# Job search strategy

## Learning objectives

* Identify your target job role, industry, and companies
* Analyze your skill gap for the role
* Create a skill development plan
* Tailor and optimize your CV for the role
* Become familiar with the job interview process

In the high-stakes world of recruitment, where a decision-maker's attention is often measured in seconds, a recruiter may only have the bandwidth to champion one or two candidates from a pile of applications. To earn that coveted spot, your candidacy must be undeniable before you even enter the room. This requires a deliberate strategy that begins long before you submit an application. The following steps will guide you through building a competitive edge from the ground up, starting with identifying the right role, bridging your skill gaps, and optimizing your resume, all the way to mastering the nuances of networking and interview preparation.

## Topics covered in this section

* **Identify your target job role**
* **Identify your target companies**
* **Identify your skill gap**
* **Create a skill bridge plan**
* **Resume optimization**
* **Networking and outreach**
* **Conduct informational interviews**
* **Job interview preparation**
* **Breaking into infosec (newcomers)**

### Identify your target job role

* Determine the income range acceptable for you.
* Identify the job role (job title) that matches your skills, interests, and income requirements.
* Consider at least 3 job roles. Fill in the following table with the qualifications required for each role and note any gaps between your current skills and the job requirements.

**Job role selection grid (example):**

| **Job title**         | **Skills/qualifications required**                                       | **Skills you have**     | **Skills you need**                  |
| --------------------- | ------------------------------------------------------------------------ | ----------------------- | ------------------------------------ |
| Network Administrator | IP connectivity, IP services, CCNA, Linux                                | Linux, Cisco IOS CLI    | IP connectivity, IP services, CCNA   |
| Incident Responder    | OS (Linux, Windows, Mac), Packet analysis, SIEM tools, CompTIA Security+ | Windows, Mac, Wireshark | Linux, SIEM tools, CompTIA Security+ |
| Penetration Tester    | IT networking, Kali Linux, CEH (EC-Council)                              | IT networking           | Kali Linux, CEH (EC-Council)         |

* Start researching the role's skill/knowledge/credential requirements ASAP.
* Consider how much time you'll need to bridge the skill gap (three months? Six months? Three years?)

### Identify your target companies

* Job applications: Directly (Cisco, Huawei, Apple, etc.) and indirectly (recruiters, job boards, job sites, etc.).
* Compile a list of 20+ target companies hiring for your desired job role.
* Identify the skills/qualifications expected at these companies for the job role.
* Gather background information about the companies - history, culture, projects, products/services, etc.
* Create a "wishlist" spreadsheet/an inventory of target companies (e.g., Company Name, Mission/Vision, Projects, Products/Services, Revenue, Employee Count, Competitors, Headquarter Location, Subsidiaries, etc.).
* Use resources such as Huntr.co to organize your job search activities and findings.
* Use LLMs/AI chatbots such as ChatGPT, Gemini, DeepSeek, etc. to research company information.

### Identify your skill gap

* Use the list of 20+ companies to identify the expected skills for the target job role.
* Research recent job ads (20+ job descriptions) for the role and extract main skills expected for the role.
* Conduct a gap analysis: Identify your skill gap (skills, experience, and certifications).

**Skill gap analysis table (example):**

| **Skill/certification**                                                                                                                       | **Required for role** | **Current level** | **Gap/notes**                                                                                                        |
| --------------------------------------------------------------------------------------------------------------------------------------------- | --------------------- | ----------------- | -------------------------------------------------------------------------------------------------------------------- |
| <p>Active Directory (AD) on Windows Server</p><p><br></p><p>Powershell, IAM - database and service, DNS server, DHCP server, group policy</p> | Asset                 | Missing           | <p>Need hands on training setting up AD</p><p><br></p><p>Windows Server 2000 and later includes Active Directory</p> |
| Backup and disaster recovery                                                                                                                  | Yes                   | Missing           | Need hands on training in backup and disaster recovery                                                               |
| Network availability monitoring - NMS                                                                                                         | Yes                   | Missing           | Need hands on training - Nagios / OpenNMS                                                                            |
| Network performance monitoring - NMS                                                                                                          | Yes                   | Missing           | Need hands on training - MRTG (SNMP based) / CiscoWorks                                                              |

### Create a skill bridge plan

* Create an action plan to address the skill gap.
* Set **SMART** goals (example):
  * **Specific**: Complete Udemy course: Mastering Active Directory: Administration and Fundamentals.
  * **Measurable**: Study 5 hours/week and set up a test environment.
  * **Achievable**: Udemy's course is for beginners and is highly rated.
  * **Relevant**: Required for target role.
  * **Time-bound**: Achieve proficiency within 2 months.
* Plan in terms of weeks, months, and years.
* Consider courses, hands on projects, industry certifications, seminars, etc.

