The Value of Community in InfoSec
If you are new to InfoSec you might be feeling like the information you want/need to learn is insurmountable. Choosing between Self-study options, Certifications, and Career Paths is overwhelming, to say the least. Guidance for all of the above can be found if you begin to embrace and leverage the InfoSec community. Personally, I have found the Security community to be one, if not the most, welcoming community I have ever been a part of. Below, I provide a few tips to help you to become engaged within the community and to assist you with networking and self-study. This is by no means a comprehensive list, but it should provide a great jumping off point for anyone looking for more information.
I cannot stress enough the importance of Twitter if you work or study within the security space. I suggest seeking out specific people in the industry that align with what you enjoy doing and follow them (a few that I follow for Open Source Intelligence are Sector035 InfoSecSherpa Joe Gray (C_3PJoe) @dutch_osintguy @TinkerSec @WebBreacher). Free resources and advice get posted daily and you will be immediately inundated with new material to study and absorb! Twitter is also a great way to begin to cement yourself as SME (Subject Matter Expert) by presenting your ideas to the conversation. Tip: Make sure you pay it forward. When you have an idea or valuable input, be sure to share it with everyone! You could share your ideas in the form of a blog, a video, an infographic, or even a podcast. Every person at every level has a story worth listening to.
Conferences and Events
I hear the collective groan of college students everywhere as I mention conferences. I know they can often be costly and difficult to attend but I have a few solutions that might benefit you. Look locally! BSides offers low-cost conference locations literally all over the world. Having attended my first Bsides last weekend (BSidesPGH) I can personally attest to their immense value in both content and networking.
Another great solution is looking for groups on Meetup.com. If you are local to New Jersey, there is a fantastic meetup called NJ Diner Hackers where local security professionals get together and talk casually over breakfast.
If you are a college student, be sure to check the various event websites for student discounts or scholarships, although often competitive, this can be a great way to get help with entrance and travel fees. Student clubs can also help support your education through events with their annual member budgets. Remember, sometimes the personal connections you make can lead to otherwise unknown career possibilities! Tip: Bring business cards.
Slack
Perhaps like me, you live in the middle of nowhere and you need a more virtual solution for networking. Slack may not offer networking as personal as a diner meetup but it can still be a great resource for education, career advice or direction. I follow several different organizations on Slack that all revolve around OSINT (Open Source Intelligence) because that is what I am passionate about. You can generally find specific career-related Slack channels via twitter or google. Join up and start collaborating ideas, playing Capture the Flags, and trading resources.
Mentoring
Finding a mentor can be an incredibly overwhelming yet rewarding experience. Mentors can and should be from all careers and all levels of expertise because everyone has a unique perspective to give. SheHacksPurple performs a great service on Twitter every Monday with the hashtag #MentoringMonday. I participated last week and received at least 20 offers of mentorship! From there, I decided who seemed like they would align the best with my goals or have the best experience to help guide me. Having people to turn to helps us feel less alone on our journey.
Final Thoughts
The InfoSec community in my experience has been welcoming, educational, inclusive, and supportive. Don’t discount the value of the community to help you grow as a professional!