Cyber Security Career - Tricks of the Trade

Importance and methodology for core expertise in cyber security

This briefing document summarizes the key arguments regarding the importance of specializing within the field of cybersecurity. The video advocates for focusing on a specific expertise rather than attempting to be a generalist, emphasizing the career and financial benefits that come with expertise in a particular area. It also suggests a practical approach for identifying a suitable expertise, acknowledging that it's a process that can evolve over time.

Key Themes and Ideas:

• Myth Busting & the Importance of an expertise: The video challenges common misconceptions about entering the cybersecurity field, such as the absolute necessity of a technical background, IT experience, coding skills, or numerous certifications. While these can be helpful, the speaker asserts that having a specialization, or a niche, is "non-negotiable" for career advancement.

• Quote: "Most of them are myths. Honestly speaking, you can get a very good job without having any of them. But one thing which is non-negotiable able is having an expertise."

• The Value of Specialization: The core argument is that specialization is highly valued and rewarded within the cybersecurity industry. Generalists might have broad knowledge, but specialists are sought after for their in-depth expertise.

• Quote: "You can be like a general cyber security guy. Uh you know there jack of all trades but you'll be a master of none or you can be a master of one."

• Financial Incentives: Specialization directly translates to increased earning potential. Consultants, for example, command high fees precisely because of their specialized knowledge.

• Quote: "Honestly, people pay more for specialists. You know, why do people consultants earn so much money, right? Because the companies that hire them, they are hiring them for their expertise, for their knowledge."

• Easier Path to Expertise: Focusing on a niche makes it easier to become an expert. Concentrating efforts on a smaller domain allows for deeper learning and more rapid skill development.

• Quote: "and it's actually easier to become an expert it's easier to choose one area and then drill down into it be it whatever you find interesting right"

• Building Authority and a Personal Brand: Specializing positions you as a "go-to person" within your area of expertise. This is crucial for building a strong professional brand and establishing credibility within the cybersecurity community.

• Quote: "people they actually respect the go-to people right the go-to person if I have a problem on cloud security and people say okay I'll go to Tamour because he's the cloud security guy"

• Actionable Steps for Choosing a Niche: The video indicates that practical guidance will be provided to help individuals identify their specialization, with the speaker promising a matrix/template to facilitate this process. It also emphasizes that choosing a niche is not a rigid decision and can be revisited later as experience grows.

• Quote: "You don't have to choose it immediately. I'm not saying that you're not you're just starting out in cyber security uh like you have one month experience and now you should choose a specialization but have that road map"

Examples of Niches Mentioned:

The video explicitly mentions the following examples of cybersecurity niches:

• Penetration Testing

• Network Security

• Cloud Security

• AI Security

• Governance

This video focuses on strategies for cybersecurity professionals to enhance their public profile and optimize their resumes to increase visibility and attract job opportunities. The speaker emphasizes the importance of LinkedIn, Medium (as a publishing platform), and a well-crafted resume tailored to specific job descriptions. AI tools like Canva, Adobe Express, and ChatGPT are heavily promoted for content creation and resume optimization.

Key Ideas and Facts:

• LinkedIn Profile Enhancement:

• Background: The speaker emphasizes the visual appeal of a LinkedIn background and suggests using Canva or Adobe Express to create a professional-looking banner. "See cyber security leader protecting digital assets and my website my phone number as well as my u uh you know email address plus 25 S+ years in the industry something like that I mentioned it and this is what is important like you know your name and then followed by the the key certification you have and then where all you worked I'm an ex Microsoft exhpensure and then what are the key skills which you are doing actually infraineering is also important but I'll say like you know infrastructure uh cloud as well as you know security which is also infraineering also important uh but I haven't mentioned it."

• "About" Section: The speaker stresses the importance of a well-written "About" section that includes relevant keywords for search visibility. He even suggests using AI to generate a summary, but cautions about maintaining originality: "In about you'll have to spend some time you know in here your AI also write it with AI... these are all my my original skills... these are all the keywords and when uh when people when many people they are searching for people like you know I will based on these keywords I will be visible in their search."

• Skills and Endorsements: He highlights the significance of adding relevant skills and seeking endorsements from colleagues and managers. "Skills also. I mean you can add you know the number of skills...So this is someone endorsing me actually um I have 99 plus 99 plus in you know security cloud infrastructure all are 99 plus actually all are over 500 600 it is going on plus you know you have uh after skills you have to seek for a recommendation."

• Recommendations: Actively seek recommendations from managers, leaders, or customers. "You can ask for a recommendation as well you know ask for a recommendation whoever uh you know your manager or who um your leader or your customer whoever it is and no one will take it you know negatively."

