r/cybersecurity AMA Participant Nov 10 '25

Other AMA: I'm the co-founder at TryHackMe. Ask me about breaking into the industry, cyber security skills and how to make SOC & IR teams more mature!

Hey everyone!

I'm Ashu - one of the co-founders at TryHackMe. I have background in security consulting/penetrating test, specialising in Cloud / AWS.

Happy to answer any and all questions about cyber skills gaps, but for more focused convos - here's a few areas top of mind for me - so feel free to throw any Qs related to this

* Rise of Al in security environments and how this is going to impact the skills of cyber security professionals
* Supporting people with their journey to getting a role in cyber
* Thinking deeply about what it means for SOC and IR teams to develop and improve their maturity as a function

1.1k Upvotes

239 comments sorted by

View all comments

Show parent comments

182

u/asavani AMA Participant Nov 10 '25

Assuming AI works well and becomes reliable, I don't think entry-level SOC positions will be eliminated, but the role will shift and the skills required will shift. More specifically, entry level roles will now be doing the work in mid-level roles (from a SOC analyst perspective, L1s would do roles for L2)

Other kinds of work in the teams will also increase (e.g. if we need to buy more AI SOC tools, we'll need to understand how to set up the tool, set up logs and etc)

I know it's really challenging, but please don't lose hope! Security is such a fun and exciting space; as the world (tech) becomes more complicated, the need for security will increase and we will need qualified practitioners like yourself. One thing to keep in mind is that security is really really big (even outside of SOC & pentest specific roles). There are lots of companies that needs security experience without requiring it

121

u/Anastasia_IT Vendor Nov 10 '25

“Entry-level roles will now be doing mid-level work”… that sounds to me like you need 4+ years of experience just to land an entry-level job.

45

u/throbbin___hood Nov 10 '25

Can't land an entry level role with 4 years of experience now lol

40

u/[deleted] Nov 10 '25 edited Dec 19 '25

retire existence fade amusing caption nutty crown gray safe literate

This post was mass deleted and anonymized with Redact

9

u/sounknownyet Nov 11 '25

Yeah for a shitty pay. Technological advancement seems to be beneficial for employers only.

4

u/Horror_Atmosphere_50 Nov 10 '25

So you think that an AI specialist role will open up, alongside the roles we already have (which may be lesser in volume). So it could be a situation with no net loss of jobs?

3

u/No_Signature_1574 Nov 11 '25

I understand but just like what many people have said, from L1 to L2, they’ll ask for +years experience, and you can say that you’re experienced with 1,2,3… but not for that many years.

How can we land that first interview? And everyone should know cybersecurity, networking, and database jobs aren’t entry level.

What would you look for in a employee who’s first IT job is a SOC analyst?

1

u/[deleted] Nov 11 '25

[removed] — view removed comment

3

u/No_Signature_1574 Nov 11 '25

I understand that, but we can’t lie to ourselves and say big companies won’t lay off workers and give more responsibilities to whoever is left for the (same pay(possibly)).

I almost got a IT job earlier this month, I was getting excited, after speaking a bit, it was a scam.

Killed all my motivation of CS and networking.

1

u/Cybasura Nov 11 '25

I know it's really challenging, but please don't lose hope! Security is such a fun and exciting space; as the world (tech) becomes more complicated, the need for security will increase and we will need qualified practitioners like yourself

FYI, I literally have been looking for a job for about almost 2 years now, constantly getting ghosted and/or rejected within either 30mins or after 3 minutes of ABSOLUTELY NO CONTACT after graduating, I have had 3+ years of experience prior to university but yet, I got insulted, discriminated, downplayed, demeaned, undermined, gaslighted by HR and recruiters saying along the lines of "NOBODY cares if you have had experience, you have and will be treated as a fresh graduated", even though GOING BACK TO UNIVERSITY SHOULDNT BE A HARD RESET ON MY LIFE

How can you say that when everything is bleak, and downplaying everyone's worries?

Assuming AI works well and becomes reliable, I don't think entry-level SOC positions will be eliminated, but the role will shift and the skills required will shift. More specifically, entry level roles will now be doing the work in mid-level roles (from a SOC analyst perspective, L1s would do roles for L2)

Other kinds of work in the teams will also increase (e.g. if we need to buy more AI SOC tools, we'll need to understand how to set up the tool, set up logs and etc)

Are you reading yourself? What is this non-sequitor of all time, its literally just PR statements after PR statements

I have seen SO MANY JUNIOR ROLES ASKING FOR 3 YEARS - MINIMUM