Viewing a single comment thread. View all comments

focusedDude24 t1_j6jdjg9 wrote

sorry if I bombarded you with questions

1: What got you started down this field? Were you always a computer and tech person but decided to specialize?

2: When you started, how were the first few years like? Was it a process of watching YT and reading up on doc pages/write ups? How did you know what skills you needed to develop, was it learn as you go?

3: Do you have any certs and if so which ones do you recommend?

4: What skills are must haves on the resume and more specifically how did you build up yours?

5: I started doing HackTheBox and plan on signing up for NCL this year, do you think these are worth it? Do you have any suggestions for someone who wants to become a SOC analyst?

1

cyberjerry42 OP t1_j6jy0fe wrote

  1. Always a tech person! Always loved messing with various computer related stuff and getting my hands dirty to see what more I could do with X,Y or Z. Or trying to host a website just to "see how it works" and stuff like that.

  2. It was rough to be honest. This image describes it best. You start to learn bits and pieces to the point where you can glue stuff up but don't quite understand it. Then comes the point where you start to understand it and you realise just how much you actually understand jack shit lol

It was mainly a process of "uh, I wonder how to do this. Let's try!" and then being exposed to more stuff I didn't know and trying to learn about those too. Mainly through YT, various tutorials and reading solutions to some Capture The Flag challenges.

  1. I don't as of now but I'm working on it. Sec+ and OSCP are kind of industry standards despite them not being super up to date. HR will typically look for those. To actually "git gud" tho I recommend the PNPT.

  2. As stupid as it sounds, having a good Google-Fu will take you places. Just show how fast you can learn and how much you're willing to do it. Showing some knowledge about linux, saying you have a homelab and stuff like that can help as it shows hands on experience. If you won a prize at a CTF that's also a good to know.

  3. Not familiar with NCL sadly. And I'm not familiar enough with the SOC analyst role to be comfortable giving you advice sorry :(

2