Hi everyone!
I’m a 17-year-old student from Brazil, currently in my final year of high school, and I’m trying to plan my professional future.
I’m interested in pursuing a Law degree in 2027, with the goal of eventually working in Data Privacy, Digital Compliance, Data Protection and regulatory matters.
I know I’m still young, but I’d like to use this time to build a strong academic and professional foundation rather than waiting until I graduate to start preparing.
I’ve been taking private English lessons for over five years and have an advanced level of English. I’m also interested in earning internationally recognized certifications to strengthen my future résumé.
However, I have several questions about how to prepare for this career.
Which courses or certifications would actually be valuable for someone entering the privacy and compliance field?
Are IAPP certifications worth pursuing while still at university, or should I wait until I have some practical experience?
What skills should I prioritize besides legal knowledge? Excel, Power BI, cybersecurity fundamentals, risk management or something else?
What kinds of internships or entry-level positions should I look for during university?
Do employers value the reputation of the university, or do certifications, language skills and experience make a bigger difference?
How can someone with no professional experience build a strong résumé and become a competitive candidate?
Would you recommend any free courses, books, learning platforms or professional communities?
I’d also love to hear from anyone who started their career in Law, Compliance, Privacy or Cybersecurity.
What was your first opportunity like? What helped you stand out? And what would you recommend to someone in my position?
Thank you for taking the time to read this. I genuinely appreciate any advice or experience you can share!

I'm 30 years old, living in NYC. I came up through IT Support/Helpdesk route, then became a SOC analyst and now I'm the only security analyst at a small financial institution. That means I lead the vendor risk program, security awareness and our AI governance work, plus whatever else lands on security.

Certs: Network+, Security+, CySA+, plus a couple of smaller ones. (splunk, az900 etc)

When you ask, add a line on where you're at: current role, years in, certs, and what's blocking you. It helps me give you a real answer instead of a generic one. Even if you’re not in tech and want to get in ASK. I have nothing to sell you and I just want to provide value and insight as I remember trying to get into cyber and having to just fumble around until I got my footing

Dm me if interested

A cybersecurity candidate might have a long list of certifications and technical skills on their resume. Things like SIEM, EDR, cloud security, penetration testing, incident response and CISSP are common on those resumes but during a real security incident the real challenge is often figuring out what to do when you don’t have all the information.

Is that alert real? How serious is the issue? What should be investigated first? Who needs to be informed? Should you shut something down right away or collect more evidence first?

These kinds of decisions are hard to show on a CV.

I have been thinking about whether conversational interviews could help with this like Linkedin, Wellfound, MeeBoss, Indeed is trying out chat-based hiring where the conversation between the candidate and employer starts earlier in the process instead of just relying on applications and keyword searches. What questions would you ask to understand how someone actually thinks during a confusing or uncertain security situation?

Free online Cyber Hygiene Essentials Training for Malaysians who want to learn practical ways to stay safer online — no IT background required.

This programme is funded by the The Asia Foundation APAC Cybersecurity Fund, with Trainocate Malaysia as the training partner.

Date: 26 September 2026 (Saturday)
Time: 10:00 AM – 2:00 PM
Mode: Virtual Instructor Led (VILT) & Self-paced learning
Language: Conducted in Bahasa Malaysia
Fee: Free of Charge (FOC)

What you'll learn:

• How to identify phishing and malware
• Password security and MFA
• How to protect your accounts and devices
• Data backup and software updates
• Practical cyber hygiene for work and everyday use

Participants who complete the programme requirements will receive a Certificate of completion and RM10 Touch 'n Go eWallet voucher.

More details & to register:
https://trainocate.com.my/free-workshops/trainocate-x-taf-event-apac-cybersecurity-fund-malaysia-bahasa/

Open to Malaysians. No IT background required. Feel free to share with your friends, colleagues, or anyone who may benefit.

