I hear this question all the time …
How do I get a job in cyber without any relevant experience?
I understand where this question comes from. It seems like every job posting wants “5 years of related experience” (plus a long list of skills you don’t have). How can you possibly get hired?!
Today I’m going to show you a different way of thinking.
Instead of saying, “I don’t have the experience” you need to start asking, “how can I get the experience?”
“I don’t have the experience” creates a limiting mindset that in order to learn a skill or gain knowledge, someone has to hire and train you. This is not always the case!
“How can I get the experience?” triggers an action-mindset that allows you to start qualifying yourself.
Here are 3 ways you can get started:
1. Start doing the job before you have the job.
We live in the a time of unlimited resources and information. You no longer have the excuse of not knowing how to do something (for the most part). Yes, some tools and data are unavailable to you. But don’t let that hold you back! Do not limit yourself.
Believe it or not, you can start doing the job you want without having the job.
Here’s how:
Step 1 - Research 10-20 job postings for your target role.
Step 2 - Copy and paste the “responsibilities” section into ChatGPT. Ask the system to summarize the information into a concise list of the most important job responsibilities.
Step 3 - Look at each bullet point and ask yourself, “how can I mimic this action with the available resources I have?”
For example:
“GRC Analyst”
Responsibility from job posting: “Develops key risk scenarios assessing threats and business impacts”
Idea: Write fictional scenarios involving cyber threats to a small business. Describe potential impacts and how the business can respond. Document your research.
“Penetration Tester”
Responsibility from job posting: “Proficient at scripting and automating exploits in language of choice.”
Idea: Learn scripting languages like Python or PowerShell. Build simple scripts that automate common tasks in your lab environment, such as scanning for vulnerabilities or exploiting known weaknesses.
“Cybersecurity Manager”
Responsibility from job posting: “Lead 3-5 employees and contingent labor professional for the cyber systems function within Cyber Defense.”
Idea: Seek out opportunities to lead small projects within your current role. These projects could involve coordinating efforts among team members, managing timelines and resources, and ensuring successful project outcomes.
After you’ve started successfully getting hands-on experience on your own (or in your current job), document what you’re doing.
Ideas:
Create a portfolio or blog where you can record what you’re doing. Include a link to this on your resume or LinkedIn profile.
Create a resume section titled, “Cybersecurity Projects” (or something related) where you can share what you’re doing and what your results have been.
Include a section on your LinkedIn summary where you can write about your side projects.
If you successfully connect with someone in industry (a mentor or an experienced professional), ask them to peer review what you’re doing to continue learning and to get additional ideas on how to improve.
I understand you have limits on what you can accomplish but I’ll say it again: DO NOT LIMIT YOURSELF. Remember, there are hackers out there figuring things out out on their own. So can you!
Leverage your background.
Are you a former cop, banker, nurse, teacher, mechanic? It doesn’t matter where you come from. Your previous jobs fall into an “industry category.”
When you search for the cyber role you want on LinkedIn, filter by the industry/industries you have experience in (select “all filters”).
Former Nurse? = Hospital & Healthcare
Bank Teller? = Financial Services
Mechanic? = Automotive
Your background in that industry can help get you noticed. Don’t put all your eggs in one basket but make sure to seek out and apply to jobs that relate to your work history.
You can also connect with people that have been where you are. I recently had a police officer reach out for help. My first recommendation for him was to reach out to former cops who made the switch to cyber. They would not only have great advice but they would be more willing to help someone coming from the same situation.
People make career changes all the time into cyber. So can you!
Surround yourself with experienced people.
You evolve into the people you spend time with. If you invest enough time engaging with the right people, you’ll start molding yourself into the cybersecurity professional you are aspiring to be.
Whatever your target role is, seek out people who work in that role now. Spend consistent time engaging with them.
LinkedIn connections
Discord servers
Slack channels
Other social media
In-person/online events
Local meet ups
There are so many advantages to building up your network!
Mentorship and skill development
Referrals to future jobs
Support and friendship
____________________________________________________________________________
Loving it
Great message today! There is always something you can do to improve, just have to find the right avenue.