This word has appeared in 60 articles on NYTimes.com in the past year. Can you use it in a sentence?
How to Break Into Cybersecurity Without a Degree
This past year, the job market saw 514,359 listings from public and private employers, all hunting for cybersecurity specialists or tech talent with serious cybersecurity skills.
As tech continues to transform our lives, more people are needed to defend these technologies and keep up with their advancements, says Okey Obudulu, Chief Information Security Officer (CISO) for Skillsoft, the company that Codecademy is proud to be part of. “The blatant attacks on companies’ networks have led more and more companies to really get serious around the demand for cybersecurity professionals,” he says.
Cybersecurity is an umbrella term for protecting computer systems, networks, people, and organizations from online threats and bad actors. The roles within a cybersecurity team range from Penetration Testers who hack into an organization’s network to uncover vulnerabilities, to Incident Response Analyst who are essentially detectives who solve crimes with digital data.
Learn something new for free
A lot of cybersecurity professionals get their start in other technical jobs, like Software Developer or Network Administrator, explains Ricki Burke, founder of CyberSec People, a global cybersecurity recruitment and staffing company. With the right cybersecurity skills on your resume, you can feel confident about breaking into the industry.
Curious which skills cybersecurity recruiters are looking for in job-seekers? Here are the programming languages, technical capabilities, and marketable skills you should know about to get a job in cybersecurity.
When you’re ready to start learning, take a look at our updated cybersecurity catalog with 30+ free courses that teach you foundational cybersecurity skills. These video-based courses are a great way to prepare for popular cybersecurity certifications.
We also recently added new certification paths that are built around the exams from top industry leaders like AWS, Google Cloud, and Microsoft Azure. Each curriculum is designed to get you exam-ready, with realistic practice tests to boost your confidence and pinpoint areas for review. When you’re set, we’ll even guide you through scheduling your certification exam.
Not chasing certifications? No problem. Our skill-based paths focus on hands-on learning through real-world projects. Whether it’s mastering Data Analytics with Snowflake or automating workflows with courses like Automated Testing with Selenium, there’s something here to help you level up.
4 cybersecurity skills to learn next
Coding
One of the most in-demand cybersecurity jobs is a Security Engineer, which is a programmer who can design secure systems and software, Ricki says. “When I talk to a lot of security companies, their version of a modern security professional can code, they can build, and they can problem-solve through automation,” he says.
The role of a Security Engineer is a lot like a Software Engineer, so coding and scripting knowledge is a must-have, Ricki says. It’s pretty common for developers to pick up some security-specific skills and then transition into the cybersecurity space, he says.
The more technical skills you grasp, the more opportunities you’ll have to contribute across a broader domain, Okey says. If you’re just starting your coding journey and wondering what you should learn, these are the programming languages that are used in cybersecurity:
Feel confident in your coding abilities, but want to know more about cybersecurity? Check out our skill path Fundamentals of Cybersecurity to learn the attack techniques that threat actors use to gain access to computers and systems, and strategies that can protect you.
Threat-hunting
According to Ricki, there are lots of opportunities for jobs within SecOps, which is the term for IT and security teams who work with the security operations center (SOC). “Security operations essentially are like the defenders of the company or organization,” he says. Threat Hunters, for example, are Security Analysts who proactively look for threats in systems. (You can think of Threat Hunters as kind of like security guards at a museum who are always on the lookout for intruders.)
Mature companies with robust cybersecurity teams often hire Threat Hunters to comb sources and accumulate “threat intelligence,” Ricki says. These people need to know how to gather intelligence and analyze it using techniques like packet-sniffing. In our course Introduction to Ethical Hacking, you’ll learn about the tools used in packet-sniffing and get to practice using the network analysis tool TCPDump to perform packet analysis.
In order to be successful in these types of roles, you need to have an in-depth understanding of not only the technology used to find threats, but also how your findings correlate to the industry at large. “Business context is fundamental,” Ricki says. “You can be the best hacker in the world, but if you can’t explain what the vulnerabilities actually mean for business, then it means nothing.”
Automation
Understanding automation can give you a leg up when you’re applying for cybersecurity jobs, because companies rely on automating security tasks (like identity and authentication) as they scale, Ricki says. For example, an organization might want someone who can develop automation APIs that allow them to detect and triage cyber threats faster and more efficiently. You can learn how to build web APIs in our course Create REST APIs with Spring and Java, or take your API skills to the next level with API Development with Swagger and OpenAPI.
People in cybersecurity use Python to automate lots of tasks, like pentesting and SOC analysis. In a malware analysis, for example, Python can be used to automate the process of searching through files and ports. Want to learn Python? Our Python courses cover everything from machine learning to data analytics.
Risk management
“Cybersecurity is not just technology — it’s more of a risk management function,” Okey says. Organizations need people who can develop best practice standards around security and make sure people are following them. These jobs tend to be less technical, but they’re critical to a company’s safety, Ricki says. You can learn how to create industry-standard cyber resilience policies for individuals and organizations in our course Fundamentals of Cyber Resilience and Risk Management.
Larger companies typically have Governance, Risk, and Compliance (aka “GRC”) specialists within information security teams, Ricki says. These folks are responsible for establishing security frameworks, policies, and guidelines that protect an environment. For example, someone in a GRC role might train team members in specific security protocols, as well as assess the security risk of third-party vendors that an organization wants to use.
In certain sectors, like healthcare or finance, companies are looking for GRC professionals who have backgrounds in the field, because they have a high-level comprehension of the business’ broader needs, Ricki explains. “Say you’re a nurse who wants to become a security person: You know way more than some outsider coming into the business who has never worked in healthcare before,” he says. Don’t hesitate to leverage your past work experience or industry knowledge, because it could help you stand out in a pool of applicants.
