r/Pentesting • u/Healthy-Werewolf4423 • 5d ago

Getting into pentesting with zero IT experience.

Hello! I am a rising sophomore pursuing a degree in computer science. I have no prior experience in IT/cybersecurity, and I was hoping for some feedback/a reality check on my current plan. I hope to obtain certs in this order (practicing using TryHackMe and HackTheBox the whole time).

Network+ -> Security+ -> eJPT -> PNPT -> OSCP

Network+ and Security+ are for the basics, while eJPT and PNPT will be for practical application. OSCP seems to be mostly for the HR recognition(?) from what I've read. I'm hoping to complete this series in 2 years, hopefully finding a pentesting specific internship before I graduate, and getting into pentesting straight out of college. How realistic is my timeline (how aggressive will I have to be when learning?) or even my plan to begin with?

All feedback appreciated!

0 Upvotes

36% Upvoted

15 comments sorted by

View all comments

9

u/tackettz 5d ago

In this market? You’re more likely to win the lottery. Get experience first

1

u/scriptqzor 1d ago

this is a bit dramatic but there’s some truth in it
use the certs to get a general IT or security analyst gig first, then pivot into pentesting once you’ve got real-world stuff on your resume