Document text
VI | certirications
g Into Cybersecurity
One of the most asked questions we get is
“How Do I Get Started in Cybersecurity?”
Unfortunately, there isn't a simple answer that works for everyone. This guide was created to
help YOU figure out the best path to get into cybersecurity. Use it to help develop your skills
and find a network of people to support you getting into the industry.
What to expect from this guide
This guide contains seven sections, each focusing on Why cybersecurity?
different ways to develop skills. If you focus efforts on each Now, more than ever,
cybersecurity and
i InfoSec careers are
able to define your specific pathway. in high demand. The
industry is broad
one of these, you will gain exposure to the industry and be
1 Take advantage of free content x
and needs a variety
2. Build your skills of skills. In addition,
3 s d wah Gade ea r cybercrime never
; urround yourself with industry experts and mentors stops and technology
4, Attend free and low-cost events changes rapidly,
so this industry
5. Engage with the community is never boring.
. Practically every
6. Design your path :
eo industry out there
7. Look for scholarship and community programs needs cybersecurity
a Acai professionals. Not
8. Get training and certification only will you have
Twenty coolest careers in cybersecurity plenty of work, you'll
also enjoy a sense
Frequently asked questions of accomplishment,
knowing you are part of
a greater good.
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
1. Take advantage of free content
Take the time to watch webcasts and YouTube videos, read blogs, and start Googling when
something piques your interest. Here are some we recommend you start with:
[a] YouTube Channels
A
Webcasts
A
The Foundation of Accelerating your
Cybersecurity Career - James Lyne
The 14 Absolute Truths of Security - Keith
Palmgren
Your 5-year path - John Strand, Black Hills
InfoSec
CAREERS IN CYBERSECURITY - Advice from
Defcon 24
Transition to Cyber Security from a Non-
Cyber Role
Blogs and Newsletters
New to Cyber Field Manual
sans.org/blog - In particular, Top 5 Steps
to Start in Cybersecurity
Reading Room - The SANS Reading Room
features over 3,010 original computer
security white papers
This Week in 4n6 - A weekly blog on
all things Digital Forensics and Incident
Response (DFIR)
Newsbites - SANS NewsBites is a
semiweekly high-level summary of the
most important news articles on computer
security during the last week
Brian Krebs - His website will expose you
to a whole new world
Not in Cyber Security? No Problem!
Creative Ways to Gain Experience with No
Experience
HECFBlog - David Cowen dives deep into
Digital Forensics
SANS Institute
Cyber Defense
Cloud Security
Digital Forensics & Incident Response
Industrial Control Systems
Offensive Operations
IT Career Questions
SANS Security Awareness
Say Podcasts
The Ultimate Guide to getting into Cyber
Blueprint - Building the best in cyber
defense
Trust Me. I’m Certified - A podcast
exploring how to conquer imposter
syndrome, brought to you by GIAC
Certifications
Cloud Ace - Delivering actionable insight
ona full gamut of enterprise cloud topics
Daily Stormcast from Internet Storm
Center - Stormcasts are daily 5-10-minute
information security threat updates
Security Weekly - Connecting the security
industry with the security community
Also check out sans.org/free.
SANS instructors produce thousands
of free content-rich resources for the
information security community every year.
OO New2Cyber Summit playlists
COD
TRIBE TRIBE
"HACKERS f “HACKERS
BLUE TEAM RED TEAM
| C] | Books A
= Tribe of Hackers books.
= 97 Things Every Information Security Professional
Should Know: Collective Wisdom from the Experts
LR i Hack th
= by Christina Morillo vorei)
Interview
= Women in Tech: Take Your Career to the Next Level
with Practical Advice and Inspiring Stories - by
TRIBE
Tarah Wheeler "HACKERS
= Hack the Cybersecurity Interview: A complete
interview preparation guide for jumpstarting.
your cybersecurity career - by Ken Underhill,
Christophe Foulon, and Tia Hopkins
WILEY
= Cybersecurity Career Guide - by Alyssa Miller
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
2. Build your skills
It's important to learn the core concepts and seek out hands-on opportunities to apply them.
