How to Start in Cybersecurity Without Technical Knowledge

There is a rising need for employees with cybersecurity training to assist combat this growing threat as enterprises and governments throughout the world become more susceptible to cyber threats and continue to be hacked. With a wide range of expertise to select from, cybersecurity is a fast-paced, highly dynamic industry that gives you the freedom to work practically anywhere in the globe. It also offers incredible perks and the chance to actually change the world. Have you thought about working in cybersecurity but weren't sure if your background would be sufficient for success? Don't undersell yourself!

But Don’t I Need a Cybersecurity or Computer Science Degree?

Absolutely not. Many of the best security professionals have non-technical degrees such as English, pre-Med, or Psychology majors or even backgrounds in fields such as auto-mechanics, graphic designers, or stay-at-home moms. Just like the famous saying, “Anyone can cook” from the Pixar movie, Ratatouille, so too can anyone get started in cybersecurity. Speaking as a history major who rode main battle tanks for a living, you can have a successful career in cybersecurity, even if you bring a non-technical background to the table. In many cases, having a non-technical background can actually be an advantage in cybersecurity as you bring unique experiences and perspectives that we need.

Many people think cybersecurity is all about hacking into or breaking things, but cybersecurity is really learning about and helping protect how both technology and people work. The key to your success is not a technical background, but your willingness and desire to learn how technology works and to never stop playing. In addition, there are a growing number of fields in cybersecurity that do not focus on solving technical problems, but instead on human problems. These require softer skills, such as policy development, security awareness, and training, governance, security communications, privacy or cyber law, and ethics.

Getting Started

In many ways, cybersecurity is similar to engineering or healthcare. There are so many different paths you can specialize in, from mobile device forensics and incident response to penetration testing, endpoint security, secure software development or security awareness. 

Don’t worry about what path you should take at first. Give yourself time to play with and understand the different technologies and fields. Over time, your interests will guide your path. (Interject Yoda's voice here.) To get started, I’d recommend you first get an overview of the basics.

• Coding: Explore the basics of coding. Coding is what software programmers (often called developers) do. They create the operating systems and applications that run your computers, mobile devices, and web applications that power the Internet. Perhaps start first with simpler languages such as Python, Hypertext Markup Language (HTML), or Javascript. If you discover that you enjoy coding you can then move on to more advanced coding languages and frameworks. Not sure where to start? Consider online training or grab any beginner’s coding book. All you need is a computer and some guidance and you can start coding right away.
• Systems: Learn the basics of administrating the operating systems that run the computers (called servers) that support and run organizations and the Internet. The two most common operating systems are Linux and Windows. If the resources are available, start with Linux first and learn how to administer Linux using the Command Line Interface (CLI), as opposed to the Graphical User Interface (GUI). Learning how to administer a Linux system from the command line, to include scripting, is an extremely powerful skill that will help you no matter what path you take. It's also easier to change from Linux to Windows than the other way around
• Applications: Applications are programs that run on servers, these are what provide the services organizations need to function. For example, applications like file servers, DNS servers, mail servers or web servers. Your job is to see if you can install, set up, and configure such applications to function properly.
• Networking: A network is a group of computers or devices that communicate with each other. Learning how a network works is an invaluable skill, to include configuring them to interconnect with each other and the Internet. Other skills include capturing and analyzing network traffic. You don’t realize it, but you most likely already have a network at home. Think of all the devices connected to your home Wi-Fi network.

Not sure where to start learning with any of the four areas listed? Start by searching on Google or YouTube. There is no single site or resource where you can learn everything you need, so over time you will use a variety of different resources. Start with the basics and grow over time (it takes years to really learn all this stuff). In addition, the skills you develop now in searching and learning about these topics are critical not only for starting your career but a key part of your entire career.

Build a Lab / Hands-on Learning Environment

One of the best ways to learn all of the above is to set up your own lab at home. A lab is a collection of computers and applications that you can experiment and learn, a safe environment to make mistakes. Make all the mistakes you want, then simply reboot or reinstall the systems and start all over again. It's relatively simple to create your own home lab, as you can create multiple virtual operating systems on the same physical computer at home, or setup up a lab online in the Cloud, such as using Amazon's AWS or Microsoft’s Azure. Not sure where to start? Once again do a quick search on Google or YouTube. There are numerous sites that can walk you through how to set up your lab properly. Don’t worry about the best way to start, just start.

Another option is to identify all the different devices on your home Wi-Fi network. Once you set up your lab or map your home network, start interacting with all the different computers or devices on your home network and learn everything you can. Have a browser on one computer connect to a web server you set up on another computer. Capture the network traffic from your house’s thermostat and decode what information you are actually sending to the Internet. The possibilities are endless. However, don't start hacking into and breaking things until you first understand the fundamentals of how these technologies work.

Learn from Others

The other key element toward launching your career in cybersecurity is to meet with and learn from others. Try attending a cybersecurity conference in your area. Just about every major city has several events a year. One of the best series of conferences is Bsides, which most likely has an event near you.

Can’t make it to a conference or looking for more interaction? Many cities have monthly cybersecurity community meet-ups. Once you attend one, your network and opportunities will flourish. You can also join online cybersecurity or technology communities, there are even communities that serve special demographics.

In addition, there are numerous cybersecurity professionals you can follow online and learn from. As you begin to learn what areas interest you the most, you will find experts in that field you can follow. 

In Summary

If you’ve been curious about getting started in cybersecurity, don’t let your education or background determine your career path or limit your options. No matter what your background is, you bring something unique and special to this field, which we desperately need. As long as you have passion, and desire to learn and help others, you’re on the right track. Never lose that desire to learn. Once you start to develop your skills and you begin to develop a network of people, trust me, the opportunities will come.

‍