Cyber Defense eMagazine December 2019

57
Learn
There are several paths to cybersecurity that one can follow. Research the different paths and learn what
the required skill sets are, evaluating all of them to help you decide which ones are of interest. For
example, do you want to review data and identify unusual behavior like a cybersecurity analyst? Or would
you prefer to use new technology and processes to enhance security capabilities, like a cybersecurity
engineer? Perhaps, you would prefer to analyze digital evidence in response to an attack or breach, like
those in digital forensics incident response disciplines. The National Initiative for Cybersecurity Careers
and Studies presents the NICE Cybersecurity Workforce Framework [2] , published by NIST [3] , that can
help you explore the different paths and roles available, along with the required skills and knowledge.
Take advantage of this. Once you have identified which paths are of interest to you, learn about that
subject matter and continue learning. The nature of our industry necessitates that you be on a continual
path of learning.
If you don’t have a degree, or are still in school at this point, I highly recommend you pursue a degree in
Computer Science, or one of the cybersecurity degrees that many colleges and universities now offer.
This is also a great place to network with like-minded people. If you have a degree in another area, but
want to make a transition into cybersecurity, I suggest you take information security courses that can
provide you with the fundamentals of Information Technology. These days, most community colleges and
universities offer courses through their Continuing Education program and many are even available
online. To become a security practitioner, one must learn the fundamentals of information systems,
operating systems (such as Windows and Linux), and the architecture of network environments. You
need to be familiar with how they operate and work together. You can’t protect a system if you don’t know
how it works.
There are many free and very affordable computer and cybersecurity courses online. These include
courses available from CompTIA, Cybrary, Coursera, Udemy, Department of Homeland Security -
NICCS, and the Federal Virtual Training Environment (all of which are free to government personnel and
veterans). Many vendors also have free online webinars or their own YouTube channel with free training
videos. Take advantage of any free and affordable courses, hands-on labs, capture the flag events and
cyber challenges, as these will help you narrow down the path where you’re most passionate.
You must constantly be filled with curiosity, as it’s the only way you will learn. Buy books, audiobooks, or
listen to podcasts while you are in transit, washing dishes, or grilling out. This is one of the main reasons
why I love this field, because you truly are always learning something new. It never gets boring!
Network
Networking is very important, as it helps you to meet others that are as passionate about cybersecurity
as you. When you meet others in this field, ask them about their journey and let them know where you
stand in yours. Ask for their advice. You will learn that most are more than willing to provide guidance.
Read blogs and articles that focus on the areas you are thinking about pursuing. Then follow the authors
on social media platforms and learn from them. Leverage social media to connect with others in the