Familiarize yourself with Windows, Linux, Coding Languages, and Networking. How?
HOLIDAY HACK
CHALLENGE
TurnKey Linux
Build a Home Lab Holiday Hack Challenge - You can go
Jeff McJunkin walks you through it through the past five years of challenges,
in this webcast. just be careful of spoilers online.
Aman Hardikar’s Mind Map - Check this
out to practice InfoSec skills online.
Learn Coding, Linux and
Networking Basics - So ma
resources, just start searchi
Participate in Cyber Ranges - NetWars
runs free events throughout the year,
Download Free Tools - Play around with HacktheBox is a large playground and
Security Innovations has built a practice
hacking range (3 days access free).
open-source tools like SIFT Workstation.
The SANS faculty has created over 150 free
tools. Find them here.
CYBER RANGES
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
3. Surround Yourself With Industry Experts And Mentors
Following industry experts and mentors can open a world of tools, topics, and events that you
would not otherwise be aware of.
© SANS Instructors are very active on Twitter and worth following.
<> Here’s a full list of SANS Instructors’ Twitter handles.
In addition to the full list, here are
some of our most active: And don't forget
SANS Institute’s
James Lyne Johannes Ullrich Twitter accounts:
@jameslyne @johullrich
twitter.com/SANSInstitute/lists
SANS
Heather Mahalik John Hubbard SANSCloudSec
@HeatherMahalik @SecHubb
SANSDefense
@SANS_EDU
Stephen Sims Frank Kim @new 2 cyber
@Steph3nSims @fykim SANSforensics
SANSICS
Lance Spitzner Lenny Zeltser -e
@lspitzner @lennyzeltser SANSOffensiveOps
Mentorships
There are a ton of mentorship opportunities available (found with a quick search). Here
are a few of our favorites:
= Cybersecurity Mentoring Hub
= WiCyS (Women in Cybersecurity) Mentorshi
= ICMCP (International Consortium of Minority Cybersecurity Professionals)
= Will You Mentor Me?: How to Ask for Help
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
4. Attend free and low-cost events
There are so many great IT Security conferences, and many of them post their content online
afterward.
SANS Summits - All Live Online Summits are free SANS | Su m mits
SANS Summits connect you with cybersecurity practitioners
and experts who deliver applicable content based on real-world experience. Through in-depth
presentations, panel discussions, interactive workshops, and sharing forums, you'll collaborate with
fellow cybersecurity practitioners, learn about tools and generate solutions that will help you protect
your organization from ever-evolving threats.
“I've managed to learn something | didn’t know from nearly every session, and I’ve been made aware of
additional tools or methodologies that will help.” - Dallas Moore, PepsiCo
BSides - Countless dates and locations
BSides is a community-driven framework for building events for and B e
by information security community members. The goal is to expand > SIDES
the spectrum of conversation beyond the traditional confines of space
and time. BSides creates opportunities for individuals to both present and participate in an intimate
atmosphere that encourages collaboration. These are intense events with discussions, demos, and
interaction among participants. It is where conversations for the ‘next big thing’ are happening.
“BSides is a growing community of real security professionals who want to learn from each other
and grow. Unlike most cons we see today, BSides cuts through the hype and allows you to have real
conversations among your peers in an environment that’s comfortable and welcoming.”
— Michelle Schafer
RSA Conference - RSA Conference is the best place to strengthen RSA
your resilience. From the first day to the last, you'll gain actionable
insights from hundreds of traditional and immersive sessions, Co N fe re N Ce
collaborate and share different perspectives with peers that will
spark new approaches, and see the latest technology.
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
5. Engage with the community
Get involved with groups, meetups, lists, forums, and LinkedIn communities:
SANS DFIR LinkedIn Community
Keep up with the latest of Digital Forensics &
Incident Response topics, look for jobs and
training, and more.
