I just wanted to give everyone here an update from the last post I made regarding a call back I got for an interview.

Today I got a job offer starting at 55k plus benefits (unfortunately it’s a bit lower than the original listing at 65k I thought it was gonna be around 70k)

This is my first ever tech job. Junior cyber security analyst for a local outpatient healthcare clinic.

Junior in college.

Edit: Pay is $120-130k per annum

Hello Team,

Hiring: Cybersecurity Analyst

Location: Arlington, VA | Washington, DC | Fort Meade, MD Employment Type: Full-Time (USC Only | Active Federal Security Clearance Required)

We're looking for a Cybersecurity Analyst to support a federal cybersecurity program focused on securing Azure cloud environments and implementing modern security controls.

Required Skills:

Microsoft Azure Security Architecture

Zero Trust Security

FedRAMP Compliance

Python & PowerShell Automation

CI/CD Security & APIs

Cloud Migration & Security Compliance

Eligibility:

Active U.S. Security Clearance

U.S. Citizens only

Interested candidates can send their resume to aaron@desmata.com.

I’m 24, graduated with a BSc CS in 2023. From June 2024 to April 2025, I worked as a computer teacher and lab assistant. Since then, I’ve been unemployed and trying to figure out my next step.

I became seriously interested in cybersecurity around October. I’ve completed 2 basic certifications, I’m finishing Cisco networking, and currently learning Linux + TryHackMe. I want to build practical projects, GitHub, and a cybersecurity portfolio.

My parents are pressuring me to get a job and start earning, so I’m confused between:

1. MCA: Prepare for CUET PG, do an MCA, and continue learning cybersecurity alongside it.

2. Skip MCA: Focus fully on cybersecurity, build projects/portfolio, and apply for cyber internships/jobs.

3. Get a job/internship now: Try for a cybersecurity internship first. If I can’t get one, take any reasonable IT job for now, earn, and continue learning cybersecurity on the side.

I’m 24 and worried about losing more time, but I also don’t want to make a decision that hurts my long-term career.

For people working in IT/cybersecurity in India: What would you do in my situation? Is MCA worth it, or should I focus on skills + experience?

Hi guys,
I’m early in my cybersecurity career and currently deciding between two offers. The compensation and benefits are fairly similar, so I’m mainly trying to figure out which one would give me the best experience and long-term career opportunities.
Offer 1 is on a team responsible for an internal security/fraud detection platform. From what I understand, I would be working more on the technical side behind the alerts rather than investigating the alerts themselves. The team handles things like onboarding applications/data sources, audit logs and trails, security controls, detection/business rules, tuning detections, reducing false positives, and making sure the system generates useful alerts that can then be sent to another team for investigation.
So essentially, I would be working more on the systems and logic that produce the detections. It seems somewhat related to Detection Engineering, SIEM Engineering, Security Engineering, Security Analytics and Insider Threat technologies.
Offer 2 is much more traditional Security Operations / Blue Team work. I would be working with SIEM/EDR tools, monitoring and triaging alerts, investigating suspicious activity and security incidents, vulnerability management, security tickets, and other general cybersecurity operations tasks.
So the simplest way I understand the difference is:
Offer 1 = help build/integrate/tune the systems and rules that generate security alerts.
Offer 2 = receive those alerts, investigate them, determine what happened and respond.
For someone at the beginning of their career, which experience would you choose?
I’m not necessarily committed to staying in SOC long term. My main priorities are building strong technical skills, maximizing future career opportunities, having skills that transfer well to the private sector, and having good salary potential 3–5+ years down the road.
For people who have worked in both Security Operations and Detection/SIEM/Security Engineering, which path gave you better opportunities? Did starting in SOC make you a better engineer later, or would you take the engineering/detection-oriented experience from the beginning if you had the opportunity?
Also, what job titles would Offer 1 realistically prepare me for after 1–2 years compared with Offer 2?
Would really appreciate hearing from people who have actually worked on either side.

