The source is an audio recording of a podcast episode focused on providing advice for those seeking to enter the cybersecurity field. The host, Marc, offers insights on acquiring practical experience, the importance of certifications, the significance of soft skills, strategies for successful job interviews, and effective networking methods. He emphasizes the importance of tailoring resumes to showcase relevant skills and using networking events to connect with industry professionals. He also shares his own personal experience with job hunting and rejection, encouraging listeners to persevere despite setbacks and to continuously improve their job application materials.

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

--

If you have questions for the show, feedback or topics you want covered. Please send a short email to marc@bytesizedsecurity.show with the Subject line of "Byte-Sized Security" so I know it's about the podcast.

Connect with me on TikTok: https://www.tiktok.com/@bytesizedsecurity

Marc: 00:00:00

So this podcast is going to be a little bit different because what I did.

2

: 00:00:04

Is take a previous podcast.

3

: 00:00:06

And I used a site by

Google called notebook LM.

4

: 00:00:10

Too.

5

: 00:00:12

Structure that in a better way,

that might be more interesting

6

: 00:00:14

to listen to for listeners.

7

: 00:00:16

The first time I did this, it was

more of a me just answering questions

8

: 00:00:20

one off and kind of spit ballin it.

9

: 00:00:22

This one, actually, AI

sort of helped me out.

10

: 00:00:26

Organize it.

11

: 00:00:27

And it made it into a podcast between two

guests talking about the show that I did.

12

: 00:00:33

So this should be real interesting.

13

: 00:00:34

Again, the site that I used, if you

have a Google account won't cost,

14

: 00:00:38

anything you can add up to 50 sources.

15

: 00:00:40

It's mostly for research, but

it's a quite an interesting site.

16

: 00:00:45

Again, it's notebook L m.google.com.

17

: 00:00:49

And this is what the

episode will sound like.

18

: 00:00:52

Angie: Okay, so you're thinking

about a career in cybersecurity, huh?

19

: 00:00:55

Well, you're definitely not alone.

20

: 00:00:57

This field is seriously exploding

right now, but let's be real,

21

: 00:01:01

getting a foot in the door can

feel kind of overwhelming, right?

22

: 00:01:04

Dan: Yeah, for sure.

23

: 00:01:05

It's easy to get lost in

the sea of advice out there.

24

: 00:01:08

Angie: Exactly.

25

: 00:01:09

And that's what we're diving into today,

how to actually break into cybersecurity.

26

: 00:01:13

And we're not talking vague theories here.

27

: 00:01:15

We're But real practical advice

that you can actually use,

28

: 00:01:19

Dan: right?

29

: 00:01:19

We need the inside scoop.

30

: 00:01:20

Angie: You got it.

31

: 00:01:21

We're dissecting an episode from

the Bite Size Security podcast.

32

: 00:01:25

Their host, Mark, is a total pro

and he really breaks things down

33

: 00:01:29

for listeners who are trying

to get started in the field.

34

: 00:01:32

Dan: Oh, I've heard of that podcast.

35

: 00:01:33

It's supposed to be really good.

36

: 00:01:35

Angie: It is.

37

: 00:01:36

What I love about Mark is that

he doesn't sugarcoat anything.

38

: 00:01:38

He gives it to you straight.

39

: 00:01:40

Based on his own experience.

40

: 00:01:41

Dan: That's so important.

41

: 00:01:42

Especially in a field like cyber

security where things change so quickly.

42

: 00:01:46

You need advice that's

grounded in reality.

43

: 00:01:48

Angie: Absolutely.

44

: 00:01:49

And one thing that makes Mark's

perspective super valuable is

45

: 00:01:52

that he actually transitioned

into cybersecurity himself.

46

: 00:01:55

So he gets the challenges newcomers

face because, well, he's been there.

47

: 00:02:00

He even talks about how he struggled with

a lateral career move despite already

48

: 00:02:05

having some IT experience under his belt.

49

: 00:02:07

Can you believe that?

50

: 00:02:08

Dan: Wow, seriously.

51

: 00:02:09

That just goes to show you that everyone,

no matter their background, has to hustle

52

: 00:02:13

and prove themselves in this industry.

