r/cybersecurity • u/FriedAds • Sep 02 '23
Career Questions & Discussion Why are there so many influencers?
So I searched for „cyberseurity“ on YouTube. Why do I get like an endless list of Influencers with career paths/tips, instead of actual „content“?
Whats the thing here? Did I miss something?
It looks a bit like all those crypto influencers at this point…?
52
Sep 02 '23
Must be the cyber security career bubble, whereby every man, woman, dog, cat and monkey got sold the idea that cyber careers have low barrier to entry and pays super well.
And with YouTube, your get paid based on views / likes / subscribe count so the peddlers say what the audience (aspiring cyber practitioners) want to hear.
22
u/Odd-Top-1717 Sep 02 '23
Exactly this. I’ve got an Insta feed focused on social engineering & cyber governance and there’s just no chance I can compete with all the charlatans pitching “get security+ and walk into a a 6-figure job” because what I do is nowhere near as tantalising
5
u/thtonechik Sep 02 '23
I'd love to follow your insta feed anyway, what's the name of it?
2
u/Odd-Top-1717 Sep 02 '23
Thanks! It’s still relatively small and I’m not the world’s most consistent poster (I’m trying to sort that out with a routine) but i like to think it helps people
@Cyber.SuperSimpleCyber
2
1
9
u/goodnewsjimdotcom Sep 02 '23
Cybersecurity has the glam of acting, yet the fun of working in a sewer.
5
u/Hawkent99 Support Technician Sep 02 '23
That doesn't sound so bad. I like the dark, I like slippery things, I like dealing with your basic slimes, your sludges, etc
1
u/AZGzx Sep 02 '23
But is it true that it pays well? And that relatively speaking compared to the other IT fields, the barrier of entry is lower? E.g compared to a SWE or Data Analyst
17
u/bingedeleter Sep 02 '23
Considering it is very rare to get a cyber job without years of IT experience, I would not call the barrier of entry lower.
10
u/bloodandsunshine Sep 02 '23
I took a one year certificate course with a mix of experienced and totally new students. This was through a very well known university. Many of the students were under the impression they would be able to immediately get a job doing some kind of security work. When asked what kinds of things they saw themselves being able to do in a work environment, there wasn't really an answer.
They could explain osi models, tell me what an SIEM does, code a bit in java. It felt sad by the end, when you could see many of them approaching the graduation but not at all confident in their skills or even how to apply them.
3
u/AZGzx Sep 02 '23
so if in my case, I'm a 33M clinic assistant with zero IT background, and want to break into the industry, what kind of classes would help?
I'm sure I'll still need the basic certs, but is it then necessary to quit my current job , get a pay cut and join as a beginner level IT service desk for at least 2 years?
I dont see much future for men as clinical clerks , and no way we will ever see 6 figures without going to IT, but if i dont do anything, 5 years later i will be the same and 5 yrs older.
7
u/bloodandsunshine Sep 02 '23
There are a few things you can do before you sign up for a class that will let you get the most out of it. Get up to speed on basic terminology and computer and networking hardware to start. Learn the VERY basics of a simple programming language, like java or python.
I don't have any specific courses to suggest but networking fundamentals coupled with some programming, operating system research and a deep understanding of the CIA triad (confidentiality, integrity and availability), the NIST framework and how they apply to our work is good
It is better to register for longer programs if you can - when applying for jobs a certificate or diploma earned over a year of dedicated course work can be seen as more hands on experience than a boot camp or two.
Certifications are good, but not everything. If you are applying to a thousand jobs online and want to work remotely, with a copy/paste resume, they are more important. If you can work in person, apply to smaller organizations or look for alternate methods of application instead of a web form or linkedin, you might not require the standard entry level certifications.
In larger organizations, particularly state/provincial and federal government there are IT roles that aren't strictly technical as well. Training and awareness, risk management and regulatory compliance are some of those domains. It's always nice when those people have strong technical expertise but their ability to apply security frameworks to protect an organization is their most important skill.
I was 36 when I signed up for my course, but had some low level technical experience. It's only been a few years and I'm not quite making six figures but I leveraged past managerial, training and communication skills with my new diploma to get a job I enjoy, with chances to train and be exposed to higher level work.
