Latest / The Career Change Podcast with Fexingo: Switching Fields, Bootcamps, and Reskilling / How Bootcamp Grads Can Break Into Cybersecurity
Transcript
- Lucas: So, we get a lot of questions from bootcamp grads who feel like they've missed the boat on the flashy AI or machine learning roles. But there's a field that's growing even faster, pays well, and, honestly, has a massive skills gap. I'm talking about cybersecurity. Luna: Cybersecurity? I keep seeing that it's in high demand. But isn't it a field for people with computer science degrees or years of IT experience? Lucas: That's the old thinking. The reality in 2026 is that cybersecurity is desperate for people who can think like problem-solvers, not just people who can configure firewalls. And bootcamp grads, especially those with some coding background, have a real edge. Let me give you a concrete example. Lucas: Last month, I interviewed a guy named Marcus for a story. He graduated from a sixteen-week web development bootcamp in 2024, couldn't find a front-end job, and decided to pivot. Nine months later, he's a security operations center analyst at a regional bank. He said his coding bootcamp was the reason he got the job. Luna: How? A security operations center analyst is monitoring alerts, right? Not exactly building web apps. Lucas: Right, but here's what Marcus realized. He knew how to read and write Python, even at a basic level. That's rare in entry-level cybersecurity. Most candidates come from IT help desk backgrounds, and they've never written a line of code. So when the hiring manager asked about automating a repetitive task, Marcus had a script he'd written to automate his own bootcamp grade calculations. Luna: That's clever. So coding is actually a differentiator in cybersecurity interviews? Lucas: Huge. But it's not just about coding. It's about how you think. Cybersecurity is essentially a continuous problem-solving exercise. You're looking at a network, trying to figure out how someone might break in, or you're analyzing a log to find something suspicious. That's the same mindset you use when you're debugging a tricky piece of code. Bootcamp grads are trained to break things and fix them. Luna: Okay, so what are the actual entry-level roles? Like, what should a bootcamp grad be targeting? Lucas: The most common entry point is the security operations center, or SOC, analyst. That's the front line, monitoring alerts, triaging incidents, and escalating when something looks real. It's a shift-work kind of job, but it's a fantastic way to get your foot in the door. Then there's penetration testing, which is basically ethical hacking. You get paid to try to break into systems. And there's security engineering, which is more about building and maintaining security tools. Luna: So, for someone coming from a coding bootcamp, which of those is the most realistic first step? Lucas: I'd say SOC analyst is the most accessible because it doesn't require deep security knowledge upfront. You learn on the job. But pen testing is actually a natural fit for former coders, because you're writing scripts to exploit vulnerabilities. The problem is it's harder to land that role without experience. So the typical path is SOC analyst first, then specialize. Luna: That makes sense. But what about certifications? I feel like every cybersecurity job listing is stuffed with them. Lucas: Certifications matter, but you don't need a whole alphabet soup to start. The one that almost everyone recommends is CompTIA Security Plus. It's vendor-neutral, it covers the fundamentals, and it's often a requirement for government or defense jobs. But here's the thing—a certification alone won't get you hired. You need practical skills, and that's where projects come in. Luna: What kind of projects can a bootcamp grad show off? I mean, you can't just post your hacking attempts on GitHub. Lucas: You absolutely can, actually, as long as it's legal and ethical. The classic project is building a home lab. You set up a virtual machine, install an intentionally vulnerable application like DVWA, and then document how you exploit it. You write up a report like a real penetration tester would. That shows you understand the methodology, not just the tools. Luna: So, it's like a portfolio piece for cybersecurity. Lucas: Exactly. And another great project is automating a security task. For example, write a Python script that scans a list of IP addresses and checks for open ports, or that parses a log file and flags suspicious patterns. Marcus told me he did that for his bank's hiring manager—he walked into the interview with a script that automated part of their own alert triage process. Luna: Wait, he wrote a script for their specific system before he even got the job? Lucas: He did. He found their public IP ranges, wrote a script