53

: 00:02:15

Angie: Totally.

54

: 00:02:16

But, on the flip side, it's also

kind of encouraging, you know?

55

: 00:02:19

It means the playing field is

a little more level for those

56

: 00:02:22

who are just starting out.

57

: 00:02:23

You don't necessarily need a

computer science degree from, like,

58

: 00:02:26

the dawn of time to be successful.

59

: 00:02:29

Dan: Right.

60

: 00:02:29

It's more about skills and a

willingness to learn, which is

61

: 00:02:33

something that Mark emphasizes a lot.

62

: 00:02:35

He's very clear that a traditional

IT background can be a great asset,

63

: 00:02:39

but it's not the be all and end all.

64

: 00:02:41

Cybersecurity needs people with

all sorts of skills, from legal

65

: 00:02:45

and writing to training and beyond.

66

: 00:02:47

Angie: It's true.

67

: 00:02:48

Cybersecurity isn't just about, like,

hacking into the mainframe anymore.

68

: 00:02:52

I mean, it's way more than that.

69

: 00:02:53

It's about strategy,

communication, problem solving.

70

: 00:02:57

Dan: Exactly.

71

: 00:02:58

Think of it like building a

security team in the real world.

72

: 00:03:01

You wouldn't want everyone to have the

same skills and perspectives, right?

73

: 00:03:04

Angie: That's a fantastic point.

74

: 00:03:05

So, instead of getting hung up

on whether you have the perfect

75

: 00:03:08

background, it's more about figuring

out how your existing skills could

76

: 00:03:11

be valuable in a cybersecurity role.

77

: 00:03:13

It's about finding your niche.

78

: 00:03:15

Dan: Absolutely.

79

: 00:03:16

And one of Mark's biggest pieces of

advice is to actually research the

80

: 00:03:21

different areas within cybersecurity.

81

: 00:03:22

There's so much out there.

82

: 00:03:24

Angie: Yeah.

83

: 00:03:24

Dan: Figure out what really

interests you and see how your skills

84

: 00:03:27

might connect with those areas.

85

: 00:03:28

Angie: Okay, that makes a ton of sense.

86

: 00:03:29

But let's say you've done your research.

87

: 00:03:31

You're ready to start applying

for jobs, and then you hit a wall.

88

: 00:03:35

A wall of certifications.

89

: 00:03:38

CISSP, security, CCNA,

the list goes on and on.

90

: 00:03:41

It can be totally overwhelming.

91

: 00:03:43

Dan: Oh, tell me about it.

92

: 00:03:44

I remember when I first started

looking into certs, I was

93

: 00:03:46

like, where do I even begin?

94

: 00:03:48

Angie: Right.

95

: 00:03:49

And Mark has this hilarious take on this

whole certification craze, especially

96

: 00:03:53

when it comes to entry level roles.

97

: 00:03:54

Dan: Yeah, what's his take?

98

: 00:03:55

Angie: He basically laughs at

those job postings that require a

99

: 00:03:59

CISSP for an entry level position.

100

: 00:04:01

It's like, they want you to be a

cyber security ninja before you've

101

: 00:04:04

even learned how to throw a punch.

102

: 00:04:05

Dan: Yeah, that's a bit much, right?

103

: 00:04:07

Like, asking someone to run a

marathon before they can even walk.

104

: 00:04:09

Angie: Exactly.

105

: 00:04:10

So, what's the deal with certifications?

106

: 00:04:13

Should we be spending all our free time

studying for them, or are they just

107

: 00:04:16

kind of nice to have on our resumes?

108

: 00:04:19

Dan: Well, Mark doesn't dismiss

certifications entirely.

109

: 00:04:22

He sees them as valuable,

but for specific reasons.

110

: 00:04:26

Angie: Okay.

111

: 00:04:26

I'm intrigued.

112

: 00:04:27

Like, what?

113

: 00:04:28

Dan: First off, they can actually help you

get past those applicant tracking systems.

114

: 00:04:32

You know, those ATS things a lot

of companies use to filter resumes.

115

: 00:04:34

Those

116

: 00:04:35

Angie: things are brutal.