• Publications and Courses: List any publications (books, articles) and relevant courses (Udemy, Zachman). This helps create networking opportunities.

• Creating Posts: The speaker emphasizes the importance of quality content. He recommends using Canva or Adobe Express for visuals and ChatGPT for generating engaging article ideas. "The bare minimum expectation is quality you know if someone is spending 3 minutes to read your article or post you know they should not be feeling like you wasted their 3 minutes of their time."

• Generating Post Ideas with ChatGPT: Provides specific prompts to use with ChatGPT for generating LinkedIn post ideas: "Hey, how can I make use of charge to generate ideas for LinkedIn? post about cyber security domain and that should draw more followers and traffic."

• Resume Building:

• Key Sections: Emphasizes the importance of a professional summary, core competencies, certifications, experience (focus on the last 5 years), education, and technical skills.

• Tailoring to Job Descriptions: Advocates for customizing the resume to match the specific requirements of each job application. He demonstrates using ChatGPT to tailor a resume to a specific job description.

• Resume Rating with ChatGPT: Shows how to use ChatGPT to evaluate the effectiveness of a resume based on a job description and receive specific feedback for improvement. "So now the thing is pretty easy and many people they will make us you know they will complicate it here. Simply go ahead and then provide whatever I'm giving it here... It is asking us do you need anything else to be done that time you say to make it easier for me to review provide me the recommendation in tabular manner give me the score between 1 through 10 so I can monitor my development after taking your suggestion into an account."

• Tool Level Skills: Advocates for listing tool level skills in the resume. "Technical skills in the sense you know tool level is better... switches if you ask me I know three four models of switches I can do it and then firewalls if you ask me I mean I can do even now the latest uh new generation firewall like Palo Alto's firewall um you know checkpoints firewall the latest one the the new generation one I I worked on."

• Portfolio Website: Encourages creating a personal portfolio website (using WordPress or a static page) to showcase accomplishments and link to it from the resume.

Top of Form

Getting Experience Without a Job

This video excerpt addresses the common problem of needing experience to get a job, but needing a job to gain experience. The speaker offers practical solutions for breaking this cycle by proactively creating opportunities to gain experience and testimonials, specifically in the field of cybersecurity, even without being employed. The focus is on leveraging freelancing platforms and offering free services to small and medium-sized businesses (SMBs) to build a portfolio and gather testimonials.

Main Themes & Key Ideas:

• The "Experience Paradox": The speaker highlights the frustrating reality of the job market: "You can't get a job because you don't have experience and you don't have the reason you don't have experience is because you don't have a job."

• Value of Testimonials: The speaker emphasizes the importance of testimonials in demonstrating experience and professionalism. "We're talking about testimonials right? We're saying somebody goes and says, 'Okay, I work with this guy. I've done this. I've checked out how this guy works. He's very professional.'"

• Proactive Strategies: The video advocates for proactive methods to gain experience instead of solely relying on traditional job applications. "One thing is like you can keep on applying for jobs and hoping one of them gives you a chance. That's okay. Keep doing that. Or you can do the other things."

• Leveraging Freelancing Platforms (Upwork): Upwork is presented as a viable platform to find small, cybersecurity-related tasks that can be used to build experience and a portfolio. "You can start on platforms like Upwork, which I'll show you... you can start applying for jobs and you can actually a lot of times There are jobs there which come in for small like small small work on cyber security and you can pitch yourself."

• Offering Free Services to SMBs: The speaker suggests offering free cybersecurity reviews to small and medium businesses (SMBs) as a way to gain practical experience and testimonials. "You can actually even go out to small companies and give them work for free. You can give them I'll do a complete review of your public facing internet for free." The reasoning is that SMBs often lack the resources for full-time cybersecurity professionals, making them receptive to free assistance.

• Actionable Steps: The video concludes by outlining concrete action items, including creating an Upwork profile, writing a pitch letter for SMBs, and reaching out to potential clients on a daily basis. "These are the action points we're going to be focusing on creating your upper profile, writing your pitch letter for SMBs and reaching out on a daily basis to SMBs and I'll show you how to find them and how to pitch to them."

Important Facts/Points:

• The video focuses on the cybersecurity field as the example.

• The approach involves using free tools to perform cybersecurity reviews for SMBs.

• The speaker promises to provide templates and guidance for creating Upwork profiles and pitch letters.

Potential Applications:

The strategies outlined in this video can be applied to various fields where entry-level experience is a barrier. The key is to identify platforms for finding small tasks or projects, and to offer value (potentially free initially) to businesses or individuals who may not have the resources to hire a full-time professional.