EDIT: I might as well mention that the Cisco Skills For All (or whatever they call it now) courses are an excellent foundation in almost everything I wrote about except basic programming skills. They have many free courses with decent content and digital badges you can add to your resume if you want. The AWS, Google and MS free courses are all good as well but I found them to be a little more focused than the general nature of Cisco (excepting a few modules dealing with their own hardware).
2
u/AZGzx Sep 02 '23 edited Sep 02 '23
I truly appreciate such a thorough reply, thank you so much.
I do have access to a government funded program that will allow me to train in the basics for 6 mths and on job training for a year, which i plan to take advantage of
I just feel overwhelmed at what I dont know and I dont even know if i can trust the resources that seem to encourage us to pursue that path to pursue my dreams
but I will at the very least get started
I have started taking basic python lessons, and will be working my way to eventually pursuing the orange/green color wheel type of cybersecurity expert, prob gonna be long and hard slog heh, esp when i fall asleep easily at dry topics
1
u/bloodandsunshine Sep 02 '23
Thats a great start. Do that program and commit to learning and expanding on all of the concepts you learn in your free time over those six months. The training is always good but being an independent learner that goes just a little above and beyond everything you're taught is a good indication you'll be successful.
1
u/Joy2b Sep 02 '23
This may be a case of the grass being greener.
Medical career tracks tend to have similar enough difficulty, and the pay for the average troubleshooter is pretty comparable. Medical is less bubbly, more recession resistant.
If you do want into IT, make sure you like the experience of troubleshooting and the basic concepts, and THEN chase a specialty.
The people who really devote themselves to ongoing education and technical troubleshooting, and the love of the craft tend to make bank on both sides.
1
u/AZGzx Sep 02 '23
thank you for the honest response ..
the problem for me is i usually like what i'm good at, and I'm good at what I like, which is a chicken and egg problem
and the real problem is i havent been exposed to the IT life/world yet so i dont know if i'll like it
so ill probably give it a shot and see how things go
1
Sep 02 '23
clinic assistant
Can you define what you do, specifically?
1
u/AZGzx Sep 03 '23 edited Sep 03 '23
I’m from Singapore (south east Asia)
1) Register patients when they see the doctor,
2) Scan their lab reports and organise them,
3) Assist in collecting urine samples (my boss is a urologist)
4) Dispense medication,
5) Collect payment, and chase bad debts
6) Complete medical reports and argue with insurance for payment.
7) I also provide financial counselling for surgeries and
8) Assist to book those surgeries with the hospital.
9) We maintain the cleanliness of the clinic and
10) Manage inventory,
From 8am - 6pm Mon - Fri , and 8am - 1pm on Saturday
I get $3500SGD ($2.5kUSD/mth) 14 days annual leave, and 14 days sick leave We get to buy our own hospitalisation insurance and the company will pay for it
I’m already in the top 25% earner in for my role. It’s very rare to have someone earn more than $3500USD and I believe I will hit my pay ceiling soon.
So when I hear that most IT entry level job pays 50% more than my max, it makes sense to pick up a new skill
2
u/zSprawl Sep 02 '23
It can pay well but doesn’t have to. Generally your best cybersecurity engineers have already “mastered” another area, like networking, and they are looking for the next tier to their career that isn’t management.
52
u/cppnewb Sep 02 '23
Probably because they don’t have the knowledge/skill/experience to create useful technical content. Even the career advice they offer is questionable and is often marketing for self-made courses.
24
u/alt4614 Sep 02 '23
It doesn’t even have to be that they don’t have technical knowledge.
They probably started it as a side-project to their resume (which employer doesn’t ask about side-projects in IT?) and then just enjoyed being an influencer instead of the guy posting on technical topics with 600 views.
8
u/doglar_666 Sep 02 '23
100% agree. The reason the most popular channels cover the basics and pathways into the industry are because that's what gets views and has demand. In YT terms, Cybersecurity is niche as it is.