117

: 00:04:36

Dan: Yeah, they can be.

118

: 00:04:37

Certifications act as keywords

to make your resume stand out.

119

: 00:04:40

Angie: So it's like playing a game,

figuring out the right keywords.

120

: 00:04:43

Dan: Kind of.

121

: 00:04:45

But the other thing certifications

do is show employers you

122

: 00:04:47

have a baseline of knowledge.

123

: 00:04:49

Like, you're serious about the field

and you're investing in yourself.

124

: 00:04:52

That makes sense.

125

: 00:04:53

But here's the key.

126

: 00:04:54

Don't just collect certifications

like they're Pokemon cards.

127

: 00:04:57

Be strategic.

128

: 00:04:58

Angie: So it's all about

quality over quantity.

129

: 00:05:01

Dan: Exactly.

130

: 00:05:02

Choose the ones that are relevant

to the specific cybersecurity

131

: 00:05:05

jobs you actually want.

132

: 00:05:07

Angie: Focus.

133

: 00:05:08

I like it.

134

: 00:05:09

But even with the right certifications,

Mark emphasizes that technical

135

: 00:05:13

skills alone won't cut it.

136

: 00:05:15

He's a big believer in

what he calls soft skills.

137

: 00:05:19

Things like curiosity and self

discovery are super important,

138

: 00:05:22

especially in such a fast paced field.

139

: 00:05:24

Dan: Oh, absolutely.

140

: 00:05:25

I think that's spot on.

141

: 00:05:26

Cyber security is constantly changing.

142

: 00:05:28

You can't just learn one thing and expect

to coast on that knowledge forever.

143

: 00:05:32

Angie: Right.

144

: 00:05:32

You've got to be constantly

learning, adapting, and evolving.

145

: 00:05:35

Dan: Exactly.

146

: 00:05:35

Mark actually brings up

phishing attacks as an example.

147

: 00:05:38

Like, have you seen the crazy

stuff they're doing with AI now?

148

: 00:05:41

Angie: No.

149

: 00:05:41

What are they doing?

150

: 00:05:42

Dan: It's kind of scary how

sophisticated it's gotten.

151

: 00:05:45

But it proves Mark's point perfectly.

152

: 00:05:48

If you're not learning and adapting

You're going to get left behind.

153

: 00:05:51

Angie: Whoa, AI powered phishing attacks.

154

: 00:05:53

That's kind of terrifying,

but I guess it makes sense.

155

: 00:05:56

Cybersecurity is like this

never ending arms race.

156

: 00:05:58

As the good guys get better, the

bad guys have to up their game too.

157

: 00:06:02

So how can people actually develop those

crucial SOP skills that Mark talks about?

158

: 00:06:07

Especially if you're just

starting out in cybersecurity.

159

: 00:06:10

It's not like you just wake up

one day with this like, incredible

160

: 00:06:13

self directed learning superpower.

161

: 00:06:14

Dan: Right.

162

: 00:06:15

It takes work.

163

: 00:06:16

Yeah.

164

: 00:06:16

But Mark has some really

cool advice about this.

165

: 00:06:18

He's a huge advocate for what he

calls self discovery learning.

166

: 00:06:22

It's all about taking control of your

education, going beyond the classroom,

167

: 00:06:26

and actually learning by doing.

168

: 00:06:27

Angie: I like the sound of that.

169

: 00:06:29

Dan: He encourages people to dive into

cybersecurity forums, experiment with

170

: 00:06:33

different tools, and even try setting

up their own vulnerable systems in a

171

: 00:06:37

safe environment so they can practice.

172

: 00:06:39

Angie: Wait, what?

173

: 00:06:40

You mean like building your

own little hacking lab at home?

174

: 00:06:43

Dan: Exactly.

175

: 00:06:43

Angie: Yeah.

176

: 00:06:44

Dan: Mark calls it a home lab,

and it's surprisingly common

177

: 00:06:47

in the cybersecurity world.

178

: 00:06:48

Angie: Seriously?

179

: 00:06:49

Dan: Yeah.

180

: 00:06:50

It's a way to get hands on experience

without the pressure of a real world

181

: 00:06:54

job, which can be super valuable

when you're first starting out.

