Let’s say I want to get into pentesting and CEH - where would you advise starting if my experience is minimal? I know my way around things but not much scripting or too heavy network experience. Downloaded Kali on a VM to get some tools, but let’s say you could advise me of a training course/package to start with - what would it be, and from where? My current job is going to let us pick something, and while my answer would be to go to DEFCON 😂 that’s obviously not gonna happen this year.

Posting as :
works at
You are currently posting as works at

maybe, start by doing some solo ctf stuff at overthewire.

That way you can kind of gauge competence.

like

1. Offensive Security Fundamentals ($700, 2-4 weeks) — take the OSWP exam.

2. Udemy: Jason Dion’s Net+, CySA+, PenTest+, CASP+ Prep Courses (~$50, 2-4 weeks). Take the Sec+ or CASP+ exam, depending on your level of experience.

3. Offensive Security PEN-200. Take the OSCP. ($2100-5500/2-3 months)

4. Practice on free target nets and with basic web perimeter scanning.

You’ll get a role as a Junior pentester no problem.

like

TryHackMe and HacktheBox

Related Posts

I’m looking into exiting consulting and moving into product management. Picked up a few books to read. Would a PM certification provide a lot of value? Any other tips are appreciated! Thank you.

like

M7 part time vs top 25-30 full time for career pivots and network?

like

Will getting a low tier rating also affect your career when you are switching companies?

funny

One of my junior associates recently resigned and I've been trying to make an exit myself for several months now. The job market has been really competitive but I am getting closer to getting a new job and moving on. The firm culture isn't great and work-life balance is non existent. My physical and mental health have been suffering, so I really don't think I could stay. How did you avoid the guilt trips from Partners/Senior staff trying to get you to stay?

like

My brother recently graduated high school and wants to work for a year or two before he starts his undergrad. What sort of jobs should he be looking for that could help his resume in the future? He eventually wants to pursue engineering

like

I have offers from different organization, Could you please help me to decide which one would be great choice.
All are for Bigdata profile with almost same package.

Yoe- 9, Big data Exp-3
Iris
Saama technology Pune
Epam Systems - Shell Market project
HCL - Deutsch Bank project
Impetus

Deciding factor- Job security, WLB, yearly hike and scope of learning.

like

Hi im having 3 yoe having 2 offer 1.Nice x+2 variable+1Joining bonus 2.Bitwise x+2 fix which one i should join plesae suggest in term of job security and learning wise

like

Hi! how is PwC India’s Management Consulting- Finance Transformation aka Finance Effectiveness practice? In terms of career growth, WLB, leadership team? Thanks! PwC PwC India Deloitte USI Deloitte India

like

Risk assurance senior and planning to leave for industry to do security compliance soon. Would want to come back to big 4 to do security consulting, how should I plan out my career route? Just a lost young soul who graduated from college 2 years back...

like

Hi fishes, I got new offer from cognizant. How much average (min:max)appraisal sr associate gets? I would like to know the growth in CTS.

like

Hey y'all, kind of a two part question:
1. I enjoy the people management more than individual contributor stuff. What career paths do you see in our industry for people who are managing support engineering teams?
2. What certifications are valued today? Seems like being a AWS Cloud Practitioner is a good general one, but are there others that stand out?

like

What are the exit opps like from Deloitte strategy vs. Kearney or MBB Am I at a significant disadvantage if I don’t try to pivot to a more prestigious firm?

like
like

I've been in merchant sales for a large bank the last several years looking to do a pivot. Any suggestions for a sales position for someone who's done outside sales for years but not in the tech industry?

like

Just got promoted to ACD. Will be taking on more leadership roles. Any books, workshops, resources that helped you learn leadership skills?

likeuplifting

Hi everyone, I am 4.9 years experienced , I joined Fractal 3 months ago as a data engineer, but still haven't got any project. Process is so slow that I have received only 4 to 5 project calls. I switched in hopes that will learn the new tech and tools. But now i am starting to forget even the one i knew. Should i go for change or wait a little more time as fractal is reputed in AI/ML? I have interview lined up with Impetus as for now. Would it be better choice?

Is there a way to go into an AE role with just SDR experience at a different company?

like

Hi, Is there anyone in here who is a QA (Quality Assurance or Tester)? Can someone share how to get started in QA If you have no tech background? I would love to get some insights if you are someone who has transitioned into QA or testing with no prior experience or background, and how did you get your roles ?

Thanks a lot!

like

@Capco what’s the comms/content space like? I’ve heard lots of mixed reviews re: consultancy jobs, but that’s not my focus. I ask as I’m looking into a potential position at Capco, but concerned I could be leaving a more “secure” company (BofA) for a raise at another org. that has a lot of room for improvement.

like

More Posts

does ACN increase salary on a yearly basis atleast for inflation ? I have heard they dont. Also if you being brought in at 12 months level will the salary increase for 24 months, 36 months etc ?

like

Hi All,
I am joining EY GDS next month. I have heard a lot about hectic work hours in EY and no work life balance. Is it true? If yes, how many hrs working should we expect in a day to be mentally prepared.

like

Found a random engagement ring.

Hi all, so I found a platinum ring (which I assumed it's an engagement ring as it has dates and initials engraved on top.) And a Divvy tag (I have no idea what it was until I googled it. Apparently it's a bike sharing service in Chicago) in a briefcase I ordered online. I was thinking of returning the item back to the store but that wouldn't help the person who lost the ring. Attached is a picture of them.

What should I do now?

