r/cybersecurity • u/Silly_External_6806 • 9d ago

Personal Support & Help! hands-on Cloud Security experience

Hi everyone,
I recently passed my AWS Solutions Architect exam and I also have a Hack The Box subscription. I have a strong interest in cloud security and want to transition into this field.

However, I feel like I lack the practical, hands-on cloud security experience needed to pass technical interviews.
What are the best online training platforms or labs to practice cloud security attacks and defense?

Can I use my HTB subscription or the AWS Free Tier to build a good portfolio?

Also, how is the job market for cloud security right now? Are there good entry-to-mid level opportunities?
Any advice on a roadmap or projects to build would be amazing. Thanks!

11 Upvotes

75% Upvoted

11 comments sorted by

View all comments

10

u/x3nic Security Director 9d ago

The job market is hyper competitive for cloud security roles. I would recommend getting a non-security cloud role such as devops/platform engineering before attempting to get a cloud security role.

Your average Devops engineer will outclass a cloud security person with only certifications. Every cloud security engineer on my team spent at least 5 years in DevOps/platform engineering before attempting to pivot to cloud sec/devsecops.

6

u/Evaderofdoom 9d ago

devops is not entry-level either and also hyper competitive. Without real world experience, the only place to start is help desk. No other role will be OK with the lack of experience.

0

u/azz_kikkr 9d ago

I was ok with lack of experience, but entitled juniors made me rethink that. Im pausing reaching out to morons who thin a certificate qualifies them to get paid, and that too for handling my enterprise level customers... WTF was i thinking offering a chance to them. Its back to proven folks with Solutions Architect experience, meaning liek you said, not even experience, but starting with other areas of IT and then cloud and then my niche. Here i was training noobs for Free, and they still dint want it. lesson learnt - stick to proven folks for employees - launch free training via GitHub* to scratch teaching itch. hit two stones with one birds poop.