How to pursue a job in IT and prepare for cybersecurity

By: The Capella University Editorial Team with Bradly E. Roh, PhD, DBA and Interim Dean and Vice President for the School of Business, Technology and Health Care Administration

Reading Time: 8 minutes

As organizations continue focusing on data protection and threat prevention, many professionals are exploring cybersecurity-focused information technology (IT) roles. Cybersecurity especially can feel competitive for candidates who are still building technical knowledge and practical experience.

For many cybersecurity roles, preparation may involve a combination of foundational IT skills, certifications and hands-on learning through labs or projects.

Pursuing cybersecurity work often requires more than interest alone. It may also involve building technical skills over time, understanding different education and certification pathways and finding opportunities to apply what you learn in practical settings.

Learn how to pursue cybersecurity roles, from choosing an education pathway to building experience.

Ready to start your cybersecurity preparation? Explore Capella’s Bachelor of Science in Information Assurance and Cybersecurity.

Do you need a degree to pursue a cybersecurity role?

Cybersecurity positions don’t always require a formal degree. Some people enter the field through certifications and self-study. Others may build their way up from help desk positions, learning security concepts on the job.

That said, analyst-level positions, especially in regulated industries like finance and healthcare, typically require structured technical education alongside industry certification or experience.

Degree programs can give you that foundation, covering everything from networks to compliance frameworks, before you pursue a cybersecurity role.

For example, with Capella University’s Bachelor of Science (BS) in IT, Information Assurance and Cybersecurity, you learn to design and implement secure network architectures, apply security policies to manage risks and study core concepts such as identity and access management as part of data protection.

What you learn in an IT degree program is designed to connect to the work you do in the field. You might monitor network traffic for unusual patterns using the principles of secure network architecture, or respond to security incidents by applying incident response protocols. Your job might also include verifying that systems align with compliance standards.

So, while a degree isn’t the only path, having a degree prepares you with the skills and knowledge required to handle workplace responsibilities.  

Common entry points into cybersecurity

Understanding which entry points match your background helps you target roles for which you’re better prepared.

If you’re new to IT or switching careers

Look for IT positions that can help you build your tech skills. For example:

• Help desk roles teach you how to troubleshoot user issues and communicate technical concepts to non-tech people. They help you understand system configurations so you can mitigate unauthorized access risks and prevent exploitation of system vulnerabilities.
• Technical support positions expose you to network infrastructure. You learn to deploy software and document incidents. You also gain systems knowledge and problem-solving experience, crucial for security work.

After building your base, you may find other cybersecurity opportunities. These roles typically involve monitoring and investigating potential threats and assisting with incident response under the guidance of seniors.

If you’re already working in IT infrastructure or systems administration

Target security-focused roles like junior security analyst positions and security operations center (SOC) roles. These positions fit professionals who already understand how systems and networks function.

Say you hold a BS in IT and are working in systems administration. With your practical experience, you might be interested in roles like an IT security analyst. In this role, your day-to-day responsibilities might include monitoring and investigating security alerts and participating in SOC workshops to enhance your skills.

As you gain security-specific experience, roles such as cybersecurity engineer or information systems security officer might become accessible. With additional experience, professionals in these roles may pursue positions such as cybersecurity engineer, penetration tester or cybersecurity manager.

While the progression looks different depending on where you start, both paths may lead to the same range of mid-level and senior cybersecurity positions over time. However, your real-world experience might differ based on the degree or academic certificate program you have completed.

How to prepare for a cybersecurity role

The preparation for cybersecurity roles involves more than earning a degree or certification. You’re generally evaluated on technical knowledge, credentials and proof of work.

Start with the right education pathway

If you’re switching from another field or entering IT for the first time, a BS in Information Technology, Information Assurance and Cybersecurity program gives you the technical foundation alongside cybersecurity-specific skills.

If you already work in IT and want to explore cybersecurity-focused roles, a Master of Science in Information Technology, Cybersecurity specialization will help you build on what you already know. You’ll study threat intelligence and learn to analyze security attacks using software like Wireshark and NetWitness. You’ll also work on applied IT projects to gain real-world experience.

At Capella University, both pathways are designed for professionals who need flexibility. The bachelor’s program is available in two learning formats:

• FlexPath: a self-paced learning format where you set your own deadlines and complete coursework at your own speed.
• GuidedPath: a structured learning format offering 24/7 access to the course room with set deadlines to help you stay on track.

The master’s degree program is only offered in the GuidedPath learning format.

“Working full time as a network technician meant I need to take classes at times that would work for me. Capella checked off all the boxes! The flexibility was outstanding. The material that Capella used in their classes provided real world examples of IT industries. I felt that these gave me greater insight into not only how things work but to think more strategically.”

