Latest / The Career Change Podcast with Fexingo: Switching Fields, Bootcamps, and Reskilling / How Bootcamp Grads Can Break Into Cybersecurity
Transcript
- Lucas: So we get a lot of questions from bootcamp graduates who say, 'I finished the program, I built a portfolio, but every entry-level job I see wants two years of experience.' And lately, a surprising number of those people are asking about one specific field: cybersecurity. Luna: Yeah, I've noticed that too. It's like everyone suddenly realizes there are six hundred thousand unfilled cybersecurity roles in the US alone, and they think, 'Maybe I can get one of those.' Lucas: Exactly. And the good news is, bootcamp grads actually have a decent head start if they know how to position themselves. But a lot of them assume they need a computer science degree or years of sysadmin experience, and that's just not true for every role. Luna: Right, it's not like you're applying to be a cryptographer at the NSA. There are plenty of roles where the main requirement is curiosity and a willingness to learn. And bootcamps already cultivate that mindset. Lucas: Absolutely. And before we go deeper, I want to mention something briefly. If you've found this show helpful for thinking through a career move or a decision, listener support is what keeps us ad-free. If you'd like to chip in, you can find us at buy me a coffee dot com slash fexingo. No pressure at all, but every bit helps us keep the conversations going. Luna: Yeah, it really does. And we appreciate everyone who listens, whether you support financially or not. Now, back to cybersecurity — Lucas, what's the first thing a bootcamp grad should know about breaking in? Lucas: The first thing is to understand that cybersecurity is not a single career. It's a whole ecosystem. You've got security operations, incident response, penetration testing, governance and compliance, security architecture, and more. And different roles have different barriers to entry. Luna: So which ones are most accessible for someone who just finished a bootcamp? Lucas: I'd say the most common entry point is security analyst, sometimes called a SOC analyst — that's security operations center. These roles involve monitoring alerts, triaging incidents, and doing basic forensics. They typically don't require deep networking knowledge upfront, but they do require scripting skills, which bootcamp grads have. Luna: And scripting is key because a lot of the job is automating repetitive tasks — writing Python scripts to parse logs, that kind of thing. Lucas: Exactly. A bootcamp grad who knows Python or JavaScript is already ahead of someone who only has theory. The other role that's surprisingly open is penetration testing, but that usually requires a bit more experience or a strong portfolio of bug bounty findings. Luna: I've heard that certifications matter a lot in cybersecurity compared to other tech fields. Is that true? Lucas: Hugely. In web development, a bootcamp certificate plus a strong portfolio can be enough. In cybersecurity, employers often want to see a recognized certification like CompTIA Security+ as a baseline. It's not that expensive — a few hundred dollars — and it covers fundamental topics like network security, cryptography, and risk management. Luna: So the path could be: finish your bootcamp, then spend a couple months studying for Security+, then apply for SOC analyst roles. Lucas: That's exactly one path. And there's a great example I came across recently. A guy named Marcus — he was a graphic designer in his late twenties, did a three-month web development bootcamp, built a few full-stack apps, but he couldn't land a junior dev role. He decided to pivot into security. Luna: What did he do differently? Lucas: He used his bootcamp projects as a starting point. Instead of just showing a to-do app, he added a security twist — he wrote a blog post about how he found and fixed a cross-site scripting vulnerability in his own code. Then he studied for Security+ for about six weeks, passed, and started applying for security analyst roles. He got an offer at $85,000 within three months. Luna: That's impressive. And the key was reframing his existing work to show security awareness. He didn't start from zero. Lucas: Exactly. And that's the mindset shift: you're not switching to a completely different field. You're applying your existing skills to a new context. Bootcamp grads already understand HTTP, APIs, databases, authentication — those are all security-relevant concepts. Luna: What about hands-on practice? Because security is very practical. Lucas: Absolutely. There are platforms like TryHackMe and Hack The Box that let you simulate real attacks in a safe environment. They have learning paths specifically for beginners. And they're cheap — TryHackMe's premium tier is like ten bucks a month. Completing a few rooms can give you concrete examples to discuss in interviews. Luna: And you can add those to your portfolio. 'I hacked into a simulated server, found a flag, and wrote a report.' That's more impressive than another CRUD app. Lucas: Right. And employers love seeing that you've done the work. Another thing: many community colleges offer cybersecurity certificates that are very affordable and stack on top of a bootcamp. For example, a certificate in cybersecurity fundamentals from a local college can complement your bootcamp credential. Luna: So you're saying the bootcamp is not wasted — it's actually a foundation. You just need to add a layer of security-specific knowledge and certification. Lucas: Exactly. And the timing is good. A lot of companies are expanding their security teams because of breaches and regulatory pressure. The demand for entry-level talent is real. According to the ISC2, the cybersecurity workforce needs to grow by about 4 million people globally to meet demand. Luna: That's a huge gap. And bootcamp grads are well-positioned because they're already used to learning quickly and adapting. Lucas: One more thing: networking. Security conferences, even virtual ones, are great for meeting people. There's a conference called BSides that has local chapters everywhere, and tickets are often under fifty dollars. Going there and talking to practitioners can lead to job leads. Luna: And I imagine your non-traditional background can be an asset. You see things differently than someone who's been in IT for ten years. Lucas: That's a great point. Diversity of thought is valuable in security because attackers think differently. A former graphic designer might notice visual anomalies in a phishing email that a sysadmin would overlook. So don't hide your past — use it. Luna: Alright, so if someone listening is a bootcamp grad and wants to move into cybersecurity, what's one concrete step they can take this week? Lucas: I'd say create a free account on TryHackMe and complete the 'Pre-Security' learning path. It takes about ten hours total. After that, you'll have a solid understanding of the basics and a certificate you can share on LinkedIn. Then start researching Security+ study materials. Luna: And if they already have that? What's next? Lucas: Next, look at job descriptions for security analyst roles at companies that interest you. Note the specific tools and certifications they ask for. Many mention Splunk or Wireshark or a certification like CySA+. You can start learning those on the job or through free trials. And start applying, even if you don't meet every requirement. Luna: Because the cybersecurity field is desperate enough that they'll train the right person. Lucas: In many cases, yes. Especially in smaller companies or managed security service providers — they're used to hiring people with potential and teaching them on the job. Luna: So the bootcamp to cybersecurity pipeline is real. It just requires a little extra effort to bridge the gap. Lucas: Exactly. And that bridge is shorter than most people think. With a couple of months of focused study and a certification, a bootcamp grad can become a strong candidate. Luna: Great advice. Thanks, Lucas. And for our listeners, we'll put links to TryHackMe and CompTIA Security+ resources in the show notes. Lucas: Next time, we'll talk about how bootcamp grads can navigate the interview process for these roles — because cybersecurity interviews are different from software engineering interviews. Luna: Looking forward to it. Until then, keep learning.