4 ms·

If you're doing well at CTFs and HTB and similar, I guess you are now at the point where you should start to look at networking. Clearly given world circumstanc

by g_p 6y ago

If you're doing well at CTFs and HTB and similar, I guess you are now at the point where you should start to look at networking. Clearly given world circumstances right now, in-person networking events are not likely to be happening, but it's likely that there's a local community in your area with security people. They might still be doing virtual events, having some speakers etc. Get yourself known. I have been able to get junior people straight out of college/university into roles by getting them into the "networks". There's a worldwide shortage of security people, caused partly by the inability of the people who need them to efficiently hire them (other causes include wanting top-level skills for bottom level pay, and blaming lack of people for their own lack of willingness to pay). The more you get known in your local security community, the better. After a while, perhaps they'll be interested in a talk from you about something as well - it gets you seen and known, and it's much easier to break into security when you're known.

radditone 6y ago
This is good advice. Go to your local security meetups, network, meet people. Chances are most of the people you talk to are hiring or know people who are hiring. Get yourself a blog, write about your security research, write about your experiences with CTFs. Showing that you care about security enough to do it in your own time is worth more than any cert.
- g_p 6y ago
  > Chances are most of the people you talk to are hiring or know people who are hiring. Definitely this. And if they like you, and their company isn't hiring, they might even be able to get them to hire you. Good and enthusiastic security people are hard to come by, so you take the ones you can get, if times are good and you think you might need more soon! And even if they aren't hiring, chances are they will be able to make a personal introduction to someone who is hiring - at least in the local networks I've been involved in, there's more demand than there is supply, so people are generally pretty willing to help you make connections with the right people. And at the back of their mind, they will also be thinking how they can always go to you in future to get out of their current place(!)

by g_p 6y ago

radditone 6y ago

This is good advice. Go to your local security meetups, network, meet people. Chances are most of the people you talk to are hiring or know people who are hiring. Get yourself a blog, write about your security research, write about your experiences with CTFs. Showing that you care about security enough to do it in your own time is worth more than any cert.

g_p 6y ago
> Chances are most of the people you talk to are hiring or know people who are hiring. Definitely this. And if they like you, and their company isn't hiring, they might even be able to get them to hire you. Good and enthusiastic security people are hard to come by, so you take the ones you can get, if times are good and you think you might need more soon! And even if they aren't hiring, chances are they will be able to make a personal introduction to someone who is hiring - at least in the local networks I've been involved in, there's more demand than there is supply, so people are generally pretty willing to help you make connections with the right people. And at the back of their mind, they will also be thinking how they can always go to you in future to get out of their current place(!)