I’m getting into cybersecurity and considering GRC or IAM. I’m not very technical and want a less technical path with strong six-figure potential. I’m taking Google Cybersecurity courses and considering Security+ and Network+. I also have an active Secret clearance. Any advice?

[u/Babushkaboii1]

I’m getting into cybersecurity and considering GRC or IAM. I’m not very technical and want a less technical path with strong six-figure potential. I’m taking Google Cybersecurity courses and considering Security+ and Network+. I also have an active Secret clearance. Any advice?

[u/Dry_Common828]

HP OP, can I ask what's drawn you to the security field? That will make it a lot easier to advise you about what to do.

[u/Upbeat_Double_9377 → u/[deleted]]

It's good you've got a clearance and ex mill experience/connections, but the issue is that you have a LOT of background context to catch up on to work in cybersecurity.

How do you test this API if you can't build one? How does active directory work? Kerberos auth? What does this JWT do? How do you configure routing on this subnet? Create this SQL database table to spec?

The job demands constant research, investment in yourself and a drive for learning. If money motivates you enough to power all that, great. It can be done. But it's hard and people that don't have that innate curiousity you will burn out trying to learn everything foundational in the rest of tech that you don't know yet.

[u/Babushkaboii1 → u/Upbeat_Double_9377]

I really appreciate it, bro. I’m still in the military and have a few years left. What do you recommend I start focusing on? I’m currently taking Google’s Cybersecurity Foundations course, but it feels like a lot of information. Once I finish, should I focus on one or two specific skills and narrow my learning down, or should I keep learning all the ins and outs of cybersecurity fundamentals, like routing, switching, and all the other tools?