only work experience I had was the 4 month co op. I am sort of tackling the vulnerability management program alone. Which includes reaching out to owners, pushing remediation efforts and tracking everything / the governance aspect of it

I really enjoye it but lately I feel like I have not been making progress which my boss helps ensuring that I’m doing fine. They always mention how good the previous ppl were really good and on top of everything which I think I am struggling with. Right now I feel like no matter who I reach out and work with for patching or remediation I have difficulty getting a response and gaining traction. Was hoping to see if there is something more I can do and learn to help me get a Mich better understanding of how/more I can do, weather it technically gives me a better understanding.

Any advice would be appreciated as I feel a bit demotivated and worried that I’m doing a bad job. What is something I can do to support myself

I'm going to be graduating soon with a bachelor's in cybersecurity and I wish I could go back and change it to computer science or something else. Everything we're learning in classes will not be used until 5-10 years later after I've received experience working in IT or something similar. I don't know whether I should try and get a second bachelor's in computer science or go for my master's degree. I have used up almost all of my financial aid for a bachelor's because I was indecisive and dilly-dallying for years on what major I should choose. Please give me advice on what to do. I'm freaking out because I still haven't been able to secure an internship for the summer. I've applied a lot on handshake and linkedin. I apply on there actual websites and never hear back from anyone. I just want to crawl in bed and never wake up to how much I've fucked up my life. I have family members in there 20s graduating starting there careers meanwhile I'm 32 just graduating with a fucking bachelor's degree with zero experience. What happens if I get married and have kids. I feel like I'm m never going to do well career wise. I'm sick of struggling. Please give me some words of wisdom and tell me I'm not the only one in this situation.