**I'm not in Chicago

Post Photo
like

What CTC i can expect if i have 2 year experience as a java developer or network engineer?

like

How much $ do FT mid-level creatives make in Amsterdam?

like

Ia it good to join EY GDS in consulting service line?

like

Hi folks, I have an offer from Persistent for Java developer and they're offering me 7.5 LPA for Senior Software Engineer role.. Is this the right scale in Persistent ?
My experience is 3 years

like

Hi fishes, I got new offer from cognizant. How much average (min:max)appraisal sr associate gets? I would like to know the growth in CTS.

like
like

HCL is offering me 3.2 band for 15 years experience and 38 lpa. Is it the correct band for my yoe?

like

Last week I got automated call from infosys and asked few details . After that I got call from hr and said my interview is scheduled on next week and very next day one person called me and asked few technical questions .she said she's calling from infosys and this is technical screening round . Today same hr called and said she will be scheduling a client interview.

My doubt is till now I didn't received any mail from infosys. So this is scam or part of infosys interview process?

like

Can i get some idea on what are current market trends for candidates with 5 yrs of SOC experience applying for cybersecurity roles like security officer or GRC related as well as consultant roles?

like

What’s the deal with these start-ups not hiring people with actual insurance experience?

like

Cant wait until baseball disappears forever. Boring, perfomance-enhancing sus af 69inning havinazz sleeping pill of a sport; the most boringazz sport in the history of exxxistence itself. Shiets like big pharma, putting the whole of humanity to zzzzzz good god I hope god deletes baseball even tho I dun believe god exists but truth is the real thing that shouldn't exist is baseball fuk

likefunnyuplifting

Hey y'all, kind of a two part question:
1. I enjoy the people management more than individual contributor stuff. What career paths do you see in our industry for people who are managing support engineering teams?
2. What certifications are valued today? Seems like being a AWS Cloud Practitioner is a good general one, but are there others that stand out?

like

CCTC : 20L (Fixed) + 2L Variable Bonus

Tech stack : Backend Development C++

YOE : 6+

Offer : 45L ( Fixed ) + 40L Signon Bonus ( divided in 2 years ) + Stocks worth 60L ( Divided in 4 years)

CTC (1st year) : ~ 71L (Base+Bonus+Stock) + 1.5L Relocation

like

What is the avg yearly hike in deloitte india risk advisory?

like

"She's like 30, but doesn't look super old"

likefunny

"We hear your responses to our anonymous pulse survey, and we understand you all overwhelmingly think our team structure org needs to change. We understand it's not necessarily working well—but here's why we're NOT going to change it."
Why ask us if you really don't care?

likefunny

Additional Posts in Cybersecurity Professionals

I am looking for Job change can someone help me out with the job openings for the security analyst position...?
I was having 5+ years of hands on experience into Information security by handling IR, Splunk, Azure Sentinel, Qradar, Arcsight, Proofpoint, Forcepoint, Rapid7.

like

What are the fastest growing cyber security startups? What are the most scalable business models?

like

What’s everyone’s take on the Mimecast breach?

What's the ramifications of the Russian NSA hack that got discovered today?

I have a Soc analyst 3rd stage interview with the Head of Information & Cyber Security of a company , Has anyone been on either side of the table? I like to know what to except in such interview to sell myself as the best candidate for the job . Thanks

like

I want to hear your horror stories as a service provider. I'll start. At a previous company... we were contractually obligated to have deployed (and provided 24x7 monitoring of) an AT&T Cybersecurity product suite for a managed network client, but we never deployed the solution. They paid us for the 24x7 monitoring and the software for MONTHS. When they realized it, we owed them almost $27k.

like

Hi everyone,
I’m hiring for x3 AppSec Engineers in my team.
UK based, team is 100% remote, although the office in London is there if you prefer.
Pre IPO unicorn valued FinTech startup.
Get in touch for more info 🙂

Hello everyone!

Im working in software currently but want to make a shift into cyber security, I am burnt out on the technical aspect of my current position and would like to make a switch into a cyber position where I play the role of an advisor for different teams, is this possible? what role should I be looking for and what path should I take?

I appreciate your input on this.

Previously a Customer Success Director and Project Manager looking to pivot into Cybersecurity. What’s the best role/certification to aim for? Any companies willing to provide OTJ training?

like

A lot of security pros I meet are not in a good place emotionally because it seems hopeless. However, some are just fine.

What are the coping strategies that work?

I will start - mine is to find the funny in everything from lack of patching to supply chain hacks.

like

Hello 5 years of software development experience, looking to crossover into cybersecurity. Recently graduated with masters in cybersecurity from Georgia Tech. Anyone have any leads or willing to take a chance on a "new grad" I would be greatly appreciate any advice or help. Thanks

like

Hey all,

Recent grad here. Earned Bachelors in cyber security may 2021, masters in info mgmt and tech is expected may 2022

Looking to leave my genius bar role at apple for a “big boy job”. Specifically in the cyber security field

I’ve applied to the B4 & had interviews with PwC & D. PwC interviews went well, waiting for the others. Still applying to more roles as well. Do any of you know any thats looking for new grads?

I’m in a T1 city (NYC)

Any tips or advice would be great! Thanks

Hey everyone - I am trying to get an entry level position in cyber / info security. Got my BS Cyber and Info Security in 2021. Have 5+ YoE in IT Support. Based in Chicago. Anyone willing to provide a referral or share advice on how to get in? I am applying daily on LinkedIn and Indeed but barely getting interviews. Appreciate any help.

helpful

Hello there. I’m looking for an internship or entry level position in cybersecurity. I live in NYC. Any leads? In the meantime what are your favorite online labs? I’m using TryHackMe for now.

like

Hello I keep seeing a lot of job listings pop-up for CrowdStrike. Has anyone worked there previously or presently? What are your thoughts as the feedback on Indeed versus Glassdoor is a bit conflicting.

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal