Here's how you can launch a career in the field of Information Security without a degree.

There are certainly companies that will look to hire those without a degree, we are one of them. The degree is a decent indicator of potential, depending on the degree and which institution it came from. Hands on research that has been written up into a white paper that might accompany a CV is a good way to get the attention of companies that look outside of the "box". You may have to be prepared to bypass those recruiters that only look to tick the boxes on their spreadsheets as well, and go directly to the companies. If they are hiring, or open to future talent, they will pay attention. Hope that helps.

Launching a career without degree is possible, not all the role requires Degree but the degree will be a passing by from Recruiters sometimes. But I will advice you to work on yourself by building skills, collaborate in couples of projects. Take a look at Job requirements and learn all that's meant to do, immerse yourself by doing hands on projects, enroll in Internship either paid or free. The experience will help you alot and don't stop to learn keep the track until you secure a role.

For those who want a more technical pathway, participating in online cybersecurity challenges and competitions like capture-the-flag can be helpful. I also find some channels on YouTube can be very educational...and free! Joining these competitions can help build a professional network. Some useful websites include Hack The Box, TryHackMe and OverTheWire (WarGames).

There are many trades that don’t require a degree and information security is one of them. You can enter the firm’s by building out your skill set, I.e. learning new technologies or software, studying different frameworks and standards, and keeping abreast of current trends within the industry. All that being said, management positions within the field tend to require a formal education, generally at the Masters level.

Hands-on experience is undeniably vital in the field of Information Security. Theoretical knowledge provides a foundation, but the dynamic and practical nature of security threats demands real-world skills that can only be honed through direct practice. Setting up a home lab is an excellent starting point for anyone aspiring to enter or advance in this field. Utilizing virtual machines allows one to create and manipulate various network configurations, simulate attacks, and practice defensive techniques in a controlled environment. This kind of practical engagement is invaluable, as it not only solidifies theoretical concepts but also exposes learners to the complexities and nuances of actual security scenarios.

It's not just a matter of gaining skills, but to be able to demonstrate what skills you have. Without a degree, you fall back on certifications but also on being a content creator: blogging, writing software tools, or doing YouTube tutorials on a specific technology that you have mastered. This shows potential employers that you know enough and care enough about the topic to document it and to help others learn it.

In my experience, these activities help you understand real-world scenarios better than any textbook could. During one CTF competition, we faced challenges that mirrored actual cybersecurity incidents; this exposure was crucial for preparing us for real job tasks.

Volunteer for Security Projects in Your Company or Department Offer to shadow a project to gain firsthand experience in risk identification, assessment, and control implementation. This demonstrates your initiative and passion for the field.

Hands-on experience is vital in Information Security. Set up a home lab with virtual machines to practice skills, simulate network configurations, and attacks. Participate in Capture The Flag (CTF) competitions and contribute to open-source security projects to gain practical knowledge and showcase your expertise to employers.

Networking is essential in Information Security. Attend industry conferences, join forums, and participate in local InfoSec groups. Engage with professionals on platforms like LinkedIn by sharing experiences, asking questions, and contributing to discussions. This can lead to valuable connections and job opportunities.

Networking is very important in the field of Cybersecurity. One way to do this is to reach out on LinkedIn to 10 people through mutual connections. From here, set up some time to informally discuss their experience and how they got in their roles and take notes on what you can apply from their experience.

Networking is indeed an indispensable tool in any career, particularly in Information Security (InfoSec), where the landscape is constantly evolving, and community involvement plays a crucial role. Engaging with the InfoSec community through various channels not only keeps professionals updated with the latest trends, threats, and technologies but also opens up numerous opportunities for personal and professional growth.

Community and cyber go hand and hand. We all learn from one another, if you are inept in networking, you will find it nearly impossible to make a genuine difference in the field.

What worked for me was engaging with professionals on social media platforms like LinkedIn. Sharing articles and commenting on posts concerning cybersecurity helped me to establish contacts that would later provide job leads and mentorship.

As someone who learned of and studied for the CISSP exam under the direction of Michael Corby (one of the founders of ISC2) I can hardly complain about the value of certifications like the CISSP. I would generally recommend security certifications (of any kind) that are vendor-neutral and that focus on the main goals of information security (confidentiality, integrity, availability). Technologies are going to change over the years, but the goals of information security do not. Certifications that emphasize these competencies are the gold standard, IMHO.

Certifications are important, but avoid those that are purely theoretical. For penetration testing, consider practical certifications like eJPT, PJPT, CEH (Practical), and BSCP.

Certifications are good, but do not rely completely on certifications. It is your skills which matters. Certification will be advantageous in shortlisting your profile from the bunch. Ultimately, its your skills to showcase in interviews. Go with basic certifications like Comptia Sec+, CEH Practical, eJPT, CISSP and many more. Just get 1 to highlight on your resume. Get into the industry, you will find out your path.

