Re:Ask HN: Tired of being a software engineer, what next?
by shw1n on Tuesday May 30, 2023 @04:20PM
(#36130169)
I did the OSCP, a 3-month course + exam that teaches an overview/the basics of infosec and more specifically pentesting
It’s a fairly well-regarded certification (and a tough 24-hr exam), and got me interviews for Senior Security Consultant roles at firms like NCC Group with no prior security background
I think a typical progression is something like Security Consultant/Pentesting at a consultancy and then transitioning to Security Engineer/Security Researcher at a more specialized firm
I was actually able to bypass this and somehow land my dream job (binary/IoT reverse engineer) immediately after seeing them post on the r/reverseengineering subreddit and just going for it
Besides the OSCP, what helped me land the role was playing microcorruption CTF
It’s a fairly well-regarded certification (and a tough 24-hr exam), and got me interviews for Senior Security Consultant roles at firms like NCC Group with no prior security background
I think a typical progression is something like Security Consultant/Pentesting at a consultancy and then transitioning to Security Engineer/Security Researcher at a more specialized firm
I was actually able to bypass this and somehow land my dream job (binary/IoT reverse engineer) immediately after seeing them post on the r/reverseengineering subreddit and just going for it
Besides the OSCP, what helped me land the role was playing microcorruption CTF
Happy to help if you have more Qs: [email protected]