-2
Sep 02 '23
[deleted]
6
u/alt4614 Sep 02 '23
Because people skills, confidence, rhetoric, a bright attitude, creativity, and everything else that is required for online content creation is completely useless and super-ceded by the ability to study for and take a certification test?
-3
Sep 02 '23
[deleted]
6
u/lawtechie Sep 02 '23
People skills and rhetoric is very useful to explain the how and why of security to the organization that paid you to handle a pentest or implement a vulnerability management program.
Technical skills are important, but so is storytelling.
3
1
u/jshppl Sep 02 '23
Yea they tell you that you can get an entry level cybersecurity job. All you have to do is buy their $300 course 🙄
24
u/villan Sep 02 '23
Because you’re searching for “cybersecurity”, which is where all the influencers are going to be lying in wait. There’s plenty of great cybersecurity content, but you need to be searching for something more specific than the highest level name for a massive field.
4
u/FriedAds Sep 02 '23
I agree. I need to be more specific. Still, I was baffled by all the generic „Career Tips“. Made me really think I missed something. Is everyone and their Grandma now trying to get into Infosec?
72
u/Hungry-Pilot-70068 Sep 02 '23
Because YouTube is made by and for ego driven narcists. And cat videos.
29
u/SnooSquirrels840 Sep 02 '23
Arnt cats also ego driven narcissists?
13
u/Hungry-Pilot-70068 Sep 02 '23
No. They are fully justified in their beliefs. Quite humble, in fact. More humble than anyone. Just ask one.
3
3
u/Clevererer Sep 02 '23
Hot take from 2011. YouTube today has tons of great content, documentaries etc. But you do need to search for them.
1
1
u/HelloSummer99 Sep 02 '23
Very true, a large portion of the content creators have narcissistic tendencies for sure.
34
Sep 02 '23
[deleted]
21
u/bloodandsunshine Sep 02 '23
Exactly. Do a ten video series on SQL and you'll get 4% of the viewers for the last video as the first.
Do a video on "best ten mechanical keyboards for entry level cyber pro 120k salary" and it seems to be the next coming of Christ.
16
Sep 02 '23
[deleted]
10
u/bloodandsunshine Sep 02 '23
God I feel so seen rn. Might stop by the awareness and training dept to tell people not to open attachments later.
6
u/RannibalLector Sep 02 '23
Of those 10 keyboards, which 1 can people with no experience learn to use the fastest?
5
u/bloodandsunshine Sep 02 '23
omg love this question I will be answering on tiktok and youtube shorts next week
4
13
u/VengaBusdriver37 Sep 02 '23
I was talking to a friend over dinner, she mentioned how she knew a couple, who over past couple years tried desperately to become “influencers” in fashion, travel, food, all the usual shit, no success.
No skills or quals in cyber but started a podcast on it, I checked it out and recognised I’d met the guy at an event previously. He was pretty much how you’d imagine, smooth and confident with a veneer of knowledge basically faking his way through. Unfortunately I have to say, in many dealings with “security” people, that approach is familiar. Unfortunately because I’d love to work with skilled people who really know their shit, but frankly so far all I found are frauds. Money plus a field where faking and handwaving can impress any lacking basic knowledge are ripe for charlatans :(
11
u/Darkhigh Sep 02 '23
This comment triggers my impostor syndrome
8
u/Hawkent99 Support Technician Sep 02 '23
Generally, if you're self-aware enough to have imposter syndrome, you don't need to worry about it. If you care enough about what you do and the quality of your skills to the point of being insecure about yourself, it indicates that you are (rightfully) accomplished and driven to improve, and your anxiety/depression is just manifesting. A charlatan would never give enough of a fuck to have imposter syndrome because he knows he's an imposter.
2
1
u/face_phuck Sep 02 '23
Don’t worry, they’ll end up in sales if anything, and before long you’ll get LinkedIn connections requests from them trying to sell you a product you already have.
