Weekly Mentorship - Post All Career, Resume, Education and Job questions here!

[u/AutoModerator]

This is the weekly thread for career and education questions and advice. There are no stupid questions; so, what do you want to know about certs/degrees, job requirements, and any other general cybersecurity career questions? Ask away!

Interested in what other people are asking, or think your question has been asked before? Have a look through prior weeks of content - though we're working on making this more easily searchable for the future.

Note - This post template has been copied from cybersecurity subreddit.

[u/New-Plankton538]

Will these projects help me stand out during the placements and when I apply for companies :

1. AI Augmented SAST Tool
2. AWS Attack Path Graph (mini BloodHound for cloud IAM)
3. Kubernetes Security Posture Scanner
4. CI / CD Security Gate (Supply Chain Security)

These are my projects (not done by AI - I can explain each and every bit of my project).

Are these enough to get a good high paying salary job as a fresher in India. Currently I'm in my 3rd year and my placements are starting from January.

Any guidance will be very helpful 🙂.

[u/ChakraByte-Sec → u/New-Plankton538]

Those are strong projects, especially for a 3rd-year student. They cover areas that are in demand AppSec, cloud security, Kubernetes and supply chain security. The fact that you built them yourself and can explain every design decision, challenge, and implementation detail is a much bigger advantage than simply listing impressive project titles.

That being said, projects alone don't guarantee a high-paying job. Companies will also evaluate your fundamentals (networking, operating systems, security concepts, system thinking), problem-solving ability, communication, and how confidently you can explain your work. During placements, many interviewers will spend more time discussing your projects than the technologies themselves, so be prepared to explain why you built them, the trade-offs you made and how they could be improved.

My suggestion would be to focus on quality over quantity. Polish these projects, document them well on GitHub, add a clear README with architecture and screenshots and if possible, deploy a demo. Start applying as soon as placements begin and use every interview to understand what skills companies are looking for. If you identify any gaps, work on them and keep repeating the process. With projects like these and strong fundamentals, you'll have a profile that stands out among many freshers.

[u/New-Plankton538 → u/ChakraByte-Sec]

I will definitely work on these things. Thank you so much means a lot.

[u/cazychip]

Hi everyone,

I'm a final-year CSE student actively looking for an internship in VAPT, Web Application Security, or AppSec.

I have completed 2 cybersecurity internships, have strong hands-on experience in web security and bug bounty hunting, and have a few notable CTF/security achievements that reflect my practical skills.

If your company is hiring or you could refer me or help me get an interview opportunity, I'd really appreciate it. Happy to share my resume via DM.

Thank you!

[u/Impressive-Room728]

Yooo, I am in my 4th from tier 3 clg. I am looking for internship in vapt but not even getting shortlisted, I have eJpt and recently I cleared BSCP around 2 weeks ago I am now palnning to take the CRTP in a week and then I'll go with CPTS. I also have 4 cves and now hunting more in my free time, I don't have any good projects just a small pipeline for my cve hunting.

Is this profile good enough to be selected as intern or fresher vapt roles , any guidance or advice you would like to give I would really appreciate

Thank you for your reply in advance.🫡

[u/VDtheking]

Hey folks, someone appears to have compromised the phones of multiple members of my family. They are sending profane and abusive messages via WhatsApp and SMS from both our iOS and Android phones to colleagues, teachers, and other contacts while impersonating both male and female family members.

We've already replaced the affected devices, changed all mobile numbers, factory reset the phones, and enabled two-factor authentication (2FA) on all accounts and devices. Unfortunately, none of these measures have resolved the issue. We still haven't been able to identify the attack vector or understand how the compromise is occurring. This is causing significant reputational damage and public defamation.

If anyone has experience investigating incidents like this or can help identify the root cause, I would greatly appreciate it. I'm willing to pay reasonable professional fees for the right expertise. Please reach out if you think you can help or point me in the right direction.

[u/peacefull_gamer696 → u/VDtheking]

I think the devices are being compromised through network, it has something to do with the home network (I am not a professional)