So I just posted a number of #entrylevel #infosecjobs. My point isn't that I don't think people can search these out themselves.

Instead, I'm trying to highlight how jobs where the candidate pool will likely be entry level folks but the job description is poorly worded such that many will self-exclude.

Be brave, fuck the requirements section. If it sounds like a job you think you can do:

1. Tailor your resume. Don't lie but definitely highlight the correct relevant experience, skills, and/or knowledge you have.

2. Think about it like an elevator pitch. You have mere moments and few words to tell them why they NEED to hire you.

3. If you need someone to kick your #ImposterSyndrome in the ass, let me know.

I'm a hiring manager at a large US bank. Very often my peers post the job template given to us by HR. Very often the requirements don't necessarily apply. So follow @alyssam_infosec's advice and be bold. Find someone on the inside that can help you understand what they are looking for.

I'm willing to be your inside person at my company. See the toot below.
#infosecjobs #fedijobs
https://infosec.exchange/@Xavier/109372088738492909

Xavier Ashe :donor: (@[email protected])

@accidentalciso Hey everyone out there looking for jobs. I'm on the #infosec leadership team at a purple bank. Take a look at what we have posted. If you see something that interests you, send me a DM and I'll give you the inside scoop like which team it's on and what you can expect. Then if you like the job, I'll deliver your resume to the hiring manager. https://careers.truist.com/listjobs/?keyword=Security

Infosec Exchange
@Xavier @alyssam_infosec it doesn’t matter though. Most places aren’t hiring at all even though they are posting ads. I’ve applied to over 200 jobs and nothing. I couldn’t even afford groceries because of it. I’ve just been eating rice for two weeks
@theperch @Xavier admittedly right now a lot of companies are holding off hiring until the new year. But many are also hiring now. I just helped get connect two people with hiring mangers last week, one was an entry level.
@alyssam_infosec @Xavier right now I’m doing web design but it’s hard to get clients in this economy. I’ve tried applying to over 200 jobs and nothing.
@theperch @alyssam_infosec @Xavier you could always jump over to web app pentesting. The cybersecurity field is growing and that skillset is in demand.
@TH3R3P41RM4N @alyssam_infosec @Xavier I didn’t think of that it it’s a great suggestion. Thank you

@theperch @alyssam_infosec @Xavier it’s what I do, so I’m a bit partial. Also look into bug bounties, portswigger.com, and getting yourself a virtualbox Kali vm and you’ll be cookin with gas.

The web security academy from Portswigger is a great place to learn webapp ( and it’s free). https://portswigger.net/web-security/learning-path

Last tip, do informational interviews and network. Throwing resumes against the wall and seeing what sticks will rarely get you a job. Going to OWASP/bsides/defcon groups and meeting folks in the industry will help you immensely. Here’s a thread I wrote on informational interviews if you are looking for a place to get started, (https://twitter.com/th3r3p41rm4n/status/1589825523718717441?s=46&t=kom6tM9sJfr2VrwJFoNfrw)

Feel free to reach out if you have any questions or looking for resources.

You got this! I believe in you!

Learning path | Web Security Academy

A step by step journey, from beginner to expert level, through the Web Security Academy - brought to you by PortSwigger. Create an account to get started.

@theperch
I'm quite not sure if this could apply to you. But for me Headhunters worked quite well in my last job change beginning of the year. I'm now in a job position I would never have applied to by myself. A headhunter asked me to make a contact and introduce my profile to my new boss because she was seeing a hit in my cv to that position and now I'm quite happy with my new position and my salary.
@alyssam_infosec @Xavier