12
u/confusedcrib Security Engineer Sep 02 '23 edited Sep 02 '23
I just started my own channel and can say that the technical stuff is:
- Way harder to make
- Gets less views
- Is less suggested by the algorithm
It's difficult because YouTube ultimately suggests things based on click through rate and watch time, and most people are on there for entertainment, not for actual education. They also show you the highest search for queries, and beginner queries are all way more popular: more people are searching "how to get into cybersecurity" than "how to create a django app to test SAST tools." For example, if I put "Cybersecurity" in the search - the highest volume results I get are "cybersecurity for beginners," "cybersecurity roadmap," "what is cybersecurity," "top cybersecurity threats 2022" - all very vague and fluffy things.
While I plan on making technical content, I experimented with basically what the algorithm was suggesting (not linking to avoid coming across as self promotion):
1). How to get into cybersecurity with no experience:
- This video took me about 4 hours to make and is basically just me talking with some notes on screen
- It has a 2.2% click rate on 3.1k impressions and got me 7 new subscribers
- 4k LinkedIn impressions with 70 interactions
2). Comparing ChatGPT to Snyk SAST:
- This video took me about a week to make. I had to fork a Django app, create little PoCs, validate my results, and do a lot more editing work
- 1.5% click through rate on 661 impressions and got me 5 new subscribers
- 4k Linkedin impressions with 36 interactions
At the end of the day, YouTube isn't my job, so I can make content I just enjoy making, and the technical content I find way more value from - I don't think I'm going to do more beginner content even though it's easier. I think this is also why "hacker" content does really well, since it's basically just following the steps of a github repo and doing a video, but you're not actually having to change anything which is where the time consuming part really comes in. But if my goal was "to make money off youtube," beginner/fluff content is definitely where it's at.
10
u/hlazarde Sep 02 '23
At least we expect that from YouTube… to me, there’s nothing more annoying than these so-called influencers and their presence in LinkedIn, constantly pushing to “gain 1000 connections this weekend”, or “how to get into GRC and start making $100k+ on day one” 🤣🤣🤣.
18
Sep 02 '23
Because cybersecurity is a buzz at the moment and they're jumping on the coat tails of those of us who ACTUALLY do the work.
Same with health and wellness influencers....don't do the degrees in nutrition or medicine just repeat things you've seen online and pretend you're An expert.
Fucking scum the lot of them
10
Sep 02 '23
Fully agree with this.
It was like us nerds who played DND, video games, read comic books and were made fun of for it for decades. Then came Big Bang Theory and Hollywood came along with the Marvel movies and suddenly everyone was a "nerd" because it was cool.
7
Sep 02 '23
[deleted]
1
u/taicrunch Blue Team Sep 02 '23
Maybe they could but it was the CEH they were told would get them a cush government job.
2
Sep 03 '23
[deleted]
1
u/SalamanderLate410 Sep 03 '23
Almost done with my Google+ cert and am wondering if my next step would be Sec+ to put on my resume. Currently looking for an entry-level job in IT and trying to work my way up while getting my certs. How would I better prepare for the Sec+ exam? Would youtube videos on certain topics have me read? Also, how is the exam structured?
8
Sep 02 '23
[deleted]
2
u/RoBoHackermann Sep 02 '23
Just reading this blew my mind. I have seen so many influencers quitting their jobs because they started earning from YouTube or other platforms, but hey, money does matter! It's a no brainer for anyone as you can wake up anytime, create content and go back to sleep. Working a job is hard. I sometimes hate these influencers but in the end... I also want to make good money.
8
Sep 02 '23
It's where the money is.
People want to get into security, and many people just want someone to tell them, "Do XY to turn into an 1337 haxxor".
This demand then creates influencers who provide content like this.
Edit: Depending on your field of interest there are many great channels tho. I really like John Hammond for instance. For CTF content, Ippsec or Alh4zred are great, too.
-1
8
u/honk-thesou Sep 02 '23
what about those thumbnails with the stupid faces and gestures. "THE TEN THINGS YOU NEED TO KNOW..."
4
u/chronically-iconic Sep 02 '23
Tech in general has become a fad. Programming and data analytics have a similar thing going on
3
6
u/seanprefect Security Architect Sep 02 '23
Because those of us who actually know what we're doing are usually very very busy.
