Experience versus education in starting your cyber career

A common question surrounding the next generation of cybersecurity professionals who are looking to get started in their career paths often centers around the question of experience versus education.

Many often are wondering the ideal path for landing a job and growing into a role that hopefully will give them the fulfillment they are seeking alongside a wage that allows them to live comfortably.

Should I go to college and get a degree? Community college or university?

Is the cost of school worth the investment? Should I start working entry-level jobs right away? Are certifications necessary for the job I want?

These questions and many more are common among those with limited experience in the field that are looking to break through and get started on their cyber adventure.

No doubt, many can feel overwhelmed if they have limited experience or connections to those currently in these roles to offer guidance.

For those reading this article hoping to get the magic answer, I apologize for what I am about to say.

There is no correct answer to these questions.

The path forward involves a quickly shifting and moving employment landscape that involves many different factors and decisions to make along the way.

These questions are usually impossible to answer without a wider understanding of the type of cybersecurity job someone would be interested in as well as the demand for these roles in the future.

Employers also are adapting how they seek ideal candidates and fulfill open positions. We are seeing an uptick in activity in offering apprenticeship and internship positions as a way to earn and learn on the job.

In addition, there has been increased activity in offering high school students these types of roles for those seeking to get started right away.

These opportunities, if presented, are great ways to test drive a career path and get a foot in the door to learn about different roles without sinking a lot of money into a formal education.

Obtaining certifications can be an indication about an individual's ability to learn.

It also can be an indication they are simply good at taking tests.

Certifications often are seen as a positive as long as it aligns with the role since it often shows some knowledge and proficiency to some degree.

It does not indicate how well the individual will work with others or align with the culture of the organization they support.

A part of what many employers are looking for in candidates revolves around the curiosity of an individual and what steps they have taken to learn about technology and how technology works.

There is no degree or certification needed to be given out for general curiosity.

There are no age restrictions on how quickly someone can pick up and apply the information.

There is no doubt that interview questions for those seeking candidates likely will center on curiosity and the ability to learn as you go.

In addition to certifications and curiosity, there are ways to gain experience without holding a job at a company. There are meet-up groups that offer free information and open communities to be a part of to learn at no cost.

There are different online communities and streaming services that talk about cybersecurity through the magic of the internet.

Cyber clubs exist in some high schools and many universities that offer exceptional experiences that you can’t simply do on your own.

Paul Nus is the director of technology at Folience, The Gazette’s parent company, and a board member of SecMidwest, a Cedar Rapids-based not-for-profit focused on cybersecurity education; SecMidwest.org.