
Welcome to Cybersecurity in Depth Course
It's a pleasure to have you here, course is meant to be a casual and technicality intense yet understandable approach to cybersecurity concepts. Concepts which are "too easy to understand" or "not critical" are to be left to your curiosity once you explore other formal education options.
Many formal definitions will be discussed within an understandable scope, as well as advanced concepts. The use of technical wording can sometimes overextend (or bloat) lessons and its resorted quite commonly in the field of Technology due to a myriad of reasons. Thus intended for this courseto have a completely different approach with much more reasoning behind concepts.
This course is meant for all levels and all carreer paths. If you're not inclined professionally into cybersecurity but still want to know more about the field... these sections are strongly recommended: SECTIONS 1,2,5,7. .
There will be content references to previous chapters, so if possible, try to follow the order exactly as intended to not miss out on concepts.
If you're strongly inclined about the field and want to know the answers to questions you might've always had, or perhaps don't have a background in physics, mathematics or certain access to knowledge which may simplify your understanding of technology, this course is also for you. Once you're done with the course, you'll probably have a broader arsenal of tools to know what you like the most, or how to find more about what you like the most to either specialize professionally as well as focus more intently as a hobby.
Most descriptions will have shorts of information, while others will have lengthy text, i suggest to make the most out of each lesson. The most important thing is to have fun while learning, any comments and questions are kindly apprecciated, as there's always room for improvement.
Don't worry about reading the entire resource material if you find it boring or too technical, you can come back to it later as a reference, hence why i chose the virtual course format. The level of depth for the resources will vary depending on the topic.
Starting Lecture 1 on a conceptualization of what is cybersecurity, then we're moving on to
Lecture 2, Migrating from your current carreer into cybersecurity,
Lecture 3, Alternative roads for cybersecurity: there are many benefits to being signed as an employee into the company, but there are also options outside the traditional, such as being a pentester for hire, security assessment on software and systems, consulting and much more
Lecture 4, The two big domains: IT/OT: Have been intertwined for decades and now are finally differentiating themselves, both in technology solutions and techniques/certifications required.
Lecture 5, Mindset and understanding for a generalist in cybersecurity where we finish the first section of the course and gain and understanding of how transferrable projects help us build a better professional profile.
Excited to start this journey with my brilliant students.
Remember to check the resources of each lecture for more information.
You can migrate your carreer into cybersecurity, certain carreers have more advantages than others but certainly knowing you can migrate carreers is a plus.
Some have it easier than others but it won't mean it's impossible or that there's nothing to be learned.
Remember to check the resources of each lecture for more information.
Not everything is meant to be in your home country, sometimes it's viable to leave, sometimes it's not. this is a small introduction to help you make sense of it. As well as an introduction to big companies with certification programs you may have to prepare for, more traditional paths in depth in future lessons.
All the attached information varies from time to time, you're required due dilligence in order to guarantee the applicability of the information you'll make decisions with. This course mostly gives information for educational purposes /historical references that must not be misguided or understood as migration advice.
Remember to check the resources of each lecture for more information.
Too many professionals lack proper understanding of the differences between Information Technology and Operation Technology. Probably because IT Operations is a thing and not considered some sort of misnomer, or because the use of IT equipment in OT environment also blurs the line, or because administration of many OT environments is being run through cloud as well as many other reasons.
One of the advantages of understanding the difference between the domains is applying it to transferrability. ISA International Society of Automation, allows many technicians to transfer their knowledge into OT Cybersecurity areas, one of the areas with the largest workforce gap. So if you're a technician, you might be in luck and have an advantage to migrate into this field somehow. Ex:
1) Plumber migrating into cybersecurity by studying how larger volumes are transported, then how the systems which manage these pumps are communicating and managed and so transfers into OT .
2) Electrical Protections technician migrating into cybersecurity for Substations, learns about protections orchestration, communication and secure procurement of terminals, and so transfers into OT .
The applicable knowledge gap to close may be as wide as your capability to transfer your knowledge and the access you have to new information or mentors that have had a similar background to yours.
Remember to check the resources of each lecture for more information. OT will come once in a while during the course, and you may work in a company that runs OT without knowing it, cause it has had IT personnel running their functions with an OT criteria, or under the umbrella of an IT chief position. Maturity is relatively rare, since most companies haven't officially made the distinction, many purchases are the same so they can be handled under a single department to simplify administration overhead, and OT changes can be quite rare, from 5 to up to 10+ years without breaking changes in architecture.
Maybe it's not the best to fully specialize in a single area, there's a wide demand for professionals who can combine multiple knowledge sets and effectively communicate their expertise.
Transition into projects that are crossreferenceable , such as AWS app development, includes SDLC, Cloud Security, API Safety, and more... it'll give much more breadth to your CV/Portfolio, and allow you to understand deeply many of the processes of companies who use these technologies.