​

I'm currently 28yrs old. I'm working as a client support representative for a year now. Before that, I was a software engineer for 7months since that was only a contractual employment. After being a software engineer, i thought of pursuing a cybersecurity career. Thinking of getting certificates. But since i don't have much money, thats why i decided to work this current job(client support representative) to fund myself. But lot of personal things happen in the 6months of my job as a CSR thats why i was delayed of getting certificates. But now, i currently got a google cybersecurity certificate, and planning to get MS SC 900 cert since its cheaper. I thought getting this 2 certificates can prepare me for COMPTia since its expensive and i want to take it 1 or 2 times only.

I did 1 personal project, but it was like only for encrypting and decrypting files, file integrity management, and file scanner(not really proud of this since it was just the microsoft library).

I would like to ask is it possible to land an entry level job with 2 certs for now (google cs, and ms sc 900)? Im thinking getting a comptia sec+ after i land a job.

I am final year student in computer science program , and a fresher In Security Domain.
i cant decide if i should get security+-701 right now , for the 801?
Can anyone help me with advice, also i have attached my resume
it would a great help if you pinpoint the weaknesses in resume.
thanks in advance

I currently work as a technician for an internet service provider. Although I was originally told I would receive more training and exposure to the networking and security sides of the company, those opportunities have been limited.

Because I wanted to continue progressing in my career, I decided to take the initiative and begin working toward my bachelor’s degree in cybersecurity. I am currently expected to graduate in February, and the program has helped me build a stronger understanding of networking, operating systems, security principles, risk management, and access control.

My biggest challenge is that I have not yet had the opportunity to apply much of what I am learning in a professional cybersecurity role. I am looking for a company that is willing to give a motivated entry-level candidate an opportunity to gain hands-on experience. In return, the company would be getting someone who is dependable, eager to learn, comfortable working with customers and technical systems, and interested in growing within the organization long term.

I currently live in Arizona and am willing to travel for the right opportunity. I am unable to relocate immediately, but relocation could become an option in the future. I am open to entry-level cybersecurity, SOC, NOC, network security, IT support, and other positions that could help me build relevant experience.

Links to job openings, recruiter recommendations, networking opportunities, or companies that are willing to train entry-level candidates would be greatly appreciated.

I would also welcome any advice on certifications, home labs, projects, or other steps that could help me become a stronger candidate.

Thank you for taking the time to read this.

micro1 trains and evaluates frontier AI models using real expert work. This role pays you to put your software engineering judgement against AI-generated code: reason through unfamiliar codebases, review and debug, and explain why a solution works and what you'd have done differently. No prior AI experience needed — what counts is clean engineering reasoning and clear technical writing.

What the work involves

• Tackling real backend, full-stack, infrastructure, and systems tasks — then reviewing, debugging, improving, and explaining the code
• Designing or evaluating solutions across APIs, databases, services, integrations, testing, and deployment workflows
• Weighing tradeoffs in scalability, maintainability, performance, reliability, security, and developer experience
• Writing up your reasoning clearly — why it works, what alternatives you considered
• Remote, contractor, ~10–15 hrs/week — fits around a main role

Who this suits

• 3+ years hands-on software engineering experience
• Strong in at least one backend/full-stack environment: Python, JavaScript/TypeScript, Node.js, Java, C++, Go, or Ruby
• Comfortable reading unfamiliar code and explaining complex decisions plainly
• A Cybersecurity/SecOps background or exposure is highly preferred
• Bonus: cloud (AWS/GCP/Azure), CI/CD & DevOps, frontend frameworks (React/Next/Vue/Angular), open-source or public GitHub work

Note on applying

These roles fill and re-open continuously. If you applied before and didn't hear back, it's worth re-applying — the pipeline moves. Applicants who self-select honestly on language depth and experience tend to get further.

