reality of working in cyber security blue team

Поделиться
HTML-код
  • Опубликовано: 4 окт 2024
  • НаукаНаука

Комментарии • 29

  • @vincii22
    @vincii22 2 месяца назад +1

    Thank you for sharing your experience. Great video btw. New sub here. Please keep these videos going.

    • @FatherPhi
      @FatherPhi  2 месяца назад

      Thanks for watching and I’m glad to have you here Vincii!

  • @MaxJM711
    @MaxJM711 2 месяца назад +1

    Hey man! I'm in the journey of getting my cybersec mention once I graduate uni, and something I've always wondered is how "flexible" the range of languages we can use in production really is. I know devs that use ASM to Ruby, while I myself have the most interested in Rust, Go, C and Zig (definitely a pattern there lol), which of these would you say would be the most useful from a general cybersec PoV? Would love to get your insight on this!

    • @FatherPhi
      @FatherPhi  2 месяца назад +1

      Tbh, I think shell scripts and python would be the most useful in the greatest number of jobs.
      Reasons:
      Company tech stacks may differ, but the need for basic scripts for common tasks is super valuable and a basic requirement. Shell scripts are great for the super simple stuff, I’d use Python if it gets a bit more complex.
      Decent Python mastery can demonstrate that you have the ability to do object oriented programming.
      These will give you transferable knowledge to use in whatever language you then need to pick up.

    • @MaxJM711
      @MaxJM711 2 месяца назад +1

      @@FatherPhi Thanks a million! Should'e clarified I know some Bash and Python too, as well as Java and C#, it's just that I don't prefer to use Python much in most projects unless there's ML/AI involved lol
      Thanks a million for the answer bro, really appreciate it!

    • @FatherPhi
      @FatherPhi  2 месяца назад +1

      Ah, well of the ones you listed I’ve only used Go, so that would be my answer 😂 I see a lot of other big companies using Go, as well. I’d personally stick with python until forced to use another language tho. I even interviewed in JS LOLL

    • @MaxJM711
      @MaxJM711 2 месяца назад +1

      @@FatherPhi LMAO JS is actually quite nuts to see here, but not too far fetched considering some attacks may be done using JS (or even PHP for that matter) for injections in a website haha, seems like I'm gonna stick with Python and Go as my main weapons then, much appreciated bro!

  • @tarunfatehpur5116
    @tarunfatehpur5116 2 месяца назад +2

    Can you please drop the roadmap for Cybersecurity? And it's worth it right!!??

    • @FatherPhi
      @FatherPhi  2 месяца назад +1

      I like this idea! And the worth it part is subjective haha, if you’re unspecialized I would say it’s definitely worth it since it’s easier to stand out and if you’re interested in the security domain, that sounds like a good fit to me 🙂

  • @FatherPhi
    @FatherPhi  3 месяца назад +3

    Questions? Drop ‘em below 👇

    • @Hongriki
      @Hongriki 2 месяца назад +1

      Thank you for sharing your story! Do you have any certs or degree when starting? How did you continue learning? Were you networking and building projects on the side?

    • @FatherPhi
      @FatherPhi  2 месяца назад +1

      @Hongriki I did complete a year long, paid, software development apprenticeship with IBM after dropping out of college for the final time. After that I built up some small projects for my first resume, then I built up some career inertia by landing full time roles. I no longer even advertise those pet projects on my resume. Learning basically happened on the job after landing my first role 😁 it was a pay cut tho
      I do plan on getting the sec+ soon and I want to make some videos to help others learn the material for that cert, interested?

  • @gabrielbeckett5240
    @gabrielbeckett5240 2 месяца назад +1

    Hey man, great video. I was wondering what coding languages do you use for your automation tasks? Is it mainly Python, C++, and Bash/Powershell scripts?

    • @FatherPhi
      @FatherPhi  2 месяца назад +1

      Our services are written in golang
      Scripting is bash for super simple stuff and Python for more complex scripts.
      Thanks for watching!