182

: 00:06:57

Angie: That's so cool.

183

: 00:06:57

It sounds a little intimidating,

though, building your own hacking lab.

184

: 00:07:00

Like, where do you even begin?

185

: 00:07:02

Dan: Well, that's where those soft

skills come in curiosity and that

186

: 00:07:05

willingness to just figure things out.

187

: 00:07:07

Mark talks about spending hours

in his home lab, breaking stuff,

188

: 00:07:11

putting it back together and just

learning through trial and error.

189

: 00:07:15

And he emphasizes that you don't need

some crazy expensive setup to get started.

190

: 00:07:20

You can start small and build

up your skills as you go.

191

: 00:07:23

Angie: That's really encouraging.

192

: 00:07:24

So it's all about embracing

that hacker mindset, right?

193

: 00:07:27

A

194

: 00:07:27

Dan: hundred percent.

195

: 00:07:27

Angie: Even if you're not planning on

becoming an ethical hacker or anything,

196

: 00:07:31

just having that curiosity to explore and

figure out how things work is so valuable.

197

: 00:07:36

Dan: It's essential.

198

: 00:07:37

And besides Home Labs, Mark's

also a huge fan of those

199

: 00:07:40

Capture the Flag competitions.

200

: 00:07:41

Have you ever heard of those?

201

: 00:07:42

Angie: Yeah, I've heard the term, but

I'm not entirely sure what they are.

202

: 00:07:45

Dan: So CTFs are basically online

cybersecurity games or competitions

203

: 00:07:50

designed to test your skills in

a really fun and engaging way.

204

: 00:07:54

Imagine solving puzzles, cracking

codes, finding vulnerabilities,

205

: 00:07:58

and competing against other people.

206

: 00:07:59

Angie: That sounds awesome.

207

: 00:08:00

It's like gamified

cybersecurity training almost.

208

: 00:08:03

Dan: Exactly.

209

: 00:08:05

And the best part is that there are

CTFs for every skill level, from

210

: 00:08:08

total beginners to seasoned pros.

211

: 00:08:10

Yeah.

212

: 00:08:10

Yeah.

213

: 00:08:11

Mark says that CTFs helped him solidify

his understanding of key cybersecurity

214

: 00:08:15

concepts when he was starting out.

215

: 00:08:18

He said it was like everything just

clicked once he actually started

216

: 00:08:20

applying what he was learning

in a more practical environment.

217

: 00:08:23

Angie: Wow.

218

: 00:08:24

So CTFs are like the ultimate proving

ground for your cybersecurity skills.

219

: 00:08:27

I love that there's a

competitive side to it, too.

220

: 00:08:29

I

221

: 00:08:29

Dan: know, right?

222

: 00:08:30

It's like esports for security nerds.

223

: 00:08:32

Angie: Totally.

224

: 00:08:32

So we've got Homelabs, CTFs.

225

: 00:08:34

Are there any other, like, unconventional

learning resources that Mark recommends?

226

: 00:08:39

Dan: Well, what's cool about all of

these things, Homelab, CTFs, even those

227

: 00:08:42

online forums we talked about, is that

they all foster a sense of community.

228

: 00:08:47

You're connecting with people who

share your passion for cybersecurity.

229

: 00:08:50

And you can learn so much just

by observing, asking questions,

230

: 00:08:54

and being part of that community.

231

: 00:08:56

Angie: That's a really good point.

232

: 00:08:57

Okay, so we've covered a lot of

ground transferable skills, choosing

233

: 00:09:01

the right certifications, hands

on learning, building a home lab.

234

: 00:09:05

It seems like Mark's philosophy

is all about taking action.

235

: 00:09:08

Like, don't just wait for opportunities to

come to you, go out there and create them.

236

: 00:09:12

Dan: Absolutely.

237

: 00:09:13

And, while he's a huge advocate for

self directed learning, he definitely

238

: 00:09:17

doesn't downplay the value of

connecting with others in the field.

239

: 00:09:21

Which brings us to his

thoughts on networking.

240

: 00:09:23

Angie: Yeah.

