learn / switching into cyber / sw1 · 1 of 1 · 7 min
The myths that keep career-changers out, what the work actually looks like day to day, and the honest truth about getting in.
## You don't need a hoodie
If your picture of cybersecurity comes from movies, it's probably someone typing very fast in a dark room while green text scrolls by. Real security work looks a lot more like an office job, because it mostly is one.
The myths that stop people before they start:
- "I need a computer science degree." Plenty of working security people don't have one. Degrees help with some employers and in government, but skills and proof of skills get you hired.
- "I have to be a genius coder." Many security roles involve little or no programming. Being able to read a script and write a small one helps a lot. Being a software engineer is not required.
- "It's all hacking." Most security jobs are defensive: watching for attacks, fixing weaknesses, writing policy and helping people. Breaking in for a living (penetration testing) is a small slice.
- "I'm too old to start." People switch in during their 30s, 40s and 50s. Your work history is an asset, not a gap. The next lesson is about exactly that.
Which of these is actually true about getting into security?
## What the work actually looks like
A typical week in an entry-level defensive role:
- Working a queue of alerts or tickets: is this login, file or email actually bad?
- Investigating: pulling logs, checking a suspicious link, asking a user what happened
- Writing it up: clear notes so the next shift or your manager understands what you found
- Fixing and following up: resetting an account, blocking an address, chasing a team to patch
- Learning: new tools and new attacks show up constantly, so there's always something to study
You'll spend more time in a ticketing system and a search tool than in a terminal full of green text.
## The honest part
Nobody should sell you a fantasy, so here it is:
- Entry level is competitive. Lots of people want in, and many "entry-level" postings ask for experience. That's a reason to plan, not a reason to quit.
- Most people come in through a side door. Usually that's IT support, or doing security work inside the industry they're already in. More on that in Where People Actually Get In.
- It takes a while. Building the basics while working full time often takes a year or more. Steady weekly progress beats a burst of all-nighters.
- Be careful with expensive promises. Some bootcamps are great, and some charge thousands of dollars for material you can learn free. Be wary of any "guaranteed job" claim, and ask for real placement numbers before you pay.
You're comparing training programs. Which one is the biggest red flag?
## Signs you'll like it
You'll probably enjoy security if you:
- like figuring out why something broke, not just restarting it
- are fine saying "I don't know yet, let me find out"
- enjoy explaining things to people who aren't experts
- get a little satisfaction from following a checklist carefully
- like that the field keeps changing, so you'll never be done learning
None of those need a technical background. They're traits you probably already use at work.
## Write it down
Before the next lesson, write three sentences: what you do now, what part of it you're best at, and what you're hoping changes if you switch. You'll use it when we map your skills to security roles.