Latest / The Career Change Podcast with Fexingo: Switching Fields, Bootcamps, and Reskilling / How Bootcamp Grads Can Transition Into Cybersecurity Roles
Transcript
- Lucas: Luna, I was looking at the latest ² workforce study that came out last month, and the global cybersecurity job gap now sits at about 3.5 million unfilled positions. That's up from 2.7 million two years ago. So the demand is real, and it's growing faster than the supply of new graduates. Luna: Yeah, I've seen those numbers. And I think a lot of bootcamp grads hear 'cybersecurity' and assume they need a computer science degree or years of network engineering experience. But that's not entirely accurate, is it? Lucas: Not anymore. The entry point that's most accessible for bootcamp grads right now is the SOC analyst role — security operations center. It's the front line of defense: monitoring alerts, triaging incidents, doing initial investigation. And the skill set is surprisingly learnable in a focused three-to-six-month stretch. Luna: So what are the actual technical skills they need to demonstrate in an interview? I've heard it's not just 'know how to hack'. Lucas: Right. There are three core competencies that hiring managers actually test for. First is log analysis — can you read a Windows Event Log or a Linux syslog and spot something anomalous? The second is packet inspection — understanding what a TCP handshake looks like in Wireshark, recognizing a port scan. And the third is incident response procedures — knowing the NIST framework steps: preparation, detection, containment, eradication, recovery. Luna: So it's more about systematic thinking than deep technical wizardry. That actually plays to a bootcamp grad's strength, because bootcamps teach you how to break down a problem methodically. Lucas: Exactly. And I want to give a concrete example. A friend of mine — let's call her Maya — she was in marketing for about eight years. Did a full-stack bootcamp in 2024, then realized she didn't want to build features all day. She wanted something more investigative. So she spent three months on TryHackMe, which is a gamified cybersecurity training platform, and earned the CompTIA Security+ certification. That certification is vendor-neutral and widely recognized by HR filters. Luna: TryHackMe is a great shout. It's like a gym for cybersecurity skills, with rooms on everything from basic Linux to advanced exploit development. And it's cheap — like ten bucks a month. Lucas: Maya did exactly that. She completed the 'Jr Penetration Tester' learning path there, but she actually targeted a Blue Team role, not Red Team. That's key. Blue Team — defense — is easier to break into because there are more entry-level jobs and the bar is lower on offensive knowledge. She also reworked her bootcamp capstone project. It was originally an e-commerce app, but she reframed it as a 'secure coding demonstration' — she added authentication with role-based access control, input sanitization to prevent SQL injection, and she wrote a short security audit report explaining each choice. Luna: That's clever. She didn't need a separate cybersecurity project; she just shifted the narrative. And I imagine that helped her stand out when she applied to that regional bank? Lucas: Yeah, she applied to about 40 positions over two months. Got three interviews. One was at a midsize regional bank in the Midwest — they were building out their internal SOC because of new regulatory requirements. She interviewed with the SOC manager, who gave her a scenario: 'Here's a suspicious login alert from an IP in Belarus at 3 AM for an employee who works in Chicago. What do you do?' Luna: And how did she answer? Lucas: She walked through the NIST framework. Step one: verify the alert — check the source IP reputation using a threat intelligence feed. Step two: contain — disable the user account temporarily. Step three: investigate — look at recent logins from that user, any other anomalies. Then document everything. The manager later told her that's exactly what he wanted to hear. She got the job at 62K starting, which is on the lower end for SOC analysts, but it's a foot in the door with full benefits and tuition reimbursement for more certs. Luna: That's a solid outcome. And I think the key takeaway is that bootcamp grads don't need to compete with computer science majors on deep algorithm knowledge. They need to show they can follow a disciplined investigation process. Lucas: Right. And if you're a bootcamp grad listening, here's a concrete six-month roadmap. Months one and two: complete a foundational cybersecurity course — I'd recommend the Google Cybersecurity Professional Certificate on Coursera, it's about 40 bucks a month and very hands-on. Month three: earn the CompTIA Security+ certification — study about 60 hours, cost about 400 dollars for the exam. Month four: do TryHackMe's SOC Level 1 learning path — it covers exactly the log analysis and incident response skills we talked about. Months five and six: apply to at least two SOC analyst roles per week, and tailor your resume to highlight analytical thinking and any security-related content from your bootcamp project. Luna: You mentioned the salary range — what can someone realistically expect in mid-2026 for entry-level SOC? Lucas: From the data I've seen on Glassdoor and LinkedIn, entry-level SOC analysts in mid-sized markets are typically between 55K and 70K. In larger cities like New York or San Francisco, it's closer to 70K to 85K. But the ceiling is high — after two or three years, if you add a cert like CySA+ or SSCP, you can move into a senior analyst role or even a security engineer role that pays over 100K. Luna: And here's something that's interesting: cybersecurity tends to have less age bias than some other tech roles. Hiring managers often prefer candidates with a few years of professional experience in any field, because soft skills like communication and documentation are critical in incident response. Lucas: That's a great point. Many SOC managers I've talked to say they'd rather hire a former teacher or project manager who's learned the technical basics than a 22-year-old with a degree but no workplace maturity. The ability to write a clear incident report and talk to non-technical stakeholders is huge. Luna: Yeah, and that's something bootcamp grads often already have from their previous careers. If we've helped you think through a career move like this, or given you a concrete plan you can follow, we'd love it if you considered supporting the show. It keeps us ad-free and lets us keep doing deep-dive episodes like this one. You can find us at buymeacoffee.com/fexingo. Lucas: Really appreciate that. So, back to the roadmap — the other question I get a lot is, do bootcamp grads need a home lab? And the answer is, not necessarily, but it helps. You can set up a virtual lab using VirtualBox and a free security distribution like Security Onion, which includes a SIEM, intrusion detection, and network monitoring tools. That gives you hands-on experience you can talk about in interviews. Luna: And for those who want something faster, there are cloud-based labs like Cyber Range from SANS or TryHackMe's own SOC simulators. You don't need your own hardware. Lucas: Exactly. The one thing I want listeners to take away is that the cybersecurity talent gap isn't just a statistic — it's an opportunity for career changers who are willing to put in three to six months of focused learning. You don't need a second bachelor's degree. You need a systematic approach, one or two certifications, and the ability to talk through an incident response scenario. Luna: And we'll put links to the specific resources we mentioned — Google Cybersecurity Certificate, CompTIA Security+, TryHackMe — in the show notes. Next episode, we're going to talk about how bootcamp grads can transition into cloud engineering roles, which is another high-demand field with a similar entry path. Lucas: Looking forward to that. Until next time, keep learning.