Cybersecurity Mentors Podcast

Craig Sheffield, a cybersecurity analyst from Taiwan with a background in teaching and the arts, shares his compelling journey into cybersecurity. He discusses how his musical skills translated surprisingly well into this tech field. Craig dives into his experiences with the TryHackMe Security Analyst Level 1 certification, emphasizing the blend of motivation and community support. He also weighs the pros and cons of various training methods, highlighting the significance of practical experience and the pivotal role of certifications in career advancement.

In this episode, we delve into the often-overlooked yet fundamental importance of learning how to "build" systems, networks, and applications for cybersecurity professionals. Coining the philosophy "Build, Secure, Hack," we explore why hands-on experience in building provides an essential foundation for effectively securing and ultimately understanding how to hack those environments. We discuss the pitfalls of skipping these foundational IT skills, highlight the immense value of setting up a home lab for practical learning, and offer concrete examples of what to build to enhance your cybersecurity expertise and career prospects in today's job market.Check out our new merch shop! https://the-cybersecurity-mentors-pod.myspreadshop.comYouTube ResourcesNetworkChuck - https://www.youtube.com/c/NetworkChuckTechno Tim - https://www.youtube.com/c/TechnoTimLive LearnLinuxTV - https://www.youtube.com/c/LearnLinuxTV The Coding Train - https://www.youtube.com/c/TheCodingTrain Professor Messer - https://www.youtube.com/@professormesserVirtualization PlatformsVirtualBox – Free and easy to use. - https://www.virtualbox.org/VMware Workstation Player – Personal use version of VMware.Proxmox VE – Advanced, self-hosted hypervisor.Lab Design IdeaspfSense as your firewall/routerLinux and Windows VMs for practiceAdd vulnerable VMs from VulnHub to practice attack/defend - https://www.vulnhub.com/Add Security Onion to practice detection - https://securityonionsolutions.com/Automation / DevOpsAnsible – Infrastructure as code for deploying and managing servers - https://www.ansible.com/Docker – Build and run isolated containers (great for web apps or SOC tools) - https://www.docker.com/HomelabOS – Build an entire lab with one command - https://homelabos.com/Cloud OptionsAWS Free Tier - https://aws.amazon.com/free/Google Cloud Free Tier - https://cloud.google.com/freeMicrosoft Azure for Students - https://azure.microsoft.com/en-us/free/students/Send us fan mail via text

Doug Burks, founder and CEO of Security Onion Solutions, shares his inspiring journey from computer enthusiast to cybersecurity innovator. He highlights how accessible network monitoring tools help defenders fight cyber threats effectively. The conversation dives into the importance of setting up home labs for practical skills, the excitement of responding to cyber challenges, and the complexities of open-source communities. Burks also emphasizes the ongoing evolution of network security amidst emerging technologies like encryption and AI.

In this episode, we dive deep into the world of cyber deception—from classic honeypots to canary tokens and more. Learn how deception isn't just a defense tactic, but a skill every aspiring cybersecurity analyst should master. We'll explore real-world stories, ethical considerations, and how strategic deception can give you the upper hand against attackers.Episode Resources:Offensive Countermeasures BookCanary TokensHoneyport - Powershell ScriptCheck out our new merch shop! https://the-cybersecurity-mentors-pod.myspreadshop.comSend us fan mail via text

This episode delves into the current state of the cybersecurity job market and offers essential strategies for breaking into the industry. Kelly Belding, an experienced IT recruiter, discusses hiring trends, the importance of relevant skills and certifications, and the significant role of networking for career advancement.• Overview of the changing IT job market dynamics • Discussion on entry-level versus mid-senior level positions • Importance of skill sets and certifications in job applications • Insights on current salary expectations for new graduates • Networking's vital role in securing job opportunities • The impact of AI on hiring practices and operational rolesSend us fan mail via text

In this episode we chat with Daniel, who is just starting on his journey in cybersecurity. We work to give him guidance, direction, and a roadmap for landing his first job. • What sparked Daniel's interest in cybersecurity • Current job enhances troubleshooting skills and problem-solving mindset • Pursuing cybersecurity certifications one step at a time • Importance of framing experiences effectively on resumes • Networking and social media presence as tools for job hunting • Resilience and adaptability are essential for a successful entry into cybersecuritySend us fan mail via text

This episode focuses on essential skills and tools for aspiring cybersecurity analysts, including network monitoring, incident response, and phishing defense. The conversation emphasizes the importance of practical experience and understanding the fundamentals to successfully navigate careers in cybersecurity.• Importance of network monitoring in identifying suspicious activities • Understanding networking fundamentals for cybersecurity roles • Tools for capturing and analyzing network traffic • Steps to effectively manage and respond to security incidents • Strategies for identifying and mitigating phishing threats • Role of simulations and drills in training for real-world incidents • Need for hands-on experience to enhance cybersecurity skills • Insights into preparing employees against phishing attacks • Importance of documentation in incident response • How to differentiate oneself in a competitive job marketSend us fan mail via text

This episode is part one of two that focuses on essential tools and skills for aspiring security analysts. In this episode we discuss SIEM tools, vulnerability management, and endpoint protection. Check out the link for the resources. • Importance of SIEM tools for analyzing log data • Vulnerability management as a critical cybersecurity hygiene practice • Regular vulnerability scans and prioritizing remediation efforts • The evolution of endpoint protection and current threats • Real-world implications of failing to manage vulnerabilities • Practical tips and resources for gaining hands-on experience • Encouragement for community engagement and shared learningLink to resourcesMentorship - sign up for a free sessionSend us fan mail via text

Ryan Rath shares his journey from the military to a significant role in cybersecurity with Mandiant, discussing the challenges faced during the transition. Key topics include the importance of networking, the evolving skill sets required, and the ethical responsibilities of cybersecurity professionals, highlighting the need for mentorship and continuous learning. • Ryan's military background and transition to cybersecurity• The significance of networking in career development• Challenges faced while applying for jobs in tech• Importance of practical experience over certifications• Skills needed within the cybersecurity landscape• Ethical considerations in handling technology• The role of mentorship and giving back to the communityMentorship - sign up for a free sessionRyan Rath's LinkedIn ProfileSend us fan mail via text

Max Harley's journey into cybersecurity began unexpectedly with a childhood passion for video games, which sparked a deeper interest in programming and security. His competitive spirit emerged through capture-the-flag competitions, leading him to impactful roles at SpecterOps and Prelude, emphasizing mentorship, networking, and continuous learning in crafting a successful cybersecurity career.• The spark of interest starting from video games and programming • Importance of competitions like Pico CTF and CCDC in developing skills • The role of mentorship and networking in career advancement • Experiences in red teaming and offensive security • Transitioning thoughts on proactive cybersecurity and evaluative metricsMentorship - sign up for a free sessionMax Harley's LinkedIn ProfileMax's talk at BSides Charleston 2024Send us fan mail via text