SANS Industrial Control Systems Community
Forum
Participate in the SANS Industrial Control
Systems (ICS) Community Forum, where ICS
professionals discuss current security events,
share tips, ask questions, and connect with
others passionate about securing the critical
infrastructure.
AFCEA Chapters
AFCEA provides a forum for military,
government, and industry communities to
collaborate so that technology and strategy
align with the needs of those who serve.
ISACA Local Chapters
ISACA offers access to resources and a
community of experts committed to lifetime
learning and career progression to help you
stay up to date.
ISSA Chapter Directory
ISSA is the community of choice for
international cybersecurity professionals
dedicated to advancing individual growth,
managing technology risk, and protecting
critical information and infrastructure.
OWASP Chapters Program
The OWASP Foundation works to improve the
security of software through its
New to Cyber Field Manual
community-led, open-source software
projects, hundreds of chapters worldwide,
tens of thousands of members, and the
hosting of local and global conferences.
SANS OSINT Community
This is a place for people who are OSINTers,
looking to become an OSINTer, and who are
members of the global OSINT community!
Advancing Women in CyberSecurity
WiCyS is where the recruitment, retention
and advancement of women in cybersecurity
happens.
SANS Security Awareness Community
This super friendly vendor-neutral community
features lively discussions on security
engagement, behavior, culture and ultimately
Search Discord Servers G)
Here’s a list of discord servers
tagged with cybersecurity
https://disboard.org/servers/ta
cyber-security
- managing human risk.
SANS Cyber Defense
https://discord.gg/hD2A2E
SANS Cloud Security
Sansurl.com/cloud-discord
SANS Security Leadership
https://sansurl.com/leadership-discord
SANS Offensive Ops
https://discord.gg/cKWsqRtUcK
The Ultimate Guide to getting into Cyber
6. Design your path
There are so many different subfields and
areas of interest within the cybersecurity
industry, it can be hard to keep it all straight.
This is Just a small sample of the many career
paths available in cybersecurity.
Security Architecture Application Security
Offensive Security Cloud Security
Incident Detection Careers in Governance,
& Response Risk, and Compliance (GRC)
Interested in DFIR? ` TI Interested in ICS/OT HAD, |
Check out DY Security? Check out
un
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
7. SANS Cyber Academies
https://www.sans.org/scholarship-academies/
To help fill the cybersecurity skills gap,
the SANS Institute created the CyberTalent
Immersion Academy, an intensive, accelerated
training program that provides world class
training and GIAC certifications to quickly and
effectively launch careers in cybersecurity.
More than 600 scholarships have been
awarded so far and 90% of our graduates are
employed within six months of graduation.
Find out if you could be one of the next to
participate and launch a new career in cyber!
Department of Defense STEM
DoD STEM offers opportunities for potential
students, educators, and the current
workforce.
Scholarships.com and Unigo
A list of cybersecurity college scholarships.
https://www.scholarships.com/financial-aid/
college-scholarships/scholarship-directory/
academic-major/cybersecurity
https://www.unigo.com/scholarships/by-
major/cybersecurity-scholarships
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
CYBER DIVERSITY
ACADEMY
WORKFORCE
ACADEMY
`
<
A
MARYLANO
ETSUCCESS
ACADEMY
MI WOMENS
IMMERSION
ACADEMY
8. Get Training and Certification
If you want to launch a career in cybersecurity, the SANS Technology Institute (SANS.edu) has the
cybersecurity degree or certificate program that can get you hired. No prior technical knowledge is
required.
“I was having a hard time getting a job in information security due to my lack of hands-on experience.
SANS gave me extraordinary training and the opportunity to rise to the top of the resumé pile.”
- AJ Langlois, BB&T
Undergraduate Certificate in Applied Cybersecurity
SANS.edu’s 4-course cybersecurity certificate program is for anyone (age 18 to 60+) with 2 years of
college credits who wants to launch a cybersecurity career. More than 50% of job-seeking students
receive their first job offer before finishing the program.
