I start my first job in #cybersecurity in about a week and a half. What are some tips you wish people would have told you?

@north Congrats! 🎉

- Blog or otherwise write down stuff you do and how you did it. I've forgotten so many things that I wish I would have documented to easily recall. (Plus having a portfolio is nice)
- Don't worry too much about certs
- Don't discount the “boring" things you learn along the journey. The amount of times I've had to relearn things or wish I had paid better attention is astounding
- Everything is risk. Learn to talk about things in the context of risk.

Good luck!

@north Have a password book

@north makes friends with your network engineers.

They'll be able to explain the quirks of your infrastructure. i.e. "why was this designed this way?"

Some corporate C-Levels seem to like to pit network people versus security people, don't be that person.

Source: I've worked both sides.

@north talk about and consider the value to the business all the time, assume that people are normally trying to achieve things for the benefit of the company. Getting the label of Dr No won't set you up for success.

@north

" ... I want you to be nice. Okay, ask him to walk; be nice, if he won't walk, walk him. But be nice, if you can't walk him, one of the others will help you and you'll both be nice. ... "

@humanhorseshoes Can you explain?

@north Also...

CONGRATS 🎉 GETTING THAT GIG AINT EASY!

@north a notebook with your passwords written into it is more secure than reused passwords or keeping them in a text file on you computer. Put the notepad somewhere safe like an actual safe at the end of the work day.

@rogue_corq Thanks. 🥰

They actually reached out to me after my recent foray into cybersecurity. I've sent about 8 vulnerabilities to this company.

@north That's AWESOME, seriously.

@north @corq is my alter ego, mostly linux and IT junk, but you might find the infosec.exchange community super helpful.

@rogue_corq @corq I follow a ton of people there. I've certainly learned a lot in the last year.

@north
Even if you're paranoid doesn't mean they're not after you.

@north run? more seriously: learn how things *work*, don't just use tools. have a home lab, run services, write code.