As a cybersecurity instructor, I firmly believe that certifications play a pivotal role in launching a successful career in Information Security, even without a traditional degree. Certifications validate your practical skills and knowledge in specific areas of cybersecurity. Unlike degrees, which may cover a broad range of topics, certifications often focus on practical, hands-on training that directly applies to real-world scenarios. This practical validation is highly valued by employers who seek candidates capable of immediately contributing to their cybersecurity efforts. I feel, certifications demonstrate your commitment to lifelong learning and professional development.

Thanks for listing this option, it is considered the most important part for non-degree warriors , as it gives a high level of confidence to the candidate and also for the employer , choosing the right place and right exam certificate is also important as every certificate has different weight than other , for entry level engineers INE provide multiple certificates like ECIR , EWPT ،EMAPT . For seniors and higher ICS square and ISACA provide another set of certificates like CISSP and CISM All previous certificates compensate for the absence of the academic degree or may exceed their effectiveness in covering every role in cyber security domains with real examples in our real life

In my experience, following InfoSec news outlets keeps you informed about the latest threats and developments. I regularly read articles from sources like Krebs on Security; staying updated helped me anticipate potential issues before they became critical.

The magic about information security is that its ever moving and keeps us engaged. What a career! There are so many modes to engage via; passive and interactive. Curate your mix of; -Blogs and newsletters -Podcast and vodcasts -Community engagement -Think tanks and discussion groups -Messaging and groups The list is endless. It is a gift to be able to learn and have the opportunity to rise in an industry that is in the main supportive of merit and graft. Embrace each day and apply what you learn. I do it daily without fail. Nearly 30 years later and I would only now stay that I feel like I am starting to master the challenge. But the learning never ceases.

A Segurança da Informação é dinâmica, exigindo atualização constante. Siga notícias, blogs e podcasts da InfoSec para estar por dentro das últimas tendências. A aprendizagem contínua é essencial para manter a expertise e eficácia neste campo em evolução.

Become an Information Security News Junkie: Follow reputable news outlets, blogs, and podcasts by industry leaders. These resources offer insights into the latest threats, vulnerabilities, and defensive strategies. Embrace Continuous Learning: Don't let your knowledge stagnate. Participate in online courses, attend conferences, and pursue certifications to broaden your skillset and stay current with the latest best practices. Active Learning Through Practice: Don't just consume information, apply it! Set up a home lab to simulate attacks and test defensive measures in a controlled environment. Participate in bug bounty programs to actively hunt vulnerabilities and hone your skills in real-world scenarios.

I agree that staying current through continuous learning is essential for information security professionals to remain effective and relevant in this dynamic industry. Consistent effort to expand one's knowledge and skills is key to navigating the ever-changing threat landscape and technological advancements.

In my experience, freelance projects allow you to showcase your abilities effectively. After completing several successful projects, I compiled them into a portfolio that impressed potential employers during interviews.

Projetos freelance e estágios oferecem experiência prática crucial em Segurança da Informação. São oportunidades para aplicar conhecimentos, demonstrar habilidades e ganhar experiência necessária para futuras posições em tempo integral.

I had someone reach out to me recently about how they apply their certifications and it was an excellent question. Information security has so much demand and need for help that your new cert puts you in a super position. But we all need experience and application of our newly learned material right? Volunteering with colleagues and other orgs (where you have the permission or no restrictions) is an ideal way of gaining this experience. Even now as a company we will invest with companies on some bleeding edge project to push our knowledge. Why should we not do the same as people? You may be surprised how many people will be grateful for your freelance / collaborative help and thus in return you will gain applied, practical experience.

Other aspects can also be to join professional organizations and to engage with groups like (ISC)², ISACA, or local cybersecurity meetups. Try to find a mentor and seek guidance from experienced professionals in the field.

Find new technology and ask to be trained in it! This way you can add value to the market with different types of knowledge! Join organizations like WICYS and ISACA.

I've always thought of information security as a "superset" field, because it often layers on top of other fields of study. For example, to be effective at network security, you have to understand computer networking first. To be effective at database security, you have to understand databases first. And so on. Yes, you could pursue degrees in information security (which didn't exist when I went to college) and of course, certifications are an option as well. But I would just as soon apply an information security mindset (confidentiality, integrity, availability) to your existing areas of expertise and go from there.

Remember, a career in Information Security without a degree requires dedication, hard work, and a willingness to continuously learn and adapt. By following these steps, you can build a successful career in this exciting and challenging field! The field of Information Security is constantly evolving. Stay up-to-date with, Industry blogs and news outlets (e.g., Dark Reading, Cybersecurity News), Online courses and training programs, Webinars and conferences, Social media groups and forums, Participating in bug bounty programs (e.g., HackerOne, Bugcrowd).

Focus on building practical skills and gaining hands-on experience. Start by learning the fundamentals of networking, operating systems, and cybersecurity principles. Online resources like Cybrary, Udemy, Google, IBM, and Coursera offer affordable courses and certifications. Participate in bug bounty programs, NCL, (CTF) challenges, and hackathons to develop your skills in a real-world setting. Contribute to open-source security tools to demonstrate your capabilities. Network with professionals in the field through online forums like Discords, Meetup, (ISC)², and ISACA, attend webinars and join local security meetups. Finally, consider obtaining industry-recognized certifications like CompTIA or OSCP to increase your job prospects.