Bachelor’s Degree in Applied Cybersecurity
Transfer your college credits to SANS.edu and earn a world-class cybersecurity degree along with 9
GIAC certifications. The program includes a virtual internship with the Internet Storm Center, offering
hands-on experience few programs can match.
The SANS.edu Advantage
GIAC Certifications World-class Faculty Flexible Schedule 100% Online Option Expert Career Support
Earn professional Learn the latest skills and Our programs are designed You have the option of We'll guide your career
cybersecurity certifications techniques from the world's to fit into your busy work and completing the program search and connect you to
that employers recognize top cybersecurity life schedule. through live or rewindable our global cybersecurity
and respect. practitioners. online courses. network.
“SANS.edu made the difference between my being an unemployed college graduate and a well-
compensated cyber professional.”
- Cody Williams, Cyber and Strategic Risk Advisory Consultant - Deloitte
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
Below is a list of SANS foundational courses and certifications that you can take individually or as part
of a SANS.edu undergraduate program:
SANS Foundations is the best single course available to learn the core knowledge and develop
practical skills in computers, technology, and security fundamentals that are needed to kickstart
a career in cybersecurity. You could take this course individually to get a taste of the experience
of studying with SANS and have it waived into a SANS.edu undergraduate program later.
GIAC Foundational Cybersecurity Technologies (GFACT)
“I think the biggest value add for SANS Foundations was simply how comprehensive it was. It
covered a lot of topics, but each was covered in enough depth for a better handle on the basics
without being overwhelming.” - U.S. government federal law enforcement professional
SEC301: Introduction to Cyber Security teaches you real-world cybersecurity fundamentals to
serve as the foundation for your career skills and knowledge for years to come. This course is part
of the SANS.edu bachelor’s degree program.
Course Demo | GIAC Information Security Fundamentals (GISF)
“Coming from a non-cybersecurity background, this course was perfect for setting my cyber
foundation.” - Marco Godinez, Discover Financial
“The best parts of this class are the real-world examples and historical events, which illustrate
how these course topics are applicable and why they are important to learn/understand.” — Gia M.
SEC401: Security Essentials Bootcamp Style teaches you the essential information security skills
and techniques you need to protect and secure your organization’s critical information assets and
business systems. All SANS.edu undergraduates complete this course.
Course Demo | GIAC Security Essentials (GSEC)
“SEC401 took what | thought | knew and truly explained everything to me. Now, | also UNDERSTAND
the security essentials fundamentals and how/why we apply them. Loved the training, cannot wait
to come back for more.” — Nicholas Blanton, ManTech International
“SEC401 provides an excellent overview of security fundamentals delivered by experienced industry
professionals.” — Jathan Watso, Department of Finance
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
SEC388 Introduction to Cloud Computing and Security teaches the foundational elements of
modern cloud computing and security. SEC388 kicks off your journey to becoming a SANS Cloud
Ace by taking an introductory yet critical look at cloud security. This course focuses on Azure
and AWS and shows you how to interact with each cloud provider by familiarizing you with
common terminology, cloud services, security concerns, and solutions to cloud-based security
shortcomings.
Course Demo
“This is a great course for system administrators and security practitioners who are transitioning,
or thinking about transitioning, from a primarily on-premises workload to a public cloud
workload.” - Flint Gatrell
“lm taking SEC388 as part of the journey to switching my career from finance to IT.” - Senalda
Rodrigues
SEC406: Linux Security for InfoSec Professionals Whether you are defensive, offensive,
performing incident response, or working in mobile or ICS, this course will equip you with the
fundamental proficiency, knowledge, and tools needed to stay ahead of the game. Acquire yours
by taking our practical, hands-on training.
“Even though I have been using Linux for 8 years, | have learned a lot things | did not know or
understand, and now it makes sense.”
-John Riordan, US Military
“Overall | had a great time learning from Charlie and I’m excited to use my new skills at my
workplace!”
- Christopher Hannon
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
13
Job Search Tips and Tricks
We know it can be tough finding entry-level job roles when searching for jobs. We've compiled a list of
common entry-level job titles in cybersecurity to help get you started.