  • @zhytedark2859
    @zhytedark2859 2 месяца назад

    Hey, I'm starting my last year of study and I'm going into cyber secu. Your video drop right on time thank you really !
    I have a question tho, do you think it would be a very different job if you worked in a pure player cyber security company that has some different client ? Better, worst ?
    My point is that it seems pretty repetitive to work on the security of the same company, only analyze some new tools and so on

    • @FatherPhi
      @FatherPhi  2 месяца назад

      I’m pretty sure I would hate to work in purely cyber security… I direct a few analysts and I honestly appreciate their work so much because it allows me to work on more interesting design and engineering work.
      For me engineering for blue team is way more interesting than purely analyzing vulnerabilities and doing operations work.
      That may have been a tangent tho lol
      If I worked for the engineering side of a pure cyber company like rapid7 I think that would be fine and very similar to what I do now since you’d be designing and developing features. Analysts roles however or help desk roles would be pretty hellish from my perspective and for my personality.

    • @zhytedark2859
      @zhytedark2859 2 месяца назад +1

      @@FatherPhi oh interesting I see. If I understand correctly, you prefer your current position because you have more the possibility to really develop something and build something instead of simply analyze vuln
      I never though of it like that

    • @FatherPhi
      @FatherPhi  2 месяца назад

      @zhytedark2859 - yes, in my current position my main role is designing and developing a solution that enables the analysts but I also have the responsibility of driving the analysts work processes and end up being their SME when they have questions because I have in depth knowledge into how they get their data.

  • @ripsky7586
    @ripsky7586 2 месяца назад +1

    Should I drop out of cs? I was thinking healthcare since low competition, unlikely to be replaced by ai, and not outsourcable

    • @FatherPhi
      @FatherPhi  2 месяца назад

      If you want to be on your feet all day and enjoy dealing with people nonstop then perhaps healthcare is a good option. Also, I personally think low level health care professionals will be very quickly replaced. Just the other day my urgent care nurse literally took a picture to diagnose my daughter with AI. Yeah, sounds like a race to the bottom to me…
      I’m a mid-level eng and ai is a nice resource sometimes but it is no where near spitting out ready to use code at enterprise level for complex tasks beyond basic scripting and I don’t feel threatened just yet.
      The outsourcing comment is totally valid tho, even tho I have my own beliefs on why outsourcing sucks companies will do as they please anyway.
      If your vision of a cs career is to just program all day and you don’t want to leverage coding in other areas of your life, like business/startup stuff, then healthcare may be a better option regardless, even tho, IMO both are equally soul sucking from that worldview.
      If you’re a talented engineer or surgeon, that will be valuable for a least another decade imo 🙂

    • @ripsky7586
      @ripsky7586 2 месяца назад

      @@FatherPhi Do you know the name of the ai program used? Should a cs major focus on swe or ds to take advantage of opportunities in the ai market of the future?

    • @ripsky7586
      @ripsky7586 2 месяца назад

      @@FatherPhiAlso while ai can't replace devs today, I could see it replacing many in the future. Which would only make the job market much worse than it already is. I mean you could simply give a private devin ai your codebase, then it would understand how to properly debug and create new features

    • @FatherPhi
      @FatherPhi  2 месяца назад +1

      I’ve seen Devin and it is cherry picked garbage imo. SWE are valuable for problem solving and part of the job is figuring out what problems there are to solve in the first place. I’d love having a Devin to do the grunt for me tbh, but that is only 40% of my day, as you can see from my video :)
      If I were in school I’d do what interests me most, so probably security or neural networks seem like great places to be for me.
      No idea what the healthcare app was, but it made the nurse seem totally irrelevant and it could’ve been a kiosk visit.

    • @ripsky7586
      @ripsky7586 2 месяца назад

      @@FatherPhi Any tips on how to get swe internships in creating security software?