> Most of these "cybersecurity" jobs are download Metasploit and run autopwn This is, unfortunately, selling the security industry short. In reality, and espec

> Most of these "cybersecurity" jobs are download Metasploit and run autopwn This is, unfortunately, selling the security industry short. In reality, and especially in cities like DC, the security industry is pretty competitive and the barrier to entry for even entry-level jobs is pretty high. Companies are looking for not just metasploit experience, but a more-than-surface-level understanding of things like networking, OS internals, programming, systems administration, critical thinking, and more. Then on top of that, one needs to be able to look at everything with "vulnerabilities" and "exploitation" in mind. It's not easy. Quite frankly, there is a lot of information that one needs to know, and know well, to be competitive in this field. With that said, I 100% agree that the certifications are complete bullshit (including SANS). And sure, there are certainly fields that are definitely bullshit-y and mostly for compliance purposes (cough pentesting cough). But there is merit in the security field and it's not all bullshit.