= Information Security Analyst "
= Cyber Security Analyst n
= Security Analyst
= |T Security Specialist "
= Security Specialist
= Cloud Security Analyst "
= Cyber Defense Analyst "
Cyber Threat Detection Analyst
Cyber Risk Analyst
Information Assurance Analyst
Network Security Analyst
Security Operations Center (SOC) Analyst
Systems Security Analyst
Junior Security Engineer
Looking for more tips and tricks on landing that first cybersecurity job? Check out these videos:
Inside the Minds of Hiring Managers panel and Help Wanted: Cracking the Code of Cybersecurity Job
Postings.
New to Cyber Field Manual
The Ultimate Guide to getting into Cyber
14
20 Coolest Careers in
Here's the list of Top 20 Coolest Careers in cybersecurity. Challenge your skills, take
the next step in your career, and become an invaluable asset to employers.
10.
Threat Hunter
Red Teamer
Digital Forensic Analyst
Purple Teamer
Malware Analyst
Chief Information
Security Officer (CISO)
Blue Teamer - All-
Around Defender
Security Architect
& Engineer
Incident Response
Team Member
Cyber Security
Analyst/Engineer
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
OSINT Investigator/Analyst
Technical Director
Cloud Analyst
Intrusion Detection
I (SOC) Analyst
Security Awareness Officer
Vulnerability Researcher
& Exploit Developer
Application Pen Tester
ICS/OT Security
Assessment Consultant
DevSecOps Engineer
Media Exploitation Analyst
Frequently Asked Questions
We asked numerous SANS Instructors how they would respond to the FAQs and
organized the responses below.
O. What are the best ways to get started in Cybersecurity?
A. Start by playing around to figure out what specialty interests you the most. There's a lot
to choose from: forensics, defense, penetration testing, cloud, security awareness, policy,
auditing, malware reverse engineering, blue team, defense, forensics, and compliance,
just to name a few. By reading up, listening to webinars, and asking people in the field
about their specialty, you can start to build a foundation and learn the basic IT and critical
thinking skills you'll need to pursue whichever specialty you choose.
Make sure you have a basic understanding of the main Internet protocols like TCP, UDP,
HTTP, and FTP, and seek out information on certain vulnerabilities and how they work. How
do you do this? Try to join communities like OWASP, SANS, and other security communities,
or take some free courses on sites like cybrary.it, udemy, or coursera. Play around with
some tools on your computer or a virtual machine to get to know certain parts of the
systems, and maybe try out a Capture-the-Flag event playing on a team or on your own. In
other words, just practice and see what you like in the cybersecurity realm. Above all, love
technology and understanding how technology works.
Q. How can I get into cybersecurity with no experience?
A. College degrees and certifications can provide a good baseline, but individual
exploration can be equally valuable. Look for degree programs or certifications, like
those at the SANS Technology Institute, with regularly updated course content, faculty
who are working in the field, career services in cybersecurity, and industry-recognized
certifications as part of the program. Employers will appreciate seeing applicants who
have made Github contributions, written blog posts, or given talks at local meetups.
Even if you've just talked about basic information that exists elsewhere on the Internet,
it shows a genuine interest in the field. For those who qualify, service in the military can
be a fantastic option, even part-time in the National Guard or Reserves. You'll certainly
get some experience and training there (often including SANS courses). For those with
professional experience outside of cybersecurity, join a cybersecurity company doing
what you do best, whether it's marketing, project management, graphic design, customer
service, or any other specialty. Then, make a plan with your manager and technical teams
about how to transition into cyber. If you have no experience, be able to show a potential
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
16
employer that you are serious about cybersecurity, even if it's just things you read and that
show your interest in the field. Take part in Capture-the-Flag events, online courses, and
practical hands-on labs, many of which are freely available.
Q. Do you need to learn programming to get into Cybersecurity? If so, what’s the best
language?
