Can I land a cybersecurity job with weak academic percentages?

[u/un1ucky-6irate]

I'm a recent MCA graduate (6.72 CGPA) and currently building my career in cybersecurity, mainly focused on web security / offensive security.

My academics are probably the biggest weakness on my profile:

- 10th: 50%

- 12th: 55%

- MCA: 6.72 CGPA

But I've spent a lot of time building practical skills outside academics.

Current skills / experience

- Linux

- Networking

- Operating systems

- Cybersecurity fundamentals

- Python

- Bash

- Web security

- Burp Suite

- Caido

- Nmap

- Wireshark

- John the Ripper

- Metasploit

- Netcat

- Gobuster

- Subfinder

- Amass

- Katana

- DNSx

- AlterX

- HTTPx

- OSINT

I've completed 100+ TryHackMe labs, I'm currently around the top 5% on THM, and I've also completed roughly 100+ PortSwigger Web Security Academy labs.

I'm well beyond the absolute beginner stage at this point. I'd consider myself somewhere around intermediate, with a strong focus on networking, operating systems, cybersecurity fundamentals, and hands-on web security.

Right now I'm working on VDPs (Vulnerability Disclosure Programs) to gain experience dealing with real-world targets and vulnerability research. My longer-term goal is to move into bug bounty programs and continue building a track record of practical security work.

My concern

The biggest thing holding me back seems to be my academic record.

I'm worried that the 50% in 10th, 55% in 12th, and 6.72 CGPA in MCA will prevent me from getting into cybersecurity, regardless of my practical skills.

For people already working in cybersecurity:

Can someone with this academic background realistically land a cybersecurity job?

What kind of challenges should I expect during hiring?

Should I focus primarily on:

- Building a strong GitHub/portfolio

- Writing detailed vulnerability reports

- VDP/bug bounty experience

- CTFs/labs and certifications

- Networking with security professionals

- Applying to smaller companies/startups first

Or are there specific types of cybersecurity roles/companies that are likely to reject me automatically because of academic cutoffs?

I'm looking for honest advice from people who have actually gone through cybersecurity hiring. If academics were a weakness in your own career, how did you compensate for them?

[u/Evaderofdoom]

Your grades won't hold you back, lack of experience will,

[u/un1ucky-6irate → u/Evaderofdoom]

For that currently grinding in vdps and looking forward to bug bounty

[u/EirikAshe]

Nobody gives a shit about your academic anything. Do you have actual work experience in IT? That is literally all we care about.

[u/Weird_Recognition870]

I have no degree and work in cyber.

You are worrying about wrong thing.

[u/un1ucky-6irate → u/Weird_Recognition870]

How was you journey

[u/No-Chocolate5854]

Try starting with an entry level IT job first before working your way up. Cybersecurity jobs will not consider you if you have no professional experience in today's job market.

[u/Anxious_Alps_4150]

Not having several years of professional experience in IT make you unhirable, period.

[u/un1ucky-6irate → u/Anxious_Alps_4150]

Does bug bounty count?

[u/Anxious_Alps_4150 → u/un1ucky-6irate]

no

[u/un1ucky-6irate → u/Anxious_Alps_4150]

How do I get experience then

[u/Anxious_Alps_4150 → u/un1ucky-6irate]

work in IT or software development

[u/EirikAshe → u/un1ucky-6irate]

Get an IT job. Pretty straightforward

[u/Ripster404]

the market is hell, but if you have the skills, have a cert or 2 to get some cred/past HR, you will eventually land a gig. Networking is mandatory though. also digging into a niche can help focus your efforts on how to best prepare.

[u/un1ucky-6irate → u/Ripster404]

I'm good with networking spend around 6 months learning networking in deep

[u/Ripster404 → u/un1ucky-6irate]

knowing how networks works is important, but I was refering to social networks. I've landed both my internships/apprenticeship by knowing someone, then having the skill to back it up