5 answers
Asked Viewed 186 times Translate

How much training do you receive on a full time cyber security job?

There are a plethora of different cyber security jobs out there, with much to learn as you are being introduced to the many different concepts of cyber security. After accepting a full time cyber security position, how much/what kind of training do you typically receive starting into your career? What are you expected to already know? #july20 #technology #computer-science #computer-security #cybersecurity #womeninstem #stem #computerscience #informationsecurity #applicationsecurity #career #careerdevelopment

+25 Karma if successful
From: You
To: Friend
Subject: Career question for you
100% of 7 Pros

5 answers

Updated Translate

Salman’s Answer

Hi Gillian,

Great question! Training really does depend on the company and its leadership. I have seen the range of very minimal to $5,000 a year for an accredited program/certification. The important thing to remember is that you are in control of your own career and you must advocate for your goals and ambitions. Have regular discussions with your manager about topics or areas you are interested, and be ready to discuss how the training can help the goals of your manager, the department, and the company. Being able to connect the dots to the larger picture will help your case.

Once you start a new role, the type of cybersecurity training will really depend on what you are doing. As you already know, cybersecurity is such a broad area and there are many different paths you can take. Keep an open mind when exploring different areas and do not worry whether you have the all the skills within the area because you will learn on the job. As a new cybersecurity professional, no employer is going to expect you to be a subject matter expert right off the bat. Many companies also have subscriptions to learning platforms like Pluralsight, which offer a ton of great courses. Research the different options your employer may provide.

My biggest recommendation would be to build a solid foundation on the concepts and technologies you will be working on. Research different certifications or training courses that interest you and map out a path. For example, CompTIA has a pathway for Cybersecurity starting with IT Fundamentals all the way through Advanced Security Practioner. You don't have to complete every one of these certifications, but it helps to understand what types of skills you should be focusing on and where you should direct your efforts. Stay hungry and continue learning!

100% of 3 Pros
Updated Translate

Vikas’s Answer

A group of engineers here. We don't work directly in cyber security, but within electronics manufacturing and we have very little expectation of prior knowledge coming into the company. A lot of school curriculum is to teach you how to think and the basic principles of what you will need to apply in a job. I believe it will also be similar here where they will teach you what you need to know once you start.

100% of 2 Pros
Updated Translate

Kevin’s Answer

Training depends on the leader and company. I would say typically a company whom strongly believes in employee development will allocate 3-5 days if not more each a year for training. For where I am today, I am averaging 5-7 days a year though I am juggling to keep up with work in the process.

As far as how much one needs to know, a college hire entering the security field, here's how our organization defines it:

• Performs routine entry level assignments under direct supervision
• Typically requires a college or university degree or the equivalent work experience that provides knowledge and exposure to fundamental theories, principles and concepts
• Develops competence by performing structured work assignments
• Uses existing procedures to solve routine or standard problems
• Receives instruction, guidance and direction from others

• Assists in risk and threat analysis activities including security assessments, penetration tests, incident response activities, forensics services, etc.
• Assists in compiling position papers, assessment recaps, and other technical documentation aligned with functions defined in the job family summary
• Demonstrates technical proficiency in support of those functions, including tool proficiency (can analyze, configure, assist in deployment), coding, technical development and implementation

100% of 1 Pros
Updated Translate

Liam’s Answer

Cyber Security Professional here. The cyber security career field is very broad and encompasses many domains. From Defensive Cyber Operations and Offensive Cyber Operations to DevOps and Application Security. There are aspect of cyber security in most all professional career paths. To get into an entry level cyber security role, you will need to demonstrate knowledge equivalent to a Comptia Sec+ certification. There are many cyber security certifications that progress in scope and complexity up through which ever domain you end up focusing on. There are really two training requirements when you get into a position. #1) is the Continuing Education Credits that you will need to complete each year to remain certified. This can be anywhere from 10 hours a year to 30 hours a year depending on the certification. #2) is the amount of time you will need to focus on to excel in the domain that you choose. This number depends on your passion. Choosing Cyber Security as a career field is a commitment to life long learning. Formal Education in the Cyber Security world is important; Security Certifications are just as crucial to advancement.

You should expect to complete at least 80 hours a year in training specific to your chosen path. This is, of course, outside of the hours you will need to put in to finish your degree!

Good Luck!

100% of 1 Pros
Updated Translate

Dave’s Answer

The majority of our InfoSec team got their starts in IT, built up expertises in a few areas and then transitioned to security. Entry level IT positions area easy to get if already know basic computer support as most people who use computers do not know how to fix their own computer problems.

It is also common to get these entry level IT positions while going to college. I did that myself while studying computer science.

As there are very few accredited Cyber Degrees you can get, San Jose State is the only one I can think of (Masters in Cyber Security) that means certifications are the way to go.

The most well known and respected is CISSP. You can study for that one on your own, there are multiple books to teach you the domains. You then just have to pay for the test, I think I paid $400 for a proctored test.

I mentioned domains as CISSP will take you through every avenue of security, which can also help you decide what area of cyber you want to spend your time in