4 ms·
I see your point as someone who's been in the industry for some time, but do you by any chance have recommendations for folks trying to get into it? Every time
by easterncalculus 5y ago
I see your point as someone who's been in the industry for some time, but do you by any chance have recommendations for folks trying to get into it? Every time I've seen threads from people trying to get into offensive security OSCP and other certs come up, even to people that already have college degrees and in some cases experience. Where is that coming from, and what should people do instead? It seems at least to me like there's a real disconnect on this topic between people hiring senior roles and junior employees.
- tptacek 5y agoTake every ounce of energy you would have put into OCSP and plow it into bug bounties, build a portfolio of findings, and get a pentest job. Take a year and figure out where you want to pivot to from there. If you're a blue team type, you're not interested in OCSP, but the answer for you would instead be to build a portfolio of meaty PRs on security open source projects.
- easterncalculus 5y agoAppreciated, thank you.