241

: 00:09:24

Dan: Yeah, so when it comes to

networking, Mark walks the walk.

242

: 00:09:27

You know, he doesn't just talk about it.

243

: 00:09:28

He actually attended RSA, like the

biggest cyber security conference out

244

: 00:09:32

there, for two years straight, before

he even broke into the industry.

245

: 00:09:35

Angie: Two years, wow, he must have been

serious about making those connections.

246

: 00:09:39

Dan: Oh, absolutely, he was all in.

247

: 00:09:40

He said he didn't know anyone at first,

but he went to all the talks, chatted

248

: 00:09:43

with people at the vendor booths,

totally immersed himself in that world.

249

: 00:09:48

And what's really cool is that

he emphasizes that networking

250

: 00:09:51

doesn't have to be expensive.

251

: 00:09:53

You know, you don't need to

fly to Vegas and drop a ton

252

: 00:09:55

of cash on a conference pass.

253

: 00:09:56

Angie: Right.

254

: 00:09:57

There are definitely ways

to do it on a budget.

255

: 00:10:00

Dan: Yeah, exactly.

256

: 00:10:01

He's a big fan of those smaller

local conferences like B Sides.

257

: 00:10:05

They're often free or way

cheaper than the big name events.

258

: 00:10:08

He actually tells this crazy story

about overhearing a conversation at B

259

: 00:10:12

Sides Vegas that led to a job offer.

260

: 00:10:14

Angie: No way!

261

: 00:10:15

Are you serious?

262

: 00:10:15

It's just from eavesdropping.

263

: 00:10:16

I

264

: 00:10:16

Dan: know, right?

265

: 00:10:17

It's a perfect example of how

you never know where that next

266

: 00:10:20

opportunity might come from.

267

: 00:10:22

But beyond those in person events,

Mark's also a huge proponent of

268

: 00:10:26

building a solid online presence.

269

: 00:10:29

Especially on LinkedIn.

270

: 00:10:30

Angie: Makes sense.

271

: 00:10:30

It's like having a digital resume that

anyone in the industry can see, right?

272

: 00:10:34

Dan: Exactly.

273

: 00:10:35

Mark suggests treating your

LinkedIn profile as your own

274

: 00:10:38

personal cybersecurity brand.

275

: 00:10:41

Showcase your skills experience and

even your passion for the field.

276

: 00:10:45

Don't be afraid to share articles,

participate in discussions, and connect

277

: 00:10:48

with people whose work you admire.

278

: 00:10:50

You'd be amazed how many

doors can open just by putting

279

: 00:10:52

yourself out there authentically.

280

: 00:10:54

Angie: It's all about making

those connections and building

281

: 00:10:56

relationships both online and offline.

282

: 00:10:58

Dan: Absolutely.

283

: 00:11:00

So let's shift gears for a sec.

284

: 00:11:01

We've talked about networking,

building your skills, but what about

285

: 00:11:04

the actual job application process?

286

: 00:11:07

You know, sending out your resume

and going through interviews,

287

: 00:11:09

it can be a real grind.

288

: 00:11:11

Uh huh.

289

: 00:11:11

And?

290

: 00:11:12

Let's be honest.

291

: 00:11:12

Rejection is part of the game.

292

: 00:11:15

Angie: Oh, tell me about it.

293

: 00:11:16

I've definitely stared at my inbox

wondering why no one was emailing me back.

294

: 00:11:20

It can be brutal.

295

: 00:11:21

Dan: Totally.

296

: 00:11:21

And that's what I appreciate about Mark.

297

: 00:11:23

He's so real about the ups

and downs of the job search.

298

: 00:11:26

He talks about how he sent out

tons of applications and faced

299

: 00:11:29

his fair share of rejections.

300

: 00:11:31

But here's the thing.

301

: 00:11:32

He didn't let it get to him.

302

: 00:11:33

He actually started tracking

his application response rate.

303

: 00:11:36

Angie: Interesting, like

turning it into a numbers game.

304

: 00:11:39

Dan: Exactly, and he found that he was

getting about a 54 percent response rate,

305

: 00:11:43

which is pretty impressive if you ask me.