**A three-month action plan (example):**

| **Skill**                               | **Timeline**                                                                                | **Resources\***                                                                                                                                                                                                                                                                                                                                                 | **Tasks\*\***                                                                                        |
| --------------------------------------- | ------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------- |
| Active Directory (AD) on Windows Server | <p>Mar. 3 - Mar. 9</p><p><br></p><p><br></p>                                                | <https://www.udemy.com/course/active-directory-administration-for-helpdesk-technicians/>                                                                                                                                                                                                                                                                        | <p>Complete Udemy course: Mastering Active Directory: Administration and Fundamentals</p><p><br></p> |
| Backup and disaster recovery            | <p>Mar. 10 - Mar. 23</p><p><br></p><p><br></p><p><br></p><p><br></p><p>Mar. 24 - Apr. 4</p> | <p><a href="https://cybercademy.org/build-a-backup-server-in-linux-project-overview/"><https://cybercademy.org/build-a-backup-server-in-linux-project-overview/></a></p><p><br></p><p><a href="https://www.cbtnuggets.com/tutorials/encrypt-data-at-rest-with-linux-tools"><https://www.cbtnuggets.com/tutorials/encrypt-data-at-rest-with-linux-tools></a></p> | Build a Linux (Ubuntu) encrypted backup and recovery server                                          |
| Network availability monitoring - NMS   | <p><br></p>                                                                                 | <p><a href="https://www.nagios.org/"><https://www.nagios.org/></a></p><p><br></p><p>Chapter 5. Monitoring Network Availability in Deveriya (2005, p. 288)</p><p><br></p><p><br></p><p><br></p>                                                                                                                                                                  | Deploy Nagios for Linux-based (Ubuntu/Debian) network monitoring                                     |
| Network performance monitoring - NMS    | <p><br></p>                                                                                 | See training resources sheet                                                                                                                                                                                                                                                                                                                                    | Deploy MRTG (SNMP based) on a small Linux (Ubuntu/Debian) network                                    |

\*Resources: Create a detailed training resources sheet.

\*\*Tasks: Courses, hands on projects, industry certifications, seminars, etc.

### Resume optimization

* Tailor your resume to the target role.
* Tailor your applications to the target position and target company.
* Optimize your resume for ATS (use resources like Huntr.co).
* Keep the professional summary brief (1–3 lines).
* Submit as a Word document (not PDF) for recruiter edits.
* Use simple formatting—avoid complex columns/fonts.
* Limit length to 2–3 pages, even with extensive experience.
* Roles older than 10 years need only basic details (company, title, dates), or drop.

**ATS compliant resume example:**

<https://docs.google.com/document/d/e/2PACX-1vQKiwHcCki0Nn7k-gbPy3AFlrHysn0M1CyEI5-NVVlO4TlX3BEmgvDNLwcC_DTZV5is_xHMVNbWTi6f/pub>

### Networking and outreach

* Update and tailor your LinkedIn profile (maybe also your X/Twitter profile).
* Create Glassdoor and Indeed profiles.
* Grow your connections (e.g., seven new industry professionals/week from your target companies/industry).
* Build professional connections (connect, comment, message, etc. industry professionals).
* Schedule informational interviews with connections for information about the job role, industry trends, and opportunities.
* Participate in webinars, virtual meetups, or networking events to learn about job role requirements and career opportunities.

### Conduct informational interviews

* Reach out to professionals in your target industry/companies for informational interviews using social media/job hunting platforms (Glassdoor, LinkedIn, Twitter/X, etc.).
* Gain valuable insights into company culture, job requirements, industry trends, organizational structure, etc.
* Use informational interviews to identify any gaps in your resume, skills, or certifications.

### Job interview preparation

* Build a story toolbox:
  * People remember stories more than facts.
  * Use the **STAR** method to help structure your stories (where there's "action" or accomplishments to communicate):
    * **S - Situation:** Describe the context or problem.
    * **T - Task:** Explain your responsibility or role.
    * **A - Action:** Detail the actions you took to solve the problem.
    * **R - Result:** Explain the outcome/impact you made.
  * Prepare at least two stories demonstrating problem-solving skills, interpersonal skills, handling/learning from conflicts and mistakes.
* Prepare (and practice) responses to common and expected interview questions.
* Practice mock interviews with friends/acquaintances/career coach/yourself.
* Demonstrate cultural/organizational fit (alignment of values, mutual gains).
* Demonstrate your ability to get the job done and add value/make a difference.
* For skills you don't have yet:
  * Emphasize and give examples of your fast learning capabilities.
  * Give examples of similar skills/experiences.
* Ask probing/follow-up questions (tailor your responses to their concerns).
* Make a strong first impression:
  * First impressions form in a fraction of a second and can be lasting, so present yourself confidently.
  * Non-verbal communication (body language, tone, posture) plays a huge role—perhaps some 90% of communication is non-verbal.

**Common interview questions:**

<https://docs.google.com/document/d/e/2PACX-1vSUhHKxH_qq0YO_R0f_3oNNPxle_HylW2CveXoqLDF59JSxuWxUde5FDS1OIUlq4VjvUGHp4D4jARiM/pub>

### Breaking into infosec (newcomers)

Consider:

* Within an organization, transferring to a security role.
* Seeking mentorship from infosec professionals.
* Gaining experience through volunteer work or internships.
* Attending industry conferences (e.g., BSides) and local meetups (ISSA, OWASP, etc.).
* Completing courses and hands on projects, and obtaining industry certifications.
* Finding a reputable external recruiter.

### Key takeaways

* Start your IT and cybersecurity career by selecting a job role.
* Research the industry skills for the role and create a skill development plan.
* Tailor your resume for the target role.
* Start building a professional network ASAP.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://dti-techs.gitbook.io/practical-foundations-in-cybersecurity/1.-it-career-planning/job-search-strategy.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.