The point of this lecture is to mention some aspects to get you started as a diversified professional, rarely if ever will you have an open offer from the start, so you must mentally prepare to learn a variety of skills and associate processes in companies to make the most out of your actual "forte".
Understanding company climate, how does HR and management work, what is the objective of cybersecurity in a company and more.
Unless your company specifically dedicates to Cybersecurity as a Product/Service, do not assume your work to be of utmost priority. It may be important, some times more than others, but you must learn its place in order to effectively develop your role for the company. That's good, it helps everyone, adds value.
Understanding how the job market works in the USA is a good reference for understanding your potential prospects or lack thereof, as well as defining your priorities.
Startups are also shrinking in headcount and hiring less qualified talent. Same happenning in the job market of other countries, they may offer jobs but not neccessarily hire externally for them, but instead promote within the company. Check more info in the resources.
By understanding the industry workforce it's easier to factor what's the best possible choice is for your future in cybersecurity. Considering your region, gender and race is also an important factor, as well as all the specializations available, and your budget.
Perhaps you've thought of getting a masters in hope it may make a difference for non managerial positions. We'll also see some new concepts, numbers and sources.
Not going in depth of the first "hackers" or the hacker mindset/subculture, plenty of information online about it. But instead, enough history, and certain events required to understand how the current geopolitical landscape includes cybersecurity and how it has been shaped in ways mostly unknown until an event occurs.
You'll also run your own time incompatibility, which you may have experienced before, it should let you understand, despite the differing technology, that many processes hinge on a proper time reference, often overlook, time is of the essence.
By understanding history you'll understand how the mechanisms of power behave, you will have insight without having to waste hundreds of hours sifting through information, since many outcomes can be derived from previously set regulations. Insight being almost a requirement for any (good) managerial position, if you're interested in technicals, you can also gain insight on how to build robust systems that can withstand the test of time, fundamentally, by understanding the factors associated to the product and environment it's involved in.
Many subjects have been purposedly avoided and their representation re-structured for educational reasons, make sure you do your own research, you can start with the resources listed, as always.
Fiduciary duty is a duty associated to financial professionals such as an accountant, lawyers and more, by which ensure they'll adhere to the strictest of guidelines to act in favor of their client.
Cybersecurity also has an ethical standard to uphold, and it's clearer when you obtain your certifications and you sign into the Code of Ethics (Ethos) or Code of Conduct of the Association you're becoming a member of.
This means they can revoke your certification if you choose to wrong others with your credentials/knowledge, as it doesn't adhere to the expected behavior of a member, due to ethics being usually an afterthought in the hiring process, and management process of personnel; it is rarely the reason why a certification is preferred over another.
But nevertheless, understanding for yourself the value that a proper ethics framework gives, helps you sleep at night knowing you're making the right choices, and it's also a great excuse to refuse unwanted work. I've attached several of these short documents in printable format so you can check them.
It starts out of the thrill for power, the chase or money. Two wrongs don't make a right, and many times in the line of work of a cybersecurity professional, you'll have to deal with people who do think two or 100 wrongs are better.
This means you can deal with highly dangerous people depending on your position, who are willing to extort and abuse their power on the people you know or yourself, so as to get information that may affect you or your company, usually in the form of pecuniary compensation.
Understanding the attacker itself is also a part of understanding how to deal with it. Disgruntled Employees, Networking personnel that misconfigured to get paid overtime, one sees a lot on this field and it's not always black and white. But it certainly is clear when it is wrong. Here are some podcasts by a cybersecurity expert who interviews other field practitioners, usually from the attacker side.
These are the people you might defend your company against, but it's useful to know that behind that ransomware message there's a person or a bot coded by a person. Needless to say, my hopes are you don't go through the pain and stress of that dark side, but to instead live a decent, cybersecure(r) life.
Thinking about a career in cybersecurity but don't know where to start? This course breaks down everything you need to know - from which roles match your background to which certifications are actually worth your time and money.
Tired of researching cybersecurity careers and feeling more confused than when you started?
You're not alone. Most people spend months reading conflicting advice about certifications, wondering which roles actually fit their background, and questioning if they even have what it takes.
This course cuts through all that noise.
In just 2 hours, you'll get:
A clear picture of which cybersecurity roles match YOUR specific background
The real truth about which certifications are worth your time (and which ones aren't)
A practical roadmap from where you are now to your first security job
Insider insights about what actually differentiates candidates in hiring
No fluff. No overwhelming technical deep-dives. Just the clarity you need to make your next move with confidence.
Whether you're coming from IT, business, or a completely different field, you'll walk away knowing exactly what your cybersecurity career path should look like.
Stop spinning your wheels researching. Start moving forward.
A couple lessons have a cloned high tone-quality voice, in future courses a foundation for the skillset require to make use of this will be taught.