So over on the CS & IT degree forum there seems to be a lot of people applying for new(ish) degrees in things like Cyber Security.
I'm a mature student who recently finished their second masters, and I've worked in tech for over a decade, and the latter half of which has been in the Cyber Security area (security engineer, pen testing, then consulting).
I see a lot of A-level students expressing an interest in Cyber Security careers but I'm curious as to why? I know there are figures from Cisco et al kicking around screaming about the shortages in security roles we face, but there are also big shortages of software engineers and cloud engineers and data engineers/scientists.
So here's a few things about working in Cyber Security for anyone interested:
1) Most Cyber Security jobs are boring: Think you'll be hacking in to some Russian Satellite? Sorry kids, not happening. You won't be hacking anything most of the time, and if you are a pen tester, you'll be hacking what you are told and nothing more (if even that).
Chances are what you'll be doing on a day-to-day is checking packets, making sure you have the right rules on your firewalls, and spending hours upon hours reading log files (which often look like gibberish), or installing patches. Or maybe you might be in a fun cyber security job, and you get to do security code reviews on 10,000 lines of C code that has limited options for automated security testing... bored yet? You will be.
2) Businesses don't like paying for Cyber Security: For most companies, (including tech companies!), Cyber Security is like Health and Safety Officers: they have to have some in place, but the companies know that the H&S officers are an expense. They aren't going to bring in any money. So while everyone agrees we need more Cyber Security, not so many people are happy to pay for it... I have seen it in more than one organisation. People don't want to pay for security, which is why we normally read about things like WannaCry on the news.
3) Cyber Security might not be the most lifestyle friendly career: Depending on your role, Cyber Security can require you to be 24/7 on call, or require you to work at unsociable hours or times of the week. While any decent company will compensate you for this, it's something not most people are aware of when they think about Cyber Security careers.
Having said that, there are certain times when it's a cool career. You can come across some pretty interesting problems now and then, and there is definitely a lot of work out there, so job security isn't much of a worry at the moment.
The best jobs in tech are still, IME, software engineering/programming posts. The reason being is that software can make companies money (e.g. by building an app then selling it, or by automating processes that previously required many human employees to work). Manufacturing Hardware & Software is incredibly lucrative. Those are the best paid jobs in tech normally. Some companies want their products to be as secure as possible, but trust me, when there is a deadline or a performance issue or a cost issue in producing hardware or software, the first thing to always go is security.
That's my opinion (that nobody asked for lol)! So why are people so interested in Cyber Security careers?