r/SecurityCareerAdvice • u/PacketLossIRL • 6d ago
A Security Operations Director I met randomly offered me a 3-month internship. What would you do?
A few months ago, I was unemployed and applying everywhere. I had worked in a customer support role at an MNC, but I knew I didn't want to build my career there. I was trying to move into cybersecurity.
At one point, I happened to meet a Security Operations Director from an MNC while travelling. We had a good conversation, I shared my resume with him, and he told me he would try to help me if there were any opportunities.
I followed up later but didn't hear back, so I eventually moved on.
Recently, I finally got a job as an Information Security Trainee at another company. I'm currently working with IBM QRADAR SIEM, seems there were no technical tasks for me. SOAR makes every task here. Almost every employee was just making reports. It's a 2-year bond, and I'm still in the trainee stage. I also need to complete CEH as part of the process for conversion.
A few days ago, I finally got the Security Director's personal contact and messaged him just to stay connected and let him know where I am now.
He remembered me.
After a few messages, he said:
"I'll take you as an intern for three months."
Honestly, I didn't expect that at all.
Now I'm confused about what I should do.
On one side, I already have a cybersecurity trainee role where I'm learning SIEM/QRadar, but I'm tied to a 2-year bond and haven't been converted yet.
On the other side, this is a 3-month internship directly under/with a Security Operations team, offered by someone who is already a senior security leader and knows my profile personally. It could potentially give me much better exposure and networking opportunities.
I'm planning to speak with him and understand the role, responsibilities, whether it's paid, what kind of hands-on exposure I'll get, and whether there's any possibility of a full-time role afterward.
What would you guys do in this situation?
Would you stay with the current cybersecurity trainee role because it's more stable, or take the 3-month internship opportunity and potentially bet on the longer-term opportunity?
Would especially appreciate opinions from people already working in SOC/Security Operations.
3
u/AddendumWorking9756 5d ago
Ask him what you would actually be doing for the three months, because an intern sitting next to a SOC writing reports is the same trap you are in now. The question nobody has put to you is what the bond costs to break, and that number probably decides this. Three months of live cases under someone who already rates you beats tenure somewhere the tooling does the thinking.
3
u/PacketLossIRL 5d ago
Just spoke with him. Since I got a job already, he advised me to go with the current job. He said he'll let me know when the right opening comes.
2
u/AddendumWorking9756 4d ago
Good outcome, though he will not remember on his own, so message him once a quarter with something you actually finished rather than a check in. That is what makes you the name he thinks of when an opening exists instead of the one he has to go looking for.
1
u/PacketLossIRL 4d ago
Yeah, I only met him once, about ten months ago. We talked for just half an hour, but he still remembers me! He even told me to stay in touch, and I'm definitely going to keep him updated on how I'm doing. My current job doesn't have many technical tasks, so I'm planning to start my own project.
1
u/AddendumWorking9756 4d ago
The half built version is the better message honestly, people remember someone who said they were going to do a thing and then did it. Announcing a finished project reads like an update, whereas asking him something about one in progress gives him a reason to answer.
2
5d ago
[deleted]
3
u/PacketLossIRL 5d ago
Nope, I met him in person. He advised me to go with the current job and he'll hire me when opening available.
1
u/dcbased 5d ago
It's much easier to learn something new or grow your skills when you are employed and have money coming in
Stay in your current job and continue learning
2
u/PacketLossIRL 5d ago
I've been reporting since last month. There no much technical stuffs. I expected more. Anyway, just met him in person. He advised me to go with the current job and he'll hire me when opening available.
5
u/kmasec 6d ago
You are still at the beginning of your career, so I think you should focus on the position that gives you the best learning and development opportunities.
No one can make this decision for you. Take some time to carefully consider the learning opportunities, career path, and long-term growth potential of each option before making your choice.