Latest / The Career Change Podcast with Fexingo: Switching Fields, Bootcamps, and Reskilling / How Bootcamp Grads Can Break Into Cybersecurity
Transcript
- Lucas: There's a stat I keep coming back to: as of mid-2026, the global cybersecurity workforce gap sits at around 3.5 million unfilled roles. That's according to ISC2's latest study. And here's the part that matters for this show — a huge chunk of those roles are entry-level and mid-level positions that don't require a four-year computer science degree. Luna: So bootcamp grads are actually in a sweet spot here. Because if you've done a coding or data bootcamp, you've already built some of the core skills. Lucas: Exactly. Today I want to talk about one specific person who made this pivot. Her name is Sophia Tran. She was a graphic designer for about four years, decided she wanted more stability and a faster growth trajectory, so she enrolled in a cybersecurity bootcamp — not a general coding bootcamp, a dedicated security one — and within six months of graduating, she landed a role as a security analyst at a mid-size fintech company. Luna: Six months. That's fast. What was her background before the bootcamp? Did she have any tech experience? Lucas: Minimal. She knew some HTML and CSS from her design work, but nothing beyond that. No networking, no scripting, no security concepts. The bootcamp she chose was a twelve-week full-time program, and she said the first three weeks were brutal — just learning the basics of how networks work, what TCP/IP is, the OSI model, that kind of thing. Luna: Right, the foundation. And I imagine a lot of people hear 'cybersecurity' and think you need to be some kind of elite hacker out of a movie. But the reality for entry-level roles is much more about process and tooling. Lucas: Exactly. Sophia's day-to-day now involves monitoring logs in Splunk, running basic vulnerability scans, and triaging alerts. She told me she uses Python maybe twice a week to automate small tasks. She's not reverse-engineering malware. And the bootcamp prepared her for exactly that level of work. Luna: So what are the three things a bootcamp grad should focus on if they want to follow Sophia's path? Lucas: I'd say the first is scripting. Python specifically. Every security team I've talked to says that scripting is the skill that separates candidates who get interviews from those who don't. You don't need to be a software engineer, but you need to be able to write a script that parses a log file or automates a simple check. Luna: And bootcamps teach Python as a standard part of the curriculum now, so that's a direct transfer. Lucas: Right. The second is networking fundamentals. You have to understand how data moves across a network, what a packet looks like, what DNS does, what a firewall rule means. Sophia said the bootcamp spent a full two weeks just on packet analysis using Wireshark. That's a skill you can demonstrate in an interview by walking through a packet capture. Luna: And the third? Lucas: Tool familiarity. Splunk is the big one for log management, but also things like Nessus for vulnerability scanning, and maybe a basic SIEM like AlienVault or Microsoft Sentinel. Many bootcamps now have labs where you actually use these tools. If you can put 'Splunk' on your resume and talk about a lab project where you created a dashboard, that's concrete proof. Luna: I want to push back on something though. A lot of bootcamp grads I've spoken with worry that they're not 'technical enough' for security. They think they need to know C or assembly or deep cryptography. Is that a real barrier? Lucas: It's a misconception. I looked at the job descriptions for entry-level security analyst roles at five different companies last week — none of them required C or assembly. They wanted familiarity with operating systems, basic networking, and the ability to follow incident response playbooks. One of them explicitly said 'willingness to learn is more important than existing deep knowledge.' Luna: That's encouraging. And it plays into something else: soft skills. I've seen data from LinkedIn that shows communication skills are cited in nearly 40% of cybersecurity job postings. Because you're often explaining risks to non-technical stakeholders. Lucas: Absolutely. Sophia mentioned that her graphic design background actually helped her in interviews because she could present findings visually. She built a simple dashboard mockup for her take-home exercise. The hiring manager loved it. Luna: That's a great angle — using your non-tech background as a differentiator. So what certifications should a bootcamp grad pursue? I know CompTIA Security+ is the classic starting point. Lucas: Security+ is the one I'd recommend. It's vendor-neutral, widely recognized, and it covers exactly the breadth that an entry-level analyst needs — threats, vulnerabilities, cryptography, identity management. Sophia got her Security+ certification about a month after the