Do you dream about working in cybersecurity?
Imagine going to work every day, hacking into fortune 500 companies, legally. Or spend your days investigating cybercriminals and their tracks, finding evidence that can help build a case against them in court.
Working in cybersecurity is very rewarding because you get to use your technical skills to help defend the Internet. However, the path to get from student to working professional can be convoluted. In this post, we are going to go through some actionable steps to get you closer to your dream job.
网络安全方面的工作非常有意义，因为您可以利用自己的技术技能来保护互联网。 但是，从学生到职业人士的路径可能会很复杂。 在本文中，我们将通过一些可行的步骤使您更接近理想的工作。
发现可能性 (Discover the possibilities)
The first step is to look into the myriad of career tracks that you can take in infosec. Most people seem to associate the field with ethical hackers, who are professionals who hack into computer systems legally. But the infosec industry is made up of people with many different talents and abilities, and certainly, not everyone is an ethical hacker!
第一步是研究可以在infosec中获得的各种职业发展轨迹。 大多数人似乎将这一领域与道德黑客联系在一起，道德黑客是合法地入侵计算机系统的专业人士。 但是，信息安全行业是由具有许多不同才能和能力的人员组成的，当然，并不是每个人都是道德黑客！
Explore the career paths you can take in cybersecurity here:
确定您的兴趣 (Determine your interests)
Explore the possibilities, and research the job titles that interest you. Find out which ones best suit your technical interests and personality. There are pros and cons for each of the roles in infosec, and those might not be apparent by simply reading up on their job descriptions. So if possible, reach out to people working at your desired positions and ask for their opinion.
探索可能性，并研究您感兴趣的职位。 找出最适合您的技术兴趣和性格的人。 信息安全中每种角色都有优点和缺点，而仅通过阅读其职务说明可能看不出来。 因此，如果可能，请联系您所需职位的人员并征求他们的意见。
It is also important to find a technical niche. Because cybersecurity is such a wide discipline, you can’t possibly learn everything. And instead of trying to learn everything and failing, it is better to have a technical niche to focus on and hone in on that. Explore the different areas of your field, and start spending more time on the area that speaks to you the most. Before you know it, you’d start to understand more and more about that particular niche!
寻找技术利基也很重要。 因为网络安全是一门如此广泛的学科，所以您不可能学到所有东西。 而且，与其尝试学习所有东西和失败，不如让它成为技术利基，专注于并磨练它。 探索您所在领域的不同领域，并开始在与您最亲近的地区花费更多的时间。 在不知不觉中，您将开始越来越了解该特定领域！
不断学习 (Learn, continuously)
Then, the first thing to do is to make sure that you’ve mastered the basic technical skills that are needed in your chosen field. For most cybersecurity disciplines, that would be basic programming and writing skills.
If your goal is to become a pentester, you can start with a more detailed guide here:
Once you’ve mastered the basics, continue to learn and constantly add to your knowledge base. Security is a rapidly evolving field and you have to keep learning to keep up with its pace.
Here are a few good resources to help you learn continuously:
CSO online: https://www.csoonline.com/
Krebs on Security: https://krebsonsecurity.com/
Troy Hunt’s blog: https://www.troyhunt.com/
Daniel Miessler’s blog: https://danielmiessler.com/
丹尼尔·米斯勒(Daniel Miessler)的博客： https ：//danielmiessler.com/
Secure Reading: https://securereading.com/
Null Byte: https://null-byte.wonderhowto.com/
Popular hacker blogs: https://medium.com/@vickieli/best-hacker-and-security-blogs-to-read-d716c43e0494
锻炼您的软技能 (Work on your soft skills)
For each position that you are aiming for, there will be a set of required skills. These can be divided into hard and soft skills.
Hard skills are the technical skills that are required to do that job well. Given that you have mastered the technical basics and are learning continuously, you are covered on this front.
Soft skills, on the other hand, is harder to quantify. However, these are often just as important, if not more important than technical skills for entry-level infosec workers. Some of the most important soft skills to work on if you want to break into cybersecurity are the ability to communicate technical ideas to non-technical people, the ability to write and speak precisely, and the ability to work in a team.
另一方面，软技能很难量化。 但是，对于入门级信息安全工作者来说，这些技巧通常同样重要，甚至比技术技能重要。 如果您想闯入网络安全领域，最重要的一些软技能包括与非技术人员交流技术思想的能力，准确撰写和发表口语的能力以及团队合作的能力。
Continuously honing these soft skills will make you a much more desirable pentester, malware analyst, forensic analyst, and so on!
建立连接 (Build connections)
Don’t be afraid to reach out to people you admire in the industry. You might be surprised how many of them are happy to help out someone new in the industry! Find a mentor and learn from someone you aspire to become. A mentor can help illuminate your path towards your dream job since they have most likely been in your position when they started.
不要害怕与您所敬佩的行业人士接触。 您可能会惊讶于他们中有多少人乐于为这个行业的新人提供帮助！ 寻找一个导师并向您渴望成为的人学习。 指导者可以帮助您阐明您梦想中的工作之路，因为他们一开始就很可能一直在您的职位上。
Friends are the easiest way to land jobs. When the time comes for you to look for a position in infosec, reach out to your network and see if anyone can use what you’ve learned!
Here are a few places to start making friends:
CNET forum: https://www.cnet.com/forums/
Bug bounty forum: https://bugbountyforum.com/
Tech Republic forum: https://www.techrepublic.com/forums/
Local security communities: http://www.securitybsides.com/w/page/12194156/FrontPage
CTF competitions: https://ctftime.org/event/list/
为社区做贡献 (Contribute to the community)
Contributing to the community is the best way to make your talents visible to others. It will also help you solidify your knowledge and feel good about helping others with their learning!
A good way to contribute to the community is by writing a technical blog. The infosec community is a bunch that loves to learn. And we rely on each other to share knowledge and keep up to date with our skills.
为社区做出贡献的一种好方法是编写技术博客。 信息安全社区是一群热爱学习的人。 而且我们彼此依靠，以分享知识并保持最新技能。
Another way to give back is to answer questions on social media sites, such as Twitter, Stack Overflow, and GeeksforGeeks. This allows you to help others on a more personal level, and at the same time, connect with people with similar interests!
回报的另一种方法是在社交媒体网站上回答问题，例如Twitter，Stack Overflow和GeeksforGeeks。 这样一来，您可以在个人层面上帮助他人，同时与志趣相投的人保持联系！
保持开放的心态，然后说是！ (Keep an open mind, and say YES!)
Opportunities arise when you least expect them to. Be patient and keep an eye out for opportunities that come your way. Never dismiss jobs or internships simply because they don’t perfectly fit your expectations. We all have to start somewhere!
当您最不期望时，机会就会出现。 要有耐心，并注意可能带来的机会。 切勿仅仅因为工作或实习不完全符合您的期望而解雇他们。 我们都必须从某个地方开始！
The steps you take don’t need to be big; they just need to take you in the right direction. — Jemma Simmons, AoS
您所采取的步骤不必太大。 他们只需要指引您正确的方向。 -助理秘书长Jemma Simmons