How long does it take to get into cyber security?

With an IT, networking or developer background, many people are ready for a junior security role in about 6 to 12 months of focused study and hands-on work. Starting from zero often takes 12 to 24 months, because you first need networking, Linux and some programming. Hands-on projects make that time count more than courses alone.

Get started - freeLive cloud workspace in your browser · nothing to install

Months 1 to 4 - foundations

Learn networking (TCP/IP, ports, DNS, HTTP, TLS), the Linux shell, and basic Python. Learn how a web app handles logins, sessions and data. Build: a small Flask app with a login, a script that parses log files, a scan of your own machine with nmap.

Months 5 to 8 - web and cloud security

Study the OWASP Top 10 and secure each issue in a working app: SQL injection, XSS, path traversal, weak password storage. Learn cloud basics: IAM, S3 permissions, encryption. Build: hash passwords with bcrypt, add login rate limiting, make a public S3 bucket private.

Months 9 to 12 - pick a direction

Choose SOC analyst, application security or cloud security. For SOC, learn a SIEM and detection rules. For AppSec, use Semgrep, Bandit and code review. For cloud, go deeper on IAM and KMS. Consider one certification such as Security+ if the jobs you want ask for it. Start applying with 3 to 5 projects.

What makes it faster

Work on real systems, not only quizzes. Securing a login or removing a secret from Git history teaches you how the system works and what can go wrong. Write each project up as you finish it, so your portfolio is ready when you start applying.

Real Security work to put in your portfolio

How to Hash Passwords Instead of Storing Them in PlaintextPlaintext passwords make every DB breach an instant catastrophe. Learn to use bcrypt-style password hashing...How to Prevent Login Brute-Force With Rate LimitingAdd login brute-force protection to Flask: block an IP after 5 failed attempts in 60 seconds, return 429,...How to Lock Down a Public S3 BucketHow to fix a world-readable S3 bucket: remove the public bucket policy and turn on all four Block Public...

Related questions

Can I get into cyber security in 6 months?

It is possible with an IT or programming background. From zero, 6 months is usually enough for the foundations, but not for most job interviews.

Is it faster to start in IT support or help desk?

For many people, yes. Help desk and sysadmin roles give real experience with users, networks and systems, and many security teams hire from them.

Do I need a degree to get into cyber security faster?

No. A degree helps with some employers, but skills, projects and sometimes a certification are what get you through interviews.

Do real production work, free. Live cloud workspaces in your browser - every project you complete lands on your portfolio.

Get started - free
Get started - free