early career ideas.md

• Familiarize yourself with common languages:
  • MITRE ATT&CK tactics (common language for attacker behaviors)
  • CWE (common language for vulnerabilities)
  • STRIDE (threat modeling)
  • NIST CSF functions (Identify, Protect, Detect, Respond, Recover)
• Check out cloud certs and free training
  • AWS - https://explore.skillbuilder.aws/learn
  • Azure - https://azure.microsoft.com/en-us/resources/training-and-certifications/#learning-paths
• Some of my resource guides
  • Start here for defensive security topics: https://gist.github.com/alexiasa/30f8af9c0b4107eb5e8b280bb883b19e
  • Start here for offsec topics: https://github.com/alexiasa/oscp-omnibus
    • Wordlists - https://github.com/danielmiessler/SecLists
    • Offensive payloads - https://github.com/swisskyrepo/PayloadsAllTheThings
    • Offensive range - https://www.hackthebox.com/
      • Linux skills range - https://overthewire.org/wargames/
• Career path resources
  • NICE Framework - https://niccs.cisa.gov/workforce-development/cyber-career-pathways-tool
• Start a blog to document your learning - github pages can simplify this