Is Cyber Security easy to get into?

Yes and no. I think the field is one of the most even playing fields in the world. You can get a job with no college degree, a certification, and loads of passion. But, learning the requisite knowledge takes time. If you apply yourself, I believe just about anyone can do it. 

Is the career lucrative?

It absolutely can be. I never thought I would be making six figures in a job (United States). And I know people making over $200,000 a year. But what you don't see is the years of hard work we have put in. If you have a passion for infosec, continue to learn everyday, and craft a great looking resume, you can make six figures as well.

What area should I specialize in?

This depends on you. I always recommend doing what you love. If you enjoy the work, you are more likely to put in the hours needed to gain mastery. Learn the basics and then start exploring your options.

Where do I start?

For most people, their first certification is the CompTIA Security+. This is considered foundational information for the field of cyber security. I would start with this certification.

Do you need to be really good at math?

I actually hear this question a ton. The answer is not really. If you code or work in cryptography, you should probably be pretty good a math. For general cyber security practitioners, you just need to know how to add, subtract, multiple, divide and do some conversions.

What does Silverbits do for a living?

I run a small penetration testing company but will occasionally also work for someone else doing incident response work. I like to keep my skills sharp and just want to focus on the technical side of things sometimes. Believe it or not, running a business actually takes me away from what I love. Meetings, contracts, marketing, etc. are all the not so glamorous side of business that take up most of my time.

Why do you have so many certifications?

Most of my GIAC certifications were either from the Vet Success Program or part of my graduate certificate course work. Others were required by employers. The rest were done out of curiosity.

​I enjoy the structured nature of certification programs. With clear requirements outlined, I can systematically work through the material. It's just how my brain works. By no means does anyone need that many certifications. Trust me it gets expensive maintaining them.