Here's how you can enter the field of Information Security without previous experience.

Two critical paths in understanding security: 1. Technical Path: • Master tech basics: CS and coding • Focus on attacker mindset: Use Hack The Box, learn bug bounties • After a year, specialize in 1-2 areas 2. Non-Technical Path: • Study attacker psychology • Learn social engineering (e.g., Kevin Mitnick's books) Key for both: Understand attacker methods and motivations. This is a good basis to launch from

Start your information security journey by mastering the essentials: computer networks, data transmission, and core security principles. This foundational knowledge equips you to secure any system you encounter. Then, leverage the wealth of free online resources and communities to learn about common threats and essential InfoSec concepts at your own pace. Finally, consider pursuing industry-recognized certifications like CompTIA Security+ or CISSP to validate your knowledge and commitment, boosting your resume and opening doors to new opportunities in information security.

There are literally millions of job openings in cybersecurity, and we can't fill them fast enough. At least that's what the experts have been saying for years. All the advice from others here is good. 50,000 foot view: Take an IQ test. Do you like to solve puzzles. Ask for some cyber puzzles to solve. Start with one thing, and then start learning all the things that thing touches. You'll need to learn more for sure, but this will help you focus your learning on one general use case area and give you something to specialize in for hiring opportunities. There are hundreds of specialties. Use your network to identify where you would like to start.

Build a home lab. Break it. Build it again. Learn to have fun in the process of learning from your mistakes. It will help you build your problem solving —more importantly IT intuition. (Asking the right questions) because you have seen and understood the theory that books try to teach you. I recommend TryHackMe!

To enter the field of Information Security without prior experience, start by enrolling in online courses and obtaining entry-level certifications such as CompTIA Security+ and CEH. Gain hands-on practice through online labs like TryHackMe and by setting up a home lab. Network by joining professional organizations, attending conferences, and participating in local meetups. Build a portfolio by documenting projects and blogging about cybersecurity topics. Seek internships and entry-level positions, and consider volunteering to gain practical experience. Develop strong communication skills and foundational IT knowledge in networking and system administration.

I started with Self-study and completed CompTIA Security+, Having a recognized certification and the eagerness to learn and apply the skills in real environment can help boost your confidence. I would also suggest to go for certificate that are relevant to your long term plan.

Hands-on practice is key, practice using TryHackMe or any Cloud platform available and create an environment that can allow you to understand the perspective of Offensive and Defensive role and differentiate between both that can help you understand which role in future would be suitable for you.

LinkedIn always helps to find professionals with similar interest, reach out by connecting and understand their perspective on InfoSec. Networking with professionals can provide mentorship and job leads.

Look for entry-level positions in IT support, system administration, or helpdesk roles. These positions often provide exposure to security practices and tools. Volunteer Work: Offer your skills to nonprofit organizations or community groups. Securing their systems or advising on best practices can build your portfolio and demonstrate your commitment.