306

: 00:11:46

But even at a good response rate, you're

still going to get those rejections.

307

: 00:11:49

Oh, for sure.

308

: 00:11:50

And it's so easy to take it personally,

you know, like, what's wrong with me?

309

: 00:11:53

Why aren't they picking me?

310

: 00:11:54

Totally understandable.

311

: 00:11:56

But Mark's approach is that

every application, every

312

: 00:11:58

interview, even every rejection,

313

: 00:12:01

Angie: Okay, I like that.

314

: 00:12:03

It's about finding the

lesson in every situation.

315

: 00:12:06

Dan: Exactly.

316

: 00:12:06

He encourages people to really look at

those experiences, what worked, what

317

: 00:12:10

didn't, and then use that feedback to

make your applications even stronger.

318

: 00:12:15

Angie: So it's all about

having that growth mindset.

319

: 00:12:17

Setbacks are just

opportunities for improvement.

320

: 00:12:20

Dan: A hundred percent.

321

: 00:12:22

And one of the best tips Mark offers is

to treat your resume as a living document.

322

: 00:12:26

You don't just create one generic version

and blast it out to a million companies.

323

: 00:12:30

Angie: You've got to tailor it

to each specific role, right?

324

: 00:12:33

Dan: Exactly.

325

: 00:12:33

Highlight those skills and

experiences that are most

326

: 00:12:36

relevant to each job description.

327

: 00:12:38

He actually recommends keeping a

file of interesting job postings.

328

: 00:12:42

You know, the ones that really

get you excited and then use those

329

: 00:12:44

as inspiration to optimize your

resume and your online profiles.

330

: 00:12:48

Angie: It's brilliant, really.

331

: 00:12:49

You're basically reverse engineering

the hiring process, figuring out

332

: 00:12:52

exactly what employers want and

then making sure you're presenting

333

: 00:12:55

yourself in the best possible light.

334

: 00:12:56

Dan: Nailed it.

335

: 00:12:58

Now, before we wrap things up,

there's one more thing I want to

336

: 00:13:00

highlight from Mark's advice and I

think it's a really important one.

337

: 00:13:02

He talks about the importance of

finding your why in cybersecurity.

338

: 00:13:07

Angie: Your why?

339

: 00:13:09

What does he mean by that?

340

: 00:13:10

Dan: He's essentially saying that

if you want to not only break into,

341

: 00:13:14

but truly thrive in this field,

you need a strong sense of purpose.

342

: 00:13:19

You need something deeper

than just wanting a cool

343

: 00:13:21

job title or a big paycheck.

344

: 00:13:23

Angie: I love that.

345

: 00:13:24

So it's about figuring

out what motivates you.

346

: 00:13:27

What are you passionate about?

347

: 00:13:28

Dan: Exactly.

348

: 00:13:28

What problems do you want to solve?

349

: 00:13:30

What kind of impact do you

want to make in the world?

350

: 00:13:32

Because at cybersecurity is

about more than just technical

351

: 00:13:35

skills and certifications.

352

: 00:13:37

It's about protecting people,

businesses, entire societies.

353

: 00:13:41

It's about making a real difference.

354

: 00:13:43

Angie: Wow, that's a powerful

way to think about it.

355

: 00:13:47

So as we wrap up this deep dive into

Mark's incredible insights, I think

356

: 00:13:50

we've uncovered a really solid word map

for anyone who wants to launch a career

357

: 00:13:54

in this exciting and impactful field.

358

: 00:13:56

It's clear that breaking

into cybersecurity requires

359

: 00:13:58

a multifaceted approach.

360

: 00:14:00

We're talking technical skills,

soft skills, practical experience,

361

: 00:14:03

and a whole lot of hustle.

362

: 00:14:05

But what really shines through is that

having a genuine passion for this ever

363

: 00:14:08

evolving field and a desire to make

a positive impact is absolutely key.

364

: 00:14:13

So as you embark on your own

cybersecurity journey, here's a

365

: 00:14:15

final thought to leave you with.

366

: 00:14:17

If cybersecurity is all about anticipating

and mitigating future threats, how do

367

: 00:14:21

you envision yourself contributing to

a safer and more secure digital world?