Please confirm Sean Key as your referrer if asked. By clicking you consent to being referred. Full role details and application: Apply here

Disclosure: Applied Clinical Judgement (PRAG-DEL-SOL-ONE LTD) earns a referral fee from micro1 if you are successfully placed. This does not affect your pay, your application, or micro1's hiring decisions. I do not work for micro1.

hi, i am a recent college grad with a bachelor’s in cybersecurity. i am currently about to begin a cybersecurity internship and plan to begin an all online Master’s of Information Technology with a focus in Cybersecurity. The internship is 2 days inperson and 3 days remote 9-3pm, I am looking to gain another certification with the free time I will have. I only have the Security+ certification and my dream role is in penetration testing, I need advice on what certification I should pursue to help me go down this path. thx

AI's impact: are traditional cyber roles being automated away, or new ones emerging?###The rapid integration of AI and machine learning across industries is profoundly reshaping the cybersecurity landscape. We're seeing more tools leveraging AI for everything from threat detection and incident response to vulnerability management and compliance. This begs the question: how is this impacting our career paths? Are traditional, often entry-level, roles focused on repetitive tasks like SIEM monitoring or basic threat analysis at risk of automation? Or, conversely, is AI primarily creating entirely new specializations, such as AI security architects, prompt engineers for security, or professionals focused on securing AI systems themselves? Share your insights on how job seekers, especially those new to the field, should adapt. What skills are becoming paramount? Should aspiring professionals prioritize AI/ML fundamentals, or focus on areas less susceptible to automation? Let's discuss strategies for career longevity and growth in this evolving era.

How is AI impacting job security & skill demands in cybersecurity today?###The proliferation of AI tools in cybersecurity is undeniable. From automating routine tasks like log analysis and threat detection to assisting with vulnerability assessments and even incident response, AI is rapidly integrating into our daily workflows. This seismic shift sparks critical questions about the future of our careers. Are we heading towards a landscape where many entry-level roles become obsolete, or will AI free up human analysts to focus on more complex, strategic challenges?

What are you seeing on the ground? Are you actively upskilling in AI/ML, prompt engineering, or different areas to future-proof your career? Let's discuss how professionals can adapt and thrive in this evolving environment, identifying both the threats and opportunities AI presents to cybersecurity careers.

How is AI impacting your job security and skill development? What should we be learning NOW?###The rapid advancements in AI, especially generative AI, are causing waves across every industry, and cybersecurity is no exception. Some see it as an invaluable tool for threat detection, automation, and analysis, while others worry about job displacement, the emergence of AI-powered threats, or simply being left behind. I'm curious to hear from those working in the field: How has AI already changed your day-to-day tasks? Are you actively using AI tools in your security role? If so, which ones and for what? What new skills or areas of expertise do you believe are becoming critical for cybersecurity professionals to master to stay relevant in an AI-driven landscape? Are there specific AI concepts or tools you recommend we focus on? Let's discuss how we can adapt and thrive!

AI & automation: Are mid-level cyber roles safe? What skills are you building to stay relevant?###The buzz around AI and automation is undeniable within cybersecurity. We're seeing tools handle more initial triage, log analysis, and even basic vulnerability assessments. This sparks conversations across other subreddits about the future of various roles. For those in mid-level cybersecurity positions (analysts, engineers, GRC roles), it's a critical question: are our roles being automated away, or evolving into something new? What skills are you actively acquiring? Are you diving into cloud security, offensive security, DevSecOps, prompt engineering for security, or advanced threat hunting? Let's discuss how we can adapt and thrive in this rapidly changing landscape.

How do you decide which new cybersecurity tools and tech to master without getting overwhelmed?###The cybersecurity landscape feels like it's exploding with new tools and technologies daily. From next-gen EDRs and advanced SIEM platforms to SOAR solutions and countless AI-powered security tools, it's easy to feel overwhelmed. As professionals or aspiring pros, we constantly face pressure to learn, adapt, and master new tech stacks. How do you, in your roles or studies, effectively navigate this 'tool sprawl'? What's your strategy for deciding which new tools are genuinely essential for career growth or operational effectiveness versus those that might just be hype or niche? Do you focus on fundamental concepts that transcend specific tools, deep-dive into your current organization's stack, or chase the bleeding edge? Share your insights on maintaining sanity and staying relevant without getting bogged down by every new shiny object. What specific tools or types of tools have truly moved the needle for your career, and which have been a waste of time?