bootcamp ended. She studied for three weeks using practice tests and online resources. Luna: Did the bootcamp itself prepare her for the exam? Lucas: Partially. She said the bootcamp covered about 70% of the material. She had to fill the gaps on her own. But most bootcamps now offer an exam prep module as part of the program. If you're considering a cybersecurity bootcamp, that's something to ask upfront: do they include Security+ prep, and do they cover the cost of the exam? Luna: Good tip. And beyond certification, what about practical experience? Bootcamp grads often struggle with the 'no experience' catch-22. Lucas: Open source is a huge lever here. There are projects like the OWASP WebGoat — a deliberately vulnerable web application that you can use to practice penetration testing. Or you can contribute to security tools on GitHub by writing documentation or fixing small bugs. Sophia built a simple Python script that checks for open ports on a local network and published it on GitHub. That was a talking point in her interview. Luna: And she didn't need permission from anyone to do that. It's all self-directed. Lucas: Exactly. Another avenue is local security conferences. There's a network of events called BSides — they happen in almost every major city, and they're very welcoming to newcomers. Sophia went to BSides San Francisco while she was job hunting. She said she talked to a hiring manager at a booth, mentioned her GitHub project, and that manager remembered her when she applied two weeks later. Luna: So networking in person still matters, even in a field that's all about digital security. Lucas: It really does. And bootcamp grads should also consider the specific industry they want to work in. Fintech, healthcare, government — each has its own regulatory environment. Sophia's fintech company needed someone familiar with PCI DSS compliance, which is the payment card industry standard. She learned the basics of that during the bootcamp. Luna: That's a nice specialization. If you know a bit about compliance for a specific sector, you can stand out even more. Lucas: If we've helped you think through a career move or decision, we'd love for you to consider supporting the show. It's what keeps us ad-free and focused on concrete advice like this. You can do that at buy me a coffee dot com slash fexingo. No pressure at all — just if you find value in what we do, that's the way to keep it going. Luna: Yeah, we really appreciate every bit of support. It lets us keep digging into stories like Sophia's. Lucas: So let's go back to the job search itself. Sophia applied to about 30 roles over two months. She got four interviews and one offer. The offer was for a security analyst position at a fintech company called PayShield — they process payments for small businesses. Starting salary was $75,000, which is pretty typical for entry-level cybersecurity in a mid-cost city. Luna: That's a solid starting point. And compared to graphic design, which she was making maybe $50,000 before? Lucas: She said $48,000. So a 56% increase. And the growth trajectory is much steeper. Within two years, she expects to hit $95,000 to $100,000. That's the kind of mobility that cybersecurity offers right now because demand is so high. Luna: Let's talk about the downsides though. What did Sophia say was the hardest part? Lucas: Imposter syndrome, especially in the first three months on the job. She said she felt overwhelmed by the volume of alerts and the pressure to not miss a critical threat. She had a supportive team lead who paired her with a senior analyst for the first month. That mentorship was crucial. Luna: So finding a company with a good onboarding process is part of the search strategy. Lucas: Exactly. During interviews, she asked specifically about training and mentorship. She also asked about the team's incident response process — if they had playbooks and if new hires were expected to handle incidents alone right away. The company that hired her had a six-week ramp-up period. Luna: That's smart. So the takeaway for bootcamp grads is: cybersecurity is accessible, but you need to be intentional about the skills you build, the certification you earn, and the kind of company you target. Lucas: And the window is open. The 3.5 million figure is growing. Every year, the gap widens. Bootcamp grads bring diversity of background and problem-solving approaches that traditional computer science programs often don't cultivate. Sophia's design background made her think about user experience in security, which her team valued. Luna: That's a great note to end on. If you're a bootcamp grad listening and you've been wondering whether cybersecurity is a realistic path, the data says yes. And Sophia is proof. Lucas: Next episode, we're going to look at another niche that's hungry for bootcamp talent: technical writing for developer tools. It's a field where clear communication matters more than deep coding chops. Until then.