lainchan / sec

Anyone else think Cybersecurity positions aren't worth it?

藤原純一 · 2023-11-08 15:44
I'm not talking about the actual practice of cybersecurity; rather I enjoy learning about computers and how to secure them a lot -- and it will always be my go-to hobby. I'm rather talking about the positions for SOCs. They always seem to be not hiring, if I apply somewhere I always get ghosted; the person interviewing me wants me to be a super-genius hacker rather than a guy who knows how to read manuals, etc. To be, it seems these positions are just fake to make people believe their organization has a cybersecurity department. I even was able to do a rotational internship at a SOC, and it was just me shadowing a guy who pretends he likes computers read a SIEM; and manually filter emails on the shared inbox; and watch game commentary videos when there was nothing to do on his personal computer. He never really seemed to do anything of importance, nor care about his job. Dunno, I may just be jaded from studying and having an interest in cybersec; then seeing how it's near impossible to get a job in my interest. What do you guys think?
The Plague · 2023-11-08 16:00
>it seems these positions are just fake to make people believe their organization has a [x] department welcome to the corp. its all pretend. 10 minutes a month you need to speak in some board room and explain everythings fine and secure, maybe once or twice youll have to wipe some soykafty email worm of some lowlifes computer. most of the time you dont do anything. the other guys dont do anything worthwhile either.
Chani · 2023-11-08 16:04
Right now there's a shortage but once that gap fills it'll be as soulless as being a regular programmer. They probably aren't hiring because they want people with postgrad degrees from reputable colleges, at least that's what it's like here. >the person interviewing me wants me to be a super-genius hacker rather than a guy who knows how to read manuals Why do so many cybersecurity types parade themselves as hackers? It's not like you can't be both, but a lot of them are suited normal users who are more concerned with coming off as hacker from a Hollywood movie instead of the real deal, who are mostly fat neckbeards who works on free software all day. Just another level of fakery that adds to our fake world. I guess a lot of people are jaded like this lainon. There are a lot of people out there with awesome skills and talents that can't get even basic jobs because they don't have some soykafty paper qualification and even if they do have them it's never really enough.
Cutter · 2023-11-08 18:06
>run vulnerability scanners >write report about what was found >submit to leadership >nothing is fixed >repeat forever Also >major exploit hits the news (log4shell, heartbleed, shellshock, etc) >"lain, work an 80 hour week making sure this isn't an issue anywhere - you'll need to coordinate with 40 other members of the IT department who are all overworked and more concerned about meeting their other deadlines because they don't view this as their problem" I agree: it's not worth it. i'd rather be a code monkey. It pays better for much less of a headache .
Naomi Nascimento · 2023-11-08 18:20
>>22842 I was thinking of getting into cloud architecture / AWS more after seeing how being a cybersec analyst was a no-go to be honest.