that pinged them, and flagged which ones were responding. It was totally legal, but it showed initiative. The hiring manager later told him that script was the reason he got an offer. That's the kind of thing that makes you stand out from the dozens of other candidates. Luna: That's impressive. But I imagine the interview process for cybersecurity is a bit different from a typical coding interview. Lucas: It is. You'll get technical questions, sure, but you'll also get scenario-based ones. Like, 'You see a user clicking on a suspicious link, what do you do?' And they're testing your thought process, not just your knowledge. Plus, they care a lot about communication. Can you explain a vulnerability to a non-technical manager? Can you write a clear incident report? Those soft skills are often what get you promoted. Luna: And bootcamp grads are actually trained to communicate, right? Like, we had to present our projects all the time. Lucas: That's a massive advantage. I've talked to hiring managers who say they'd rather hire someone who can explain a security issue in plain English than someone who knows every tool but can't communicate. So don't underestimate that. Luna: So, let's talk about the elephant in the room. This show is ad-free, and that's because a small group of listeners chips in monthly through buy me a coffee dot com slash fexingo. It's literally what keeps these episodes coming out without a sponsor screaming at you. Lucas: Yeah, that's the honest economics. We don't run ads, and that's only possible because of those supporters. If you're thinking about a career change and this show has helped you weigh options, that's a great way to keep the lights on for the next person who's in that same spot. Luna: And there's no pressure, but we genuinely appreciate every coffee. It keeps us independent. Lucas: Alright, back to cybersecurity. So, we've talked about roles and certifications. What about the actual job search? How do you tailor your resume when you don't have direct security experience? Luna: Right, because my bootcamp projects are all web apps, not security tools. Lucas: You have to reframe. If you built a web app, you probably made it secure by default—you sanitized inputs, you handled authentication. That's security work. Put that on your resume. 'Implemented user authentication and input validation to prevent SQL injection.' See, that's a security bullet point. Luna: So, you're basically translating your bootcamp experience into security speak. Lucas: Exactly. And you should also mention any time you've debugged a problem by looking at logs. That's literally what a SOC analyst does. So you have more relevant experience than you think. Luna: What about networking? I imagine it's a tight-knit community. Lucas: It is, and there are tons of free resources. Local meetups, Discord servers, and conferences. And unlike some tech fields, cybersecurity people are usually happy to help newcomers. There's a strong mentorship culture. Marcus said he found his job through a local security meetup. He went there, asked questions, and one of the members recommended him to their bank's hiring team. Luna: That's a great story. So, for someone listening who's thinking about making this jump, what would you say is the first step they should take this week? Lucas: Start with the fundamentals. Pick one of the free online courses, like the ones from Cybrary or TryHackMe. Set up a simple home lab with a virtual machine. And then, in a month or two, sign up for the Security Plus exam. That gives you a goal and a deadline. Luna: And how long does it typically take a bootcamp grad to transition into a security role? Lucas: It varies, but Marcus did it in nine months. Some people faster, some slower. The key is not to get discouraged if you don't land the first role you apply for. The SOC analyst jobs can be competitive, but they're not impossible. And once you're in, the trajectory is steep. You can go from SOC analyst to security engineer in two to three years if you keep learning. Luna: That's encouraging. So, what's the one thing you want listeners to take away from this episode? Lucas: That cybersecurity is not this impenetrable fortress that requires a four-year degree and a decade of IT experience. Bootcamp grads bring a unique combination of technical agility, problem-solving, and communication skills that the field desperately needs. If you're willing to put in the work on the fundamentals, there's a real path forward. Luna: And that path starts with a single step, or a single ping, I guess. Lucas: Ha, exactly. So, if you're a bootcamp grad who's been wondering if cybersecurity is for you, take a look at TryHackMe this weekend. You might surprise yourself. Luna: And if you want more episodes like this, you know where to find us. Thanks for listening.