These are the resources I point candidates to when they ask how to get job-ready in cybersecurity. I recruit in this market every week, so this list is based on what actually helps people get hired, not what pays the most.
Disclosure: some links on this page are affiliate links. If you buy through them I may earn a commission, at no extra cost to you. It never changes what I recommend.
Start with my own resources
- Cybersecurity Job-Ready Blueprint: my complete, recruiter-backed plan for breaking into cybersecurity. The skills to learn, the certs to get (and skip), 5 portfolio projects, resume and LinkedIn fixes, and a 90-day action plan. If you only buy one thing on this page, make it this. Get the Blueprint
- The Career Compass Playbook: my 110-page playbook for any career move. Resumes, LinkedIn, interview answers and salary negotiation scripts, with templates and trackers included. Get the Playbook
- Free Career Path Explorer: not sure which cybersecurity role suits you? Find the path that fits your background in a few minutes.
- My YouTube channel: practical advice on breaking into cybersecurity from the recruiter's side of the desk.
- 1:1 with me: want a recruiter to look at your situation personally? Book a Career Strategy Session or a Resume + LinkedIn Video Review. Spots are limited each month.
The certification to get: CompTIA Security+
If you're breaking into cybersecurity, CompTIA Security+ is the gold standard. It's the certification I tell candidates to prioritise, and the one employers recognise straight away. Get Security+ first, then specialise.
- CompTIA exam vouchers: coming soon to my store.
- How to prepare: the Job-Ready Blueprint covers when to sit Security+, how it fits your 90-day plan, and which certs to leave until later.
Build hands-on skills
- TryHackMe: the best place to start practising. Do the Pre Security and SOC Level 1 paths alongside your Security+ study.
- Hack The Box Academy: the next step once TryHackMe feels easy. Completed modules and write-ups make great talking points in interviews.
- Google Cybersecurity Certificate (Coursera): a structured introduction if you're coming from outside IT and want a guided path before Security+. Think of it as a foundation, not a replacement for Security+.
Practise good security yourself
- Proton Pass or 1Password: use a password manager. If you're going to work in security, start with your own accounts.
- YubiKey: a hardware security key for your email and important accounts. It's the easiest way to understand why employers care so much about MFA.
Prices and offers change. I review this list regularly and remove anything I stop recommending.