A. You don't need to know how to program to get into the field, but you should at least be
familiar with the concepts. Some areas in cybersecurity may need more programming skills
and understanding than others. Certain knowledge on scripting languages like Bash or
Python is helpful to quickly go through some data and automate small tasks, but it's not a
requirement to start with. A good place to start is by getting familiar with a language such
as Python, and just move from there. A site that gives interactive tutorials on programming
is codecademy.com, and if you have some money to learn secure programming you can try
securecodewarrior.com. Another recommended site to learn coding is checkio.ors.
Beyond that, it depends on which direction you want to go. For example, if you go into
pentesting web applications, it would be good to at least understand ASP.net, PHP, and
.NET web development frameworks with C#.
Q. What are the best websites to learn how to hack?
A. Try online cybersecurity training platforms such as Hack the Box, The Cyber Mentor, or
Try Hack Me. Some other recommended sites are overthewire.org/wargames, hacking-lab.
com/index.html, ctf.hacker101.com, and hackthissite.org.
And don't forget SANS Institute’s own annual Holiday Hack Challenge. You can play
challenges from the last two years here: www.sans.org/mlp/holiday-hack-challenge/. It's
OK to use winning answers as walkthroughs!
Q. How do I get an introductory job in cybersecurity?
A. Many people start as a junior analyst in a Cyber Security Operations Center (CSOC)
examining alerts and trying to analyze them. You learn a lot doing this and from there
you can go in other directions. One SANS instructor started as a security engineer
looking at how to implement security applications within a particular environment, which
involved a lot of troubleshooting on the network that helped the instructor get a better
understanding of network security and protocols. You can also look for internships. Every
student in the SANS.edu bachelor's degree program completes a virtual internship as
an Apprentice Handler in the Internet Storm Center. Here’s a sampling of helpful sites:
seap.asee.org, nreip. asee.org, vsfs.state.gov, and blog.collegevine.com/14-awesome-
internships-for-highschool-students. For those in college, make sure to use the career
services office and other resources available to you on your campus.
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
17
Q. When getting started, which is better: a degree or certification?
A. There are some fields in cybersecurity for which a degree is certainly an advantage, but
then there are others for which certifications are sufficient to demonstrate competency
in a specific area. SANS.edu's career-focused undergraduate certificate program is one
option for students who want to enter the field quickly. All the credits earned in SANS's
undergraduate program can be transferred into SANS’ bachelor’s degree program, for
students who want the extra credential.
Read about Jesse LaGrew’s student success story here: https://www.sans.edu/success-
stories/jesse-lagrew/
O. What should | do if | don’t know which path I want to take?
A. What is exciting for you? What gives you the drive and determination to dig in and want
to learn more? Figure that out, then figure out a path that also achieves your career goals
that align and you'll be well on your way to success. If you're not sure yet, try a little bit
of everything. It’s not necessarily best for everyone to try to specialize too early. Having a
good general background is a big advantage and allows you to actually get a sense of what
you enjoy.
Q. What advice do you like to give to those just starting out?
A. There are a lot of answers to that question, but they can all help you. For starters, read,
practice, and don't be afraid to make mistakes. Set up your own lab, log things from those
servers, then try to execute attacks you learned on the Internet or from books and see
what happens. In other words, just play around a bit and find out what you like and are
good at. Networking also matters, in fact it’s golden in the cybersecurity field. Join and
volunteer at local meetups (ISACA, Security BSides, (ISC)2, Defcon, OWASP, WiCyS). Many
post their meetings on meetup.com or their parent websites. Go to conferences and try to
meet as many people as possible.
Final Advice from Lance Spitzner
“If you've always been curious about getting started in cybersecurity, don’t let your
education or background determine your career path or limit your options. No matter
what your background is, you bring something unique and special to this field, which
we desperately need. As long as you have passion, and desire to learn, you're on the
right track. Never lose that desire to learn. Once you start to develop your skills and
you begin to develop a network of people, trust me, the opportunities will come”.
Read full blog on Getting Started in Cybersecurity with a Non-Technical Background
sansurl.com/newtocyber
New to Cyber Field Manual The Ultimate Guide to getting into Cyber
18