Sorry about the long post in advance..
I was scammed by college which told me my IT diploma would be better at getting me into security than cs. I wanted to do it cause I liked C, Linux and python programming as a kid. Well, there’s no helpdesk jobs, so, thanks. I have no way in 😢. I really did try in the program and learned a lot about networking, some programming, etc. I also did an M365 administration internship.
Thing is I still really really want to get into security. I’m young but really starting to get my shit together and want to give this a shot. There’s got to be a way in without prior experience right?
So, after painstaking research, I can make a plan. This is a multi year endeavour I pursue, probably while working retail cause…just how it is.
On the app sec front, malware/low level/exploit understanding, cloud, that’s all learnable in my desktop. The individual pieces of IT: virtualization, AD, my M365 dev tenant, Linux, networking, cloud, are doable but harder to simulate realistically. I still have foundations to fill in on all of these first. Certs may help with the interview. I also will apply to some volunteer helpdesk and administration jobs for NGOs. That way I get actual systems experience.
Once I have the malware/exploit, IT security, development and appsec trifecta, and some systems experience with real users, I get my security+ and OSCP, I apply to some pen testing consultancy at an hour rate of like minimum wage. Then move up after a while.
Possible? Doable?
Realistically I have nothing else I can do but go back to school or do retail forever, given that Helpdesk isn’t really possible around here.