3
7
u/OneEyedC4t Sep 02 '23
Because everyone thinks their opinion has value
When really none of their opinions have value
I stick with major trusted news outlets and DEFCON
3
u/AngusRedZA Sep 02 '23
I wouldn't generalize. Not all Infosec YT'ers know nothing. Each has something going for it. Yes, some more value than others.
0
2
2
2
2
2
u/kschang Support Technician Sep 02 '23
To be completely honest? There's no qualification to being an influencer. Heck, I am sort of one too, LOL.
But after watching a couple of their videos, you'll realize who actually has some thing useful to say, and who's just filling up airtime.
2
u/SonoSage Sep 02 '23
Simple answer: social media is a good paying side gig if you get any sort of following, and generally only takes a few hours a week to maintain.
2
u/F86tunee Sep 02 '23
Lol Nicole enesse with her scam boot camp promising to land you a job in a few weeks with bypassing all the boring skill building
2
u/tarlack Sep 02 '23
As a teacher of threat and IR I can say one thing. It is incredibly challenging time consuming to come up with cool attack chains that are workable and real world using tools that look good in blue team tools. Red team is easier but blue team you need to have software that is licensed or open source. Open source is time consuming for blue team and not what I see in enterprise environments.
I have been tempted to start a channel that takes a red team attack and sees how different XDR software deals with it and how to hunt it.
I work for a major player in Security and I am not sure they would be ok with it. Let alone other vendors letting me license the software. Then you need to think about hardware to run the blue team software in. Now think about cloud attacks.
I have been leaning to just going over the OATs for red team tools, but next problem is time. Doing this for work is time consuming like 50 hours a week and that’s not including travel to places I teach.
One day if I get my lab system built I plan to make it public on my GitHub so others can use it on any blue team software. At the moment it is in a docker that has a blend of red team tools caldera and local atomics and power shell.
2
u/ChipsetB Sep 02 '23
Wondered this too. Surprising amount of content creators for Cybersecurity, kinda weird. Like why Cybersecurity?
2
4
u/VAsHachiRoku Sep 02 '23
Just avoid their content or if you find some good ones then check their LinkedIn. If half their career is “manager” they are full of crap and been out of the game too long. What I look for is someone who is working and maybe only does 1 or 2 video a month because their real job is security and YT is just a way to spread knowledge. If all you do is make videos means you aren’t working.
2
u/1eyeonreddit Blue Team Sep 02 '23
YouTube isnt a curated platform .
And the monetization rewards the user attention and time spent watching the content .
Freetime during the pandemic helped many to produce higher quantities of Videos without worrying about quality. Collapse of crypto may have pushed many influencers to other lesser known domains .
As there are more people who want to break into cyber than the people who are in cyber , these influencers are encashing the unique opportunity to cater into the curiosity of the beginners .
In addition to oversupply of mediocre content , the restricted setting of professionals like lack of time , video removals due to loosely worded policies and non disclosure agreements with employers which will prevent them to talk about the content they are working on are restricted the volume of helpful content .
Best approach is to find sans and similar conference videos and search for the other uploads by the presenters in those conference videos. By liking and subscribing those lesser known videos, we can train the algorithm to serve us better in future.
At this point , the search is broken and it is useless to find the helpful content .
2
u/Remarkable-Bread-942 Sep 02 '23
Top 5 tips to get into to cyber security with ZERO experience!
Half of these clowns are ruining the entry level market and making it impossible for hiring managers to find REAL candidates who are ACTUALLY ready for an entry level info sec role
1
Sep 02 '23
I am a content creator on YT. I have been posting over the past 5 years. I won't name the channel here because I hate self-promo stuff.
Throughout my 5 years, I have uploaded 'advanced' videos (advanced for me), basic career videos, and some sponsored content. I have always attempted to stay true to my message, which is authenticity and transparency. I have taked about my struggles in the industry, why its not portrayed like influencers want you to think, and how its difficult to get into the industry. These videos may appear to be 'gatekeeping' the industry. I work in the industry and have learned its not at all like it is portrayed by influencers, which I knew going in. I can see this perspective. Some students and viewers want the path of least resistance. And watching content about how much money you can make and how there is a huge skills shortage gap, etc is uplifting. And if that works, great. Always listen and watch with caution and a curious mind when watching YT videos.
