Be careful about “boot camps”, and I say this as someone who teaches at one on the side (coding, not security). A lot of them are kind of like degree mills - pay money, get stamp, maybe worthwhile or maybe worthless.

If you go that route, do a lot of research. The biggest thing I’d look for is that the instructors work in the field full time and teach on the side (because they love sharing info and teaching the next generation). Hire rates for grads is also a good indicator… But take close note of where those hires are at and ask if it’s not published.

Any time I’ve come across these kind of programs where the boot camp instructors only job is teaching, the info is usually 10+ years dated and relatively useless past the absolute basics.

Trying to go entry right in to Security is a recipe for failure. You’d only be able to find something on a large security team that’s wanting to underpay and security teams are generally small, low turnover affairs, the entry level jobs are scarce.

Now let’s talk entry level IT.

Usually this means help desk. It can be other things, but the lions share of entry level IT is help desk.

Let’s say I open a position. Help Desk I. Minimal experience, Minimal pay.
I get 100 resumes immediately.

Let’s play the what’s in my inbox game.

50 of them are zero effort generic carbon copies from a resume template. No certs, no experience, no or unrelated work history. 30 of them are some effort, I make excel sheets, I’m an exec assistant, No certs, but some semi-related experience with basic office apps. 10 of them list every technology that exists, no certs, no experience but they list that they know how to do everything under the sun. 5 of them will have a small amount of real experience 5 of them will be straight out of college with no experience.

The first 50 are out.
The next 30 I’ll weed through. If they read genuinely and show intelligence, I’ll pick some of the best ones for a phone screen. The 10 that list everything are straight up trash. I’ve phone-screened hundreds of those. As soon as you ask them any questions past what is DNS, they fall apart and start just swearing they they can do anything. The 5 with experience are worth a phone screen. probably 1:20 is a reasonable candidate The 5 straight out of college are probably worth a phone screen, but they’re looking for greater than starting wages, and the chances of getting a couple years out of them is slim, they just need the experience to get on to their next gig.

If someone comes in with little experience but has certs, especially Microsoft certs, I’ll always call them. Those certs are hard to get and they’re pretty relevant. It’s no sure thing, but it’s a damn good indicator.

You should be able to install windows, have a working knowledge of replacing/upgrading drivers, googling for and finding/editing/creating keys in the registry, reading windows logs, you should know where the various AppData folders are and what their purposes are. How do you put something into auto start, how do you find all the different things in auto start to disable them? Go find all the health dashboards for the different services (Azure, AWS, Office 365) know where they are so you can use them as examples for practical questions. Be able to open a command window with admin privileges and know why you’d need to do that. Basic wired network card setup.

Go sign up for a free account on Spiceworks. Set up a fake help desk. Work on workflows, create and resolve tickets. Go over every feature for a couple days.

Go get some trash parts, put together a working pc. If nothing else, just get a old pc, strip and clean it then reassemble it, you just need a screwdriver and tiny fingers :)

All this extra curricular stuff, it’s all for the resume. No lies. Be clear but don’t be too wordy. I’m looking to leave my current field of [x] and enter the IT field. list out the things you’ve done and worked with in the name of job preparation. When they read your resume, you need to sound like you’re interested, dedicated, and are ready to take initiative.

In interviews, own that you do not know things. I don’t know how to do that, I’d start with a web search with the following keywords [x,y,z]. If I had to take a guess without looking it up, i’d probably say it was [whatever you can come up with].

I’m a SOC Analyst in my mid 20s.

I did a boot camp, it got me a job. BUT I already had a degree, though in a completely unrelated field. For people just out of college age like me, that degree requirement was much more about showing you’re capable of committing to something than it was about specific knowledge.

You’re going to need to get certifications no matter what you do. My boot camp prepared me for Sec+ and CySA+, but you could 100% do that on your own.

At the end of the day, it’s going to come down to how much time/money you’re willing to invest. If you’re able to get a degree without significant hardship, I’d do that. There’s so much value to education, no matter the subject.

If you’ve got less money and time than that, consider a boot camp. I had an amazing time in mine, and the schedules are often designed for working adults. My class had people of all ages, though the ones with some previous interests/hobbies in IT definitely got the most out of it.

Feel free to DM me, mentoring and networking is a huge part of cyber!

Hiring manager here, the best thing you can do is work on certifications. Microsoft Learn has a ton of info and the certs are reasonably cheap. There is also a ton of stuff on YouTube, for example Professor Messer’s Security+. There is also a great demand for VMware admins.

If you can setup some computers at home and make yourself a lab, build VMs on hypervisors of your choice and talk about that during your interviews that’s big bonus points too.

Currently in my first IT job. I’m over 40, and been intheis job less than a year. Computers have always been a hobby of mine. A couple years ago I started taking some classes at the local community college: networking, cyber sec, sysadmin… After 6 or 7 classes, a professor recommended I apply for this job (Helpdesk+). I think certs are a great idea, and I’m planning to get some myself as I plan to steer into infosec. You really can’t beat personal networking/connections though. I got mine through school, but also maybe there are some clubs or events like a local Linux Users Group where you can meet people and make friends.

Get certified in something. CCNA, RED HAt, whatever. Then take the shittiest L1 help desk job you can find. Get more certs while working and do the linked in and constantly look for a new job. You got this.

First off, aiming to start in security is a fools errand. Security is one of the many paths that your career might take after you gain some knowledge.

Some more random thoughts before real advice. The two hardest things in IT are getting into help desk, and getting out of it. The reason is two fold: 1) help desk is the great entry point for the greater IT industry, and 2) one person in a help desk role is fairly similar to another when it’s time to move out of help desk.