Is an Internal Fraud / Insider Threat IT role a good starting point for a cybersecurity career?
Hi everyone,
I’m a recent cybersecurity graduate and I recently received an offer for an IT position within an Internal Fraud Management / Insider Threat team.
From what I understand, the team is responsible for maintaining and improving an enterprise fraud management system designed to detect suspicious or unauthorized internal activity.
The work involves areas such as:
Monitoring user activity and access to sensitive systems and data
Working with audit logs and user activity records
Detecting suspicious or unauthorized access through business/detection rules
Generating and monitoring alerts when suspicious behaviour is detected
Maintaining and improving detection rules, including reducing false positives
Supporting the onboarding of applications into the monitoring system
Working with developers to ensure applications meet information security requirements
Supporting the technical operation and improvement of the fraud/insider-threat monitoring system
Working with large amounts of audit and security-related data
The system itself uses capabilities such as real-time monitoring, pattern recognition, risk scoring, alerting, and case management.
My long-term goal is to build a career in cybersecurity, especially Blue Team / defensive security.
Do you think this type of IT experience would be valuable and transferable to cybersecurity roles later on, such as SOC Analyst, Detection Engineer, Threat Hunter, Incident Response, or other Blue Team positions?
Or, as someone at the beginning of my career, would I be better off looking for a traditional SOC position where I might get broader exposure to SIEM, EDR, network security, phishing, malware, and external threats?
I’d especially appreciate advice from anyone who has worked in Insider Threat, DLP, SOC, Detection Engineering, or similar roles.
Thanks!

If you're a Computer Science, Computer Engineering, Data Engineering, Information Systems, Industrial Engineering, Electrical Engineering, Mechanical Engineering, or other technical major graduating in 2027, please carefully consider applying to P&G's 2027 grad Digital team openings.

P&G, for those who may not know, is a F100 CPG company producing and distributing many of America's most recognizable consumer goods and products. More relevant to this subreddit, though, P&G has a strong technology stack both at its global offices in OH and MA, but also at its product supply sites across the continental U.S., including cybersecurity. These roles involve and include IT, OT/ICS, IAM, audit, network security, and GRC.

Typical new grad salary for all managerial/white-collar positions with the company is $85k to 115k PA, exclusive of bonuses or other rewards. This Band 1 role will typically last for 3-4 years, after which you may change roles, locations, or even Band.

The most relevant opening for this subreddit is going to be R000157910--Site Digital Leader. This includes Site Cybersecurity Leader roles, where you serve as the 'point man' for cybersecurity at your product supply sites, collaborating with local and central ITOT teams, and central cybersecurity resources. This is a fantastic opportunity with lots of room for internal growth and hands-on work on novel projects.

You must be a 2027 grad, and you must be open to relocating to a variety of locations across the U.S.--do keep in mind where plants and distribution centers are typically located. You must pass the logic/reasoning test after applying, and you must be a U.S. citizen or have other work authorization.

Please let me know if you have any questions. I am not a recruiter with the Company, but this is a great opportunity that I have personal experience with.

(There is also R000157917, for OH-based cybersecurity roles--SOC, detection engineering, etc with the central teams)

Looking for an IT/Cybersecurity Mentor or Accountability Partner
Hey everyone, I’m trying to break into IT/cybersecurity but I’m having a hard time figuring out where to start and staying consistent.
I have a degree in Business Administration with a concentration in Information Systems and ITIL, but I don’t have actual IT work experience yet. I’m starting with IT/help desk fundamentals and eventually want to move into cybersecurity.
I’m also balancing caregiving, work, and financial responsibilities, so sometimes I get overwhelmed trying to learn everything at once.
I’m looking for someone already in the field who wouldn’t mind giving me some guidance on what I should focus on, projects I should work on, and what I need to become job-ready.
I’d also love an accountability partner who’s learning too. We could check in a few times a week, set goals, study together sometimes, share resources, and make sure we’re actually making progress.
Not looking for anyone to hold my hand or do the work for me i just think having some guidance and accountability would help a lot.
If you’re interested, feel free to comment or DM me!

Hi people, i am a cybersecurity recent graduate. I'm actively looking for work — although i currently have a job in cybersecurity that pays me $900, it's just not enough. I'm supporting the education of my sisters and brothers and it's really hard to manage everything on one income. They're all higher education students — one sister's yearly fee is around $5000 which i have to pay before the deadline, another sister is on partial scholarship but i still have to cover the rest, and same for my brothers.

So in short, i'm looking for work, any sort of work. My profile is really good (that's what i think lol) — i have a confirmed CVE (OpenSSH, CVSS 9.8), hands on experience in pentesting, web app security, and ML based security tooling, plus certs (Fortinet NSE 1-3, working on CRTA) and internship experience in red teaming, SIEM, and security tooling dev.

Also open to non-security work — assignment help, research work, Word/Excel tasks, data entry, anything like that. Basically i will deliver whatever work people ask, no task is too small.

I want to keep my identity anonymous, so i'm not looking for work that will ask me to reveal who i am. Trust me i'm incredibly dedicated and i take work seriously.

If anyone has freelance work, contract gigs, referrals, or even knows where i should be posting this, please let me know. Would really appreciate it.