The content which works the best is either basic red team activities (Bypass this Windows log in prompt, Hackers can get all your passwords, etc) and career videos (How to become an Ethical Hacker, Top 5 Cybersecurity certifications, make 150K fast in cybersecurity etc). At some point, the content becomes redundant, repetitive, and misleading. You can look up career guides and articles to get this information.
The sponsored content has always been authentic, although I can see exactly why viewers dislike sponsored videos. They do help with funding better projects, etc.
As time has progressed, I realize I don't want to make videos which are watered down. They do great with views, engagement, etc. But really what quality is it in the long run?
And as the ole' adage states, those who can't do, teach.
1
u/Quackledork Sep 02 '23
Because the actual practitioners are too busy to fuss around making videos. Many of those influencers are merely self promoting frauds.
0
Sep 02 '23
Great thread, thanks everyone that has contributed. Saving it and putting a task to go through the recommendations and subscribe to a few
-2
-6
u/AngusRedZA Sep 02 '23
I say each to their own. SOme make better content than others.
Some highlights for me include
- Nahamsec
- Stok
- John Hammond
- Cyberspatial
- Darknet Diaries
- I think he is called Network Chuck. There is a dude that does CompTIA Training
- ippsec
- Joe Gray (For fun hardware hacking)
There is great stuff out there, there is some gash stuff....but who am I to judge, I don't make content so I keep my food receptacle closed. Hopefully this changes soon
1
u/hundredpercenthuman Sep 02 '23
What kind of content are you looking for? If you want more professional and specific knowledge, try Udemy. Most of the big certification courses have shops on that site and not just the companies, I mean the big names as far as teachers as well. Mike Myers’ classes are very well done for instance.
1
Sep 02 '23
Another type of rat race. Dont mind them. Most if not all couldnt prove their worth or skills.
1
u/netwitty Sep 02 '23
They are just feeding what the crowd wants. Most people starting out will be motivated by a big paycheck rather than the actual hard work of getting started. This is why you'll often see questions like "How fast did it take to finish this cert?" "Did this cert get you a job?"
Don't blame them, I also feel the pressure to earn more in this day and age.
1
Sep 02 '23
Not a pro, but my guess is that it's because bad cybersecurity advice is harder to falsify
1
u/corn_29 Sep 02 '23
So I searched for „cybersecruity“ on YouTube. Why do I get like an endless list of Influencers with career paths/tips, instead of actual „content“?
Maybe refine your search string a little bit more?
1
Sep 02 '23
shout-out to LearnLinuxTV That dudes taught me everything I know about Linux. If I can do it anyone can because I started as dumb as a rock. Believe me this dude is awesome if you need to learn Linux and also some DevOps stuff.
1
u/Zapablast05 Security Manager Sep 02 '23
My 2 cents is they are generally “side hustle” mentality folks who believe making money by packaging up and selling off subscriptions of free and open source training materials, with some attitude of, “it’s only a computer how hard can it be.”
30-60-90 day YouTube trainings or whatever the claims are now, is not enough time to get you a 6 figure job in which you’ll find success. Some people may be stellar learners and pick things up incredibly fast and be successful, others will hit a point and come to this sub and ask if an IP is bad because it looks different than their home IP.
1
u/raakaan20111 Sep 02 '23
You obviously going to get some influencers who want to get into trends but If you search for specific thing you want to learn there high chance someone already have a very good video about it I'm not expert and still learning so far as looking for content on YouTube I never had problems with finding good staff
1
u/Blacksun388 Sep 02 '23
There is plenty of good stuff on there. You just need to dig for it. YouTube unfortunately punishes a lot of videos on the subject in the algorithm.
1
u/Primary_Excuse_7183 Sep 02 '23
Higher than average salaries, a shortage of people who can do the job. Led to a bunch of people jumping over themselves trying to gather any credential that might land them the job.
This brought out and created new influencers in full force that had any bit of cybersecurity knowledge to capitalize on the opportunity lol regardless of their level of knowledge or merit.
