The original post: /r/cybersecurity by /u/shrewd-afternoon-tea on 2025-06-26 03:53:38.
Hello Cybersecurity community! I hope this message finds you well. I am a new cybersecurity professional who completed the Google Cybersecurity Professional Certificate program and passed the CompTIA Security+ CE exam. Since then, I’ve been working on strengthening my understanding of cybersecurity by reviewing core concepts, learning new materials, and improving my skills through labs and exercises, all while searching for a job.
Like many others in the industry, I have networked and applied to hundreds of positions-from internships and entry-level security roles to help desk positions- non of which have been fruitful. Recently, however, I was offered and accepted a part-time position as a bookkeeper for a small company that is still in their early stages. The company does not have many employees, and they lack an IT or security team. I am therefore considering to offer to take on a cybersecurity role and perform related tasks on the days I’m not working as a bookkeeper.
I am aware that this scenario is far from ideal; I have no real life experience and I would be the only security professional for the business. I know that this will come with significant challenges and risks. However, I believe that difficult experiences are often times the best places to learn from and some of the most powerful growth happens when we’re pushed/forced to be resourceful and effective. I love learning, I love challenges, and I am highly motivated. However, before taking such a step, I want to seek advice from seasoned professionals: Would you advise against this?
I have genuinely fallen in love with the security world. I find cybersecurity fascinating, thrilling, rewarding, and intellectually stimulating. I even have fun writing security reports! I am determined to not give up on my dream of being a security professional and contributing towards the protection of people, assets, and businesses. However, the well being of the company, its employees, and customers are the priority. If stepping into a cybersecurity role in this situation could potentially cause more harm than good, I am willing to hold off and seek experience in another way.
Thank you very much for reading and for any guidance you can offer. I sincerely appreciate it.