Hello everyone.
This a saga from a degree and in this lecture we will be talking about what are the career opportunities
in information security and with a special focus on penetration testing and bug hunting.
So I did have been a long time ago and I created a plan.
Let me just open that slide here that actually.
So this was my career plan.
How you can achieve a career and we'll be talking directly about the opportunities.
Well there are three major kind of career soared actually for me major kind of careers in information
security.
Let me go through them one by one.
Well the first career is of a ethical hacker.
OK.
What exactly ethical hacker do as they are given a challenge and you have to complete top challenge
for example the company will give you a website and then you have to break the security of that website.
Another option the company will look like they have a website and then they do some updates and before
making those updates live to people they will ask you to try to test the security.
That's the ethical hacker penetration testing.
Are you.
You just work on the applications.
Right.
The company is hiring you.
You are working as a like salaried person like an employee.
That's a career in ethical hacking.
Right.
The easiest pathway to go with a ethical hacking career is to do certifications like CBH than CSA than
LPT and you will land 100 k job very easily.
And further you should do OCP and OSCE and with a special focus on bug hunting you should do O S W E
which is offensive securities very application expert.
Right.
So just focus on w w e ask.
Well there is another security domain which is information security and they generally have positions
like CISO CIO or CTO CRM or things like that.
What exactly you do as an information security professional is that you are responsible for the security
of your whole company.
Well if you talk specifically about the web application the mean then you can be the divisional head
like the CEO of the verb application division.
Right.
That's the information security work.
Now here I would recommend you to do security plus the ISIS B or I will recommend you to do C CSP an
SSP.
They will help you to generate cloud security experience that will be a plus in web application security.
Then you can specialize further.
Right.
And that can even lead you to a career of one hundred fifty thousand dollars plus a year.
Right.
If you have the bug hunter but Hunter is a very very famous here and in bug hunting you do not work
for any company.
You are not an employee you are an entrepreneur.
Right.
You're a professional.
What you do is you go on the Web site you test them yourself without any money.
And if you find any vulnerability in that company pay you a bounty they pay you a price that's a bug
hunter not for bug hunter I spent now for bug hunter I recommend you to learn some languages like SD
MLP HP javascript and master a tool called burps.
I will show you how to use burp sweet.
I'll help you out in this whole thing and the whole course.
Ryan Lundy fundamentals of security and you should be one of the best bug hunters.
And actually I was just looking at my LinkedIn and I just saw that one of my connections here just posted
up a post.
So he do bug hunting at hacker 1.
Now he mentions himself as a penetration tester at hacker one but he's a bug hunter and he was like
tying up with the hurt just fall and they got a one lividity in Pip out they reported it.
And finally people gave them thirty thousand dollars for just one wonder immunity.
Now how much time it took to find it.
Less than a week.
So that's one of the best years you can ever have.
There is one last card here which is the consultant.
This is I personally do you know when you give advice to other companies when you give advice to other
professionals people like CEO of a company.
It's a mixture of everything you need to do everything you need to learn everything.
And companies will easily pay you eighty dollars to three hundred dollars for one hour of consultancy.
I just really come in here to get SS CPR security plus as a beginner certification go with CSC ISIS
be OCP and finally I.D. Ireland BNP is my recommendation.
So this is where people willing to work less should go.
Right.
And when you talk about weapon testing weapon testing consultants are the ones who are paid the highest.
Always remember there is a certification from offensive securities which is O S W E.
That's the top certification in this field at the time.
Offensive Security vet expert now in the whole course I will be covering most of the syllabus from the
certification.
And I'll keep the series going till then.
Have a great day.