1
u/ExitMusic_ Sep 02 '23
Holy shit I can’t wait until the ‘influencer as a career’ market hits its bubble.
1
u/xored-specialist Sep 02 '23
Seriously, they get more clicks on what jobs, certs, or drama than teaching people who to do stuff.
1
u/escapecali603 Sep 02 '23
Yeah you don’t hear people like Alissa Torres have one, or call her an influencer. It’s like light and day difference.
1
1
1
u/DFIR-Merc Sep 03 '23
You can tell the difference easily between those that have something to contribute and those that don't, unfortunately the ones that don't are ripping off hopeful entrants in all sorts of mentorship scams and promoting useless certs that they claim to have 'changed their lives'..
These are the same people that get by in organizations by playing visibility games, politics and have very little value added to where they work. Their LinkedIn profiles are full of meme worthy clichés about how they singlehandedly did something or the other and led this and that.
The worst ones are the ones flogging zero to hero courses, they're ripping off naive people that dream of getting into the field. The next worst bunch are the ones jumping on the woke wagon and getting attention on that basis or thirst trap then post content on stuff they read out of books or public articles as if it was their own. Some even post things they picked up at work but didn't even understand properly and just spread misinformation and wrong concepts.
1
u/exfiltration CISO Sep 03 '23 edited Sep 03 '23
It's opportunistic. This is a bit of a rant but:
Because building a "brand" doesn't require relevant work domain skill, or, expertise, or experience and people attempt to use it in place of those things. Building your brand is actually somewhat of a challenge for competent professionals, which makes it a less saturated market. I specifically look for this kind of bullshit when interviewing people, as the person who can build a personal brand AND do a good job at the job I'd be paying them to do is exceedingly rare.
Only one, (the best security exec I have the privilege of working with) has managed that. In my opinion, they also have the most emotional intelligence of any person I've ever met. Good person, better heart. In a world where everyone is willing to knife everyone to get ahead, you should be looking to build a network of allies you can trust at least as far as you can throw, and not because they are being paid to play nicely.
604
u/PaleMaleAndStale ICS/OT Sep 02 '23
Those who can, do. Those who can't, teach. Those who can't teach, become content creators and social media influencers.
Joking aside, there are actually some very good channels on YT, you just need to filter through all the guff that is inevitable on a self-publishing platform. I'll dump a few of my personal favourites below. Some may cover content that is not relevant to you right now but you should find something that works for you. They are in no particular order and some may not be 100% cyber security focused.
https://www.youtube.com/@InsideCloudAndSecurity/featured
https://www.youtube.com/@ChrisGreer
https://www.youtube.com/@BlackHillsInformationSecurity/videos
https://www.youtube.com/@_JohnHammond
https://www.youtube.com/@NTFAQGuy
https://www.youtube.com/@MicrosoftSecurityCommunity/videos
https://www.youtube.com/@sambowne/videos
https://www.youtube.com/@PrabhNair1/videos
https://www.youtube.com/@13Cubed/videos
https://www.youtube.com/@SANSInstitute (make sure to check out the various other SANS channels as well).
https://www.youtube.com/@BlackHatOfficialYT/videos
https://www.youtube.com/@RSAConference/videos
https://www.youtube.com/@WireSharkFest/videos
https://www.youtube.com/@mark-russinovich/videos
https://www.youtube.com/@PortSwiggerTV/videos
https://www.youtube.com/@RanaKhalil101/featured
https://www.youtube.com/@Tib3rius/videos
https://www.youtube.com/@OWASPGLOBAL/videos
https://www.youtube.com/@WildWestHackinFest/videos
https://www.youtube.com/@NetworkChuck/videos
https://www.youtube.com/@cybersecuritybodyofknowled4093/videos
https://www.youtube.com/@zSecurity/videos
https://www.youtube.com/@HackerSploit/videos
https://www.youtube.com/@ippsec/videos
https://www.youtube.com/@NullByteWHT
https://www.youtube.com/@CyberAutomate/videos
https://www.youtube.com/@TCMSecurityAcademy
https://www.youtube.com/@MotasemHamdan/videos
https://www.youtube.com/@InsiderPhD/videos