–Will Resendes, BSIT, Capella University alum

Compare the two learning formats to see which one fits your life.

Stack certifications strategically

Certifications work alongside your degree and sometimes are even built into the coursework. While your degree establishes the baseline, industry certifications validate skill application in practical scenarios.

You can pursue basic certifications during your degree program or shortly after graduation to strengthen your candidacy. Start with certifications.

• CompTIA Security+: Covers essential topics like network security, threat detection and cryptographic principles. It validates that you grasp core security concepts.
• CompTIA Network+: Focuses on network infrastructure and troubleshooting. While not security-specific, it gives you the core network concepts that support security work.

As you gain work experience, you might progress to advanced certifications.

• Certified Information Systems Security Professional (CISSP): Requires five years of paid work experience in at least two of the eight ISC2 CISSP domains. It shows you understand advanced security principles and can tackle enterprise-level challenges.
• Certified Ethical Hacker (CEH): Offered by the EC-Council, CEH focuses on penetration testing methodologies. It provides a comprehensive understanding of ethical hacking tools and techniques.

Build practical experience through labs and projects

The challenge for some professionals who are just starting out in IT is that most cybersecurity roles list experience as a requirement. Here’s how to start building it even without an IT job title.

• Home labs and virtual environments: Practice security concepts in controlled settings. Set up virtual machines using tools like VirtualBox to simulate network configurations. Test vulnerability scanning and practice incident response scenarios. You can experiment in these environments without risking production systems.
• GitHub portfolios: Showcase your technical work using GitHub. Create a GitHub account and upload scripts for automating security tasks. Document penetration testing projects or share code for security tools you’ve built to highlight practical abilities.
• Open-source contributions: Find open-source cybersecurity projects like OWASP and contribute by fixing bugs, improving documentation, adding features or analyzing malware to demonstrate your skills.
• Technical blogging: Document what you learn. Write about security concepts you’re studying or explain the tools and techniques you have practiced in your home lab. You can also walk through how you solved a specific technical challenge to reinforce your own understanding of concepts.
• Voluntary technology work: Help organizations that need tech or security support. For example, nonprofits often lack dedicated IT security resources. Offer to audit their systems and help implement security policies to safeguard assets. You can also train their staff on basic security practices.

Neither Strategic Education, Inc., Capella University, nor any of their affiliates promotes, endorses or has any business relationship with products or programs listed above.

Network within cybersecurity communities

Professional connections help you access opportunities that aren’t publicly posted. Building relationships with people already working in the field opens doors to mentorship. It also gives you an insider perspective on what companies are actually looking for.

• Attend local security meetups and conferences: Join local meetings by groups like OWASP Chapters. You can also participate in events by the BSides Global Community that bring together IT security professionals at different career stages.
• Join online communities: Forums like Reddit’s r/cybersecurity or Discord servers dedicated to cybersecurity learning. They allow you to access shared resources and also collaborate on study and Q&A sessions with peers.
• Optimize your LinkedIn profile: List relevant degrees and certifications. Add projects you have worked on. Follow cybersecurity professionals and companies you’re interested in and engage with their content to boost visibility.
• Conduct informational interviews with professionals: Reach out to IT security professionals through LinkedIn or email and ask if they’d be willing to talk for 20 minutes about their path into the field. This will help you learn more about the industry and explore cybersecurity roles.

Capella’s Career Development Center and other cybersecurity networking resources help active students and alumni connect with industry professionals for conversations and practical advice. These networking experiences can help you explore career paths and gain valuable real-world guidance without a formal mentorship program. 

Position yourself for cybersecurity roles

Prepare a resume that includes specifics, such as the tools you have used and the security challenges you have tackled, along with their outcomes.

Once your resume is ready, look for openings on company pages and job boards. Tailor each application to the role. For instance, if the posting emphasizes threat detection, highlight your experience monitoring security events in lab environments. If they mention compliance, reference your work with relevant frameworks.

Take the next step toward your cybersecurity role

Building toward a cybersecurity role often involves developing technical knowledge, practical experience and industry-focused skills over time.

Your next step is identifying the pathway that aligns with your background and goals.

Capella University’s cybersecurity programs are designed for students at different stages of experience, from foundational IT and cybersecurity concepts at the bachelor’s level to more specialized cybersecurity study at the master’s level.

As cybersecurity continues to evolve, building adaptable technical skills and practical experience is essential to help you stay prepared for new challenges and opportunities across the broader IT landscape.

Explore Capella’s information technology programs to find your best fit.