New-to-Cyber Field Manual: How to Break In, Build Skills, and Find Your Path in Cybersecurity

Start by exploring different specialties (forensics, defense, penetration testing, cloud, security awareness, policy, malware reverse engineering, blue team, compliance) to see what interests you most. Build a foundation in basic IT concepts like TCP, UDP, HTTP, and FTP, join communities like OWASP and SANS, try free courses, and practice with tools or a capture-the-flag event.

Degree programs and certifications provide a good baseline, but individual exploration matters too. GitHub contributions, blog posts, and meetup talks show genuine interest even without formal experience. Military service (including part-time National Guard or Reserves) is one path, and professionals from other fields can transition by pairing their existing specialty with a plan to move into cyber.

Programming isn't required to enter the field, but familiarity with the concepts helps. Python is a good starting language, and scripting knowledge (Bash or Python) is useful for automating tasks. Which language matters most depends on your specialty; web application penetration testers, for example, benefit from understanding ASP.NET, PHP, and .NET frameworks with C#.

Recommended platforms include Hack The Box, The Cyber Mentor, and TryHackMe, along with OverTheWire: Wargames, Hacking-Lab, Hacker101 CTF, and Hack This Site. SANS Institute's own annual Holiday Hack Challenge is also available, and using past winning answers as walkthroughs is fine.

Many people start as junior analysts in a Cyber Security Operations Center (CSOC) examining and analyzing alerts. Internships are another path; every student in the SANS.edu bachelor's degree program completes a virtual internship as an Apprentice Handler in the Internet Storm Center.

Some cybersecurity fields favor a degree, while others accept certifications as sufficient proof of competency. SANS.edu's undergraduate certificate program is designed for entering the field quickly, and its credits can transfer into the SANS.edu bachelor's degree program for those who want the additional credential.

Identify what excites you and gives you the drive to dig in and learn more, then find a path aligned with that. It's fine to try a mix of specialties rather than narrowing down too early; a solid general background helps you discover what you enjoy.