Seeking Advice: What should I do next to be a pentester

I’m currently doing a SOC internship (just started), and before this, I did a month-long cybersecurity internship focused on developing programs. I also have 3 months of experience as a Quality Assurance intern, which was a great intro to the corporate world. On top of that, I’m about to graduate with a BS in Information Technology (I did pretty well—got my Latin honors, kekw), but I know that only counts for so much when it comes to cybersecurity. My degree was mostly about developing programs, but I did have some courses in networking, databases, and basic cybersecurity.

I’ve got a final interview for a penetration tester role this week, but I’m not too optimistic—maybe a 20% chance of getting it. So, I’m keeping it real and thinking I might stick with SOC roles for a while before moving into pen testing. I’ve completed the Google Cybersecurity course and have the ISC2 CC exam this week. I also did a 3-day ethical hacking boot camp, which was kind of a waste since it was mostly just following steps, but it got me interested in pen testing.

I’ve dabbled in Linux (Kali and others) and tools like Metasploit, Nmap, Burp Suite, and ZAP, but I’m still learning. If I do get the pen test job, that’d be amazing—like hitting the jackpot! But if not, I’m wondering what certifications or training I should focus on next while I keep interning to work toward becoming a pentester. Should I dive into TryHackMe (Jr Pen Tester, Red Teaming), PentesterLab, Hack The Box, or aim for certs like CompTIA PenTest+, eJPT, PNPT, or go straight for OSCP? It’s a tough field to break into, so I’d appreciate some advice! submitted by /u/LateEquivalent8179
[link] [comments]


http://dlvr.it/TC8dD1