How to start a Cybersecurity career aka ZeR0 to H3Ro in 2023

*Before you start reading please note that this guide is more suited for someone with close to zero IT experience and fresh starters and not people who might know more than me. While it will not make you a Cybersecurity expert in one week or less it can provide an easy roadmap to follow to get your first IT job and then lead to a cybersecurity posting.

Cybersecurity has been a hot topic for a while now and many people are thinking of starting their career in this rewarding and fast-growing field, also a lot of people already in IT are thinking of pivoting to cybersecurity.

One of the major challenges when it comes to starting in this field is the question “How and where do I start”

While there are many different ways to approach this, depending on whether you are in IT or not already, if you already have certain knowledge in, let’s say networking or programming, if you are fresh out of high school or in college, or if you are changing career from a completely different field like a construction or hospitality services… there is no “one size fits all” or a silver bullet answer. There are how ever basic things you need to know in order to be a successful Cybersecurity professional and moving forward we will focus on those.

This is a list of things you should be fairly proficient in to start a career in IT and then move up to Cybersecurity.

1. NETWORK SECURITY: Understanding the basics of computer networks, including how data is transmitted and how networks can be protected from threats such as hacking and malware.
2. OPERATING SYSTEMS AND SOFTWARE SECURITY: Familiarize yourself with the most common operating systems and software used in business and understand how to secure them.
3. CRYPTOGRAPHY: Understanding the principles of cryptography, including encryption and decryption, and how they can be used to secure data.
4. THREAT INTELLIGENCE: Learning about the latest threats to cybersecurity and how to identify and respond to them.
5. RISK MANAGEMENT: Understanding how to assess and mitigate risks to an organization’s information systems.
6. COMPLIANCE & REGULATIONS: Understanding the laws and regulations governing data protection and privacy, such as the General Data Protection Regulation (GDPR) and the Health Insurance Portability and Accountability Act (HIPAA).
7. INCIDENT RESPONSE: Understanding how to respond to a cybersecurity breach, including how to contain the breach, perform forensic analysis, and recover from the incident.
8. SECURITY BEST PRACTICES: Familiarize yourself with the best practices for securing information systems, including using strong passwords, keeping software up-to-date, and regularly backing up data.

Here is the list of best free and paid online sources to get you started:

1. Cybrary – Cybrary is an online learning platform that offers a variety of courses in cybersecurity and network security. They have a range of free and paid courses, as well as certification courses.
2. SANS Institute – SANS Institute is a leading provider of information security training and certification. They offer a variety of courses in network security, including courses in intrusion detection, incident response, and network penetration testing.
3. Cisco Networking Academy – Cisco Networking Academy offers a variety of online courses in network security, including courses in cybersecurity essentials, network security, and cybersecurity operations.
4. OpenSecurityTraining.info – OpenSecurityTraining.info is a community-driven online platform that provides free security training and resources. They offer a variety of courses in network security, including courses in network defense, network security monitoring, and network forensics.
5. Coursera – Coursera is an online learning platform that partners with universities and organizations to offer courses in a variety of subjects, including network security. They offer a range of courses in network security, including courses in cryptography, network security, and cybersecurity.
6. Udemy – Udemy is an online learning platform that offers a range of courses in network security, including courses in network penetration testing, ethical hacking, and cybersecurity.
7. YouTube – YouTube has a wealth of resources on network security, including tutorials, lectures, and presentations. There are many channels dedicated to network security, such as the Cyber Mentor and NetworkChuck.

OTHER WAYS TO GET STARTED:

TryHackMe (THM) is an online platform that provides a range of virtual labs for users to practice and develop their cybersecurity skills. THM offers a variety of labs that are designed to simulate real-world scenarios and vulnerabilities, and users are encouraged to try to exploit these vulnerabilities in a safe and controlled environment.

To access the platform, users must first sign up for an account and complete a series of challenges to prove their skills. Once they are accepted, they can access the THM lab and begin working on the available labs. Each lab has a difficulty level assigned to it, ranging from easy to hard, and users can work through them at their own pace.

THM provides a range of labs covering a variety of topics, including penetration testing, reverse engineering, cryptography, and web application security. The platform is designed to be accessible to users of all skill levels, with labs ranging from beginner to advanced.

THM also provides a range of resources to help users learn and develop their skills, including walkthroughs, tutorials, and learning paths. The platform is popular among cybersecurity professionals and enthusiasts who want to hone their skills and stay up-to-date with the latest trends and techniques in the field.

Hack The Box (HTB) is an online platform that provides a range of virtual machines (VMs) for users to practice and develop their cybersecurity skills. HTB offers a variety of VMs that are designed to simulate real-world scenarios and vulnerabilities, and users are encouraged to try to exploit these vulnerabilities in a safe and controlled environment.

To access the platform, users must first sign up for an account and complete a series of challenges to prove their skills. Once they are accepted, they can access the HTB lab and begin working on the available VMs. Each VM has a difficulty level assigned to it, ranging from easy to hard, and users can work through them at their own pace.

HTB provides a forum for users to discuss and share information about the VMs and challenges, as well as a ranking system that allows users to compete with each other based on their skills and progress. The platform is popular among cybersecurity professionals and enthusiasts who want to hone their skills and stay up-to-date with the latest trends and techniques in the field.

I hope this is enough information to spark your interest and get you on your way to start learning about Cybersecurity and develop some fundamental skills.

I will be working on more in-depth and more topic-specific content when it comes to cybersecurity in some upcoming posts.

Any feedback and suggestions are more than welcome.

In the meantime, you can check my “How to start your journey in Machine Learning and AI”

Start learning Python by checking out: “Best free online resources to start learning Python today“