This document discusses emerging career opportunities in cyber security. It outlines the growing demand for cyber security professionals as the threat landscape expands due to more connected devices and high-profile hacks. There is currently a shortage of cyber security talent. The document provides advice for entering the field, including obtaining formal education in relevant areas like computer science, earning industry-recognized certifications, gaining hands-on experience through practices and competitions, and developing skills in areas like penetration testing. It also notes opportunities to start one's own cyber security consultancy business.

1. Emerging
career
opportunities
in cyber
security

2. Speaker Intro
VIKAS ARORA
SR. DIRECTOR – IT & SECURITY TOLUNA
• 18+ Industry Experience
• 12+ in Security
• Various Awards Winner
• APAC CISO Award
• Top 100 CISO
• Security Maestro
• DynamicCISO
• Travel : )
• Certification Exams :)

3. Keep your hands dirty…

4. Real Threat..
12 April 2016 Private and Confidential
4

5. Classic Example, awareness
requirement
5

6. Expensive Email
6

7. The Interview
7

8. Wallpaper
8

9. Sony : Pen & Pencil
9

10. Revenue Impact
10

11. Hacked Down…
11

12. Crypto Malware
12

13. Ransomeware :’(
13

14. 2015 Report
14

15. Universities : Target
15

16. Demo…
16

17. Increasing threat
12 April 2016 Private and Confidential
17

18. Increasing Threat..
12 April 2016 Private and Confidential
18

19. IoT Hacking
19

20. Cost of Crime
20

21. Booming Industry …
21

22. The Demand
22

23. Talent Shortage..
23

24. Booming Indian Industry…
24

25. The Niche Market
25

26. College to Career…
26

27. Certifications 27

28. Cyber Security Career
Formal Education
Certifications
Industry Awareness
Industry Experience
Commitment to learn and unlearn
28

29. Education
Formal Education
B.Tech/B.E
MS in Cyber Security
Indian / Global
PHD
IITs, etc
29

30. Certifications
Microsoft & Open Source
MCSA/MCSE/RHCE
Cisco
Attend Training ~ 10K INR
CCNA
Security
CEH, OSCP, target CISSP for long run.
30

31. Industry Awareness/Social Presence
Twitter
Top 100 people to follow in Infosec
Facebook
Don’t post which you don’t want others to know
Security Blogs
Start writing blogs/Reading blogs
Conferences
Nullcon, Blackhat, Defcon
31

32. BYOE (Bring Your Own Experience)
Practice Ground
Virtualized Environment
(VMware/VirtualBox)
Attacking Infrastructure
Victim Infrastructure
Little training
Workshops
Online Videos
32

33. Attack Infrastructure
The Famous
Kali Linux
BackBox Linux
Samurai WTF
Android Tamer
33

34. Target Infrastructure
NO ONLINE TARGETS
Vulnerable Environments
Metasploitable
DVWA
VulnHub
Hack.me
34

35. Detection
Open Source SIEM
Alienvault
Snort
35

36. CTF
36
https://ctftime.org/event/list/past
https://ctf365.com/

37. Stand-Out..
37

38. Career in waiting..
38

39. Market Survey..
39

40. The Real Figures ..
40

41. Be your own Boss…
41

42. Golden Tip..
42

43. Thank you !!
43