Now: If you have the time, go to your local community college and take their it/networking/security program. The degree will help - you won’t skip help desk (unless your lucky), but you are better equipped for getting out of it. You will also learn a bunch of stuff, get some projects to stick on a resume, etc.

If you don’t have that time you can go the cert route. Be warned however - certs do not substitute for real experience. Do not fall for the trap of thinking that getting X cert is your ticket to Y job. You will be in for a ride awakening when your sitting across from someone like me that only asks situational, hypotheticall questions with no correct answer ( I care about how you think and approach problems over book smarts).

Ok. Last bit of advice: the 10 things I look for (in order) when interviewing entry level help desk.

1. customer service skills,
2. ability to learn,
3. customer service.
4. some mild interest in tech.
5. customer service.
6. the ability to learn troubleshooting.
7. customer service.
8. the ability to admit you don’t know…
9. customer service.
10. not being an asshole.

I can teach you how to fix a printer, design a network, or spin up infrastructure in the cloud. I can’t teach you how to act around people.

Without a degree or any IT experience, I’d say try to get one basic IT certification from CompTIA (A+, Sec+, or Network+), then apply for a HelpDesk job just to get in. You can try going straight to a SOC analyst role if you’re confident in your knowledge/skills. Those are basically the entry points for IT and Security for someone without a lot of experience. Once you’re in, you can start leveling up with experience or move laterally to your desired role. You’ll also be able to get your employer to pay for training and certifications.

I knew of more than a few that started as a grunt at an MSP (managed services provider) and soaked up all they could and kept getting promoted or moved to other MSPs. They’re great for learning hands on and quickly. Or go get a diploma or something.

Get your hands on some used computers, and maybe an 8-16 port switch, then dive into the world of home lab! Setup your own servers and network stacks. Deploy services, containers etc.

Hell, you’d be surprised at how involved setting up a headless Linux Minecraft server can be if You’ve never done it. Little projects add up to a lot of hands on experience you just don’t get from a book.

Start at a temp agency

Plenty of good suggestions in this thread. I’ll add on that I recommend you read Alyssa Miller’s “Cybersecurity Career Guide”. It will answer many of your questions and provide you a roadmap to land your first job. https://www.manning.com/books/cybersecurity-career-guide?ar=true&lpse=A

Learn Terraform. It’s easy and in very high demand right now.

If you want to have a taste of the basics you should check out the OWASP juice shop, basically a game-ified insecure web application to poke holes into. It has tutorials, an achievement system and the different challenges all have a difficulty rating.

https://owasp.org/www-project-juice-shop/

I grew up with a laptop accessible and computers in the 80s with DOS and OS/2 for my entire childhood and KNEW that’s what I wanted to do as a career for the rest of my life. My parents were encoraging and always were willing to get the newest computer tech as it came out during the boom in the 90s and 2000s. I was the go to tech guy in my family and group of friends. I learned everything I could all the certifications I could to keep on top of changing trends. I went to tech school and graduated top of class, double majoring in computer engineering and mechanical engineering. I learned networking and the ends and out of programing, absorbing as much as I could to be the best that I was. I was in the tech field for 25 years and did everything from being a cable grunt to being the VP of a company, and everything in-between.

Each passing year, it got harder for me to justify being in the field. I always wanted to help people, make their day better by fixing what they couldn’t. I loved the challenge. The more tech companies I worked for, the more I saw that things were always about the betterment of the company and shareholders and stopped valuing the customer. I was in the middle of watching jobs being shipped to countries that produced cheaper, unreliable equipment while prices continued to rise. I was replaced by someone who sat with flip cards in a country thousands of miles away because of cheap labor, even when I wasn’t being paid liveable wages. I worked for large companies, smaller companies, local companies, and saw at the end of the day that no one cared about taking care of customers and treated tech workers like numbers and expendable. It become how much can you get away with while paying the least amount of money and maximizing profits, all at the expense of the good tech workers. You won’t find good tech workers anymore. You’ll find people who put up with the BS because they either feel like they have no choice or they’ve given up their ethics and drank the juice. The tech field is oversaturated by under qualified individuals who will work for far less than anyone is worth and be sold to the consumer as being premium.

After 25 years, I said I was done. I don’t recommend anyone goes into the tech field. All of the joy that you feel now about it will be absolutely stripped away and destroyed. Let the companies continue to dig themselves deeper with terriblely contracted 3rd world and communist country workers who should be shut down for crimes against humanity. I don’t say any of this to be negative toward a potential career path. It took me walking away and being removed for years ro realize how much I was willing to put up with the justify the existence of what I was doing and how much time I felt like I wasted helping soulless companies and individuals further their agenda while giving up parts of myself that I’ll never get back.

Anytime anyone mentions I’m the computer guy now, I shut it down as quick as they can get it out. I might do a favor for someone here and there, but it’s all but gone.

Instead, find something that is a passion that can help humanity. With my incredible partner of 5 years, we started a non profit animal rescue. In the span of our working to build our community and our nonprofit, which has been right at 3 1/2 years now, I’ve found that we’ve done far more good in the world than I ever did in my 25 years the tech field. There are days, just like in the field, that I’m exhausted and drained, and have ups and downs, but I feel like my soul has been liberated. That I’m doing good for others, both the animals and those that seek assistance, other than corporations that and individuals at those corporations that wouldn’t know my name or accompishments 5 minutes after departing.

And if you love what you do in the tech field, then by all means, find your way. If you talked to anyone who I worked with and managed in the field, I was always positive and encouraging, and quick to defend being in the field. Just know there is a chance that things may not be what you want them to be the further you get into the field. If you start to see cracks in the facade, know that they probably run deeper than what you see. Don’t ever give up parts of yourself, your ethics, or your being for anyone.

Good luck.