Start building cybersecurity skills
Kick things off with our Introduction to Cybersecurity course, where you’ll cover network security basics, authentication, and ways to protect yourself from common cyber threats. From there, deepen your understanding with the Fundamentals of Cybersecurity path, tackling topics like phishing and other social engineering tactics. Want to approach security from a hacker’s perspective? Our Intro to Ethical Hacking course lets you do just that.
If certifications are your goal, our certification paths align with exams from leading organizations like AWS, Google Cloud, and Microsoft Azure. These courses prep you for the tests and also include realistic practice exams to build your confidence. When you’re ready, we’ll help guide you through scheduling your industry exam. Prefer focusing on hands-on skills instead? Check out our skill-based paths, like Data Analytics with Snowflake or Automated Testing with Selenium, to boost your expertise through real-world projects.
When you’re ready to land a cybersecurity job, our Cybersecurity Analyst Interview Prep path can help sharpen your skills for technical challenges and interview questions. Wherever you are in your cybersecurity journey, there’s a path here for you.
This blog was originally published in October 2022 and has been updated with recent data and new course launches.
Introducing Even More Learning Paths for Certification Prep & Skills Training
We’ve made some exciting updates to Codecademy Pro to help you take your career to the next level. As part of Pro, you now have access to 36 intermediate and advanced learning paths, featuring certifications like AWS Certified Machine Learning – AI Specialty, Azure Security, and Google Cloud Architect. On top of that, we’ve rolled out new skill-based paths that focus on mastering popular tools like Snowflake, Terraform, and generative AI.
These new paths go far beyond the basics. With curriculum designed by industry experts, you’ll gain the practical knowledge and expertise needed to ace critical tech credentials and open doors to exciting career opportunities. You’ll even get to practice with test questions that mimic actual industry certification exams. Pro members can start using these prep materials for no extra cost — start a free trial today.
And here’s something fresh: these paths are video-based with interactive features, and brought to you by Skillsoft, the learning company that we’re proud to call home. That means you’ll get to learn in a dynamic, engaging way that keeps things interesting while giving you real-world practice.
Who are these paths right for?
Not sure if these paths are right for you? Here’s who we had in mind:
- Mid-career professionals: If you’re looking to expand your current skill set or stay competitive in a fast-changing field, these paths are built to help you level up.
- Team leaders: If you’re preparing your staff to tackle cutting-edge tools, like AI-powered technologies, our new paths can help everyone on your team get up to speed together.
- Specialists in IT, DevOps, or data: For those aiming to advance in technical domains, these skill paths deliver step-by-step guidance to master advanced tools and concepts.
If you’re a beginner, don’t worry! We also have plenty of beginner-friendly paths, including entry-level certifications like CompTIA IT Fundamentals+, to help you build a strong foundation before moving into more advanced territory. Folks at all levels can benefit from certifications. They validate your expertise, open the door to job opportunities, and ensure you stay sharp and relevant throughout your career.
Learning together with Codecademy Teams
Thinking of upskilling as a team? A Codecademy Teams membership could be the perfect solution. With Teams, your group will gain access to the full catalog of over 600 courses and paths, including these new certification prep options. Codecademy Teams offers flexibility as your team evolves, with customizable learning paths, progress tracking, robust analytics, and unlimited seat reassignment.
Picture your entire team learning together, tackling hand-picked courses like IT Automation with Generative AI, or prepping for AWS certifications in unison. Teams memberships are a great way to ensure everyone works cohesively, speaks a shared technical language, and applies newly acquired knowledge consistently. Start a free 14-day trial of Codecademy Teams today.
What will you learn from the new paths?
The new certification paths are directly aligned with the exams from industry-leading organizations like AWS, Google Cloud, and Microsoft Azure. Each curriculum is tailored to help you meet certification objectives, equipping you with all the knowledge you’ll need to pass your exam. These paths also include realistic practice exams, helping you build confidence and identify areas where extra review might be needed.
When you’re ready, we’ll even guide you to schedule your actual industry exam with a third-party provider. The process couldn’t be smoother.
For those looking to gain skills rather than certifications, we’ve got you covered, too. Our newly launched skill-based paths focus on building practical capabilities through applied projects. For example, data professionals can expand their expertise with paths like Data Analytics with Snowflake and Advanced Snowflake. Software developers and QA teams might find courses like Automated Testing with Selenium or Terraform Expedition: Exploring Infrastructure as Code particularly helpful for tackling workflow optimization and project automation.
Explore what’s new
No matter where you are in your professional or technical development, our expanded Codecademy Pro and Teams offerings are here to help you push boundaries, master new technologies, and bring your career ambitions closer within reach. With expertly designed curriculums, hands-on projects, and comprehensive certification preparation, you’ll have everything you need to stay ahead in today’s rapidly evolving tech landscape.
Start exploring what’s new today and take the first step toward unlocking your next chapter of professional growth!
143 Picture Prompts to Inspire Student Writing
A school year’s worth of short, accessible image-driven posts that invite a variety of kinds of writing.
Word of the Day: humility
This word has appeared in 553 articles on NYTimes.com in the past year. Can you use it in a sentence?
‘He Replied With a Single Thumbs-Up’: The Week 3 Winner of Our Summer Reading Contest
“Asian parents don’t text their kids like they do in Western movies,” writes Ellena Lee, 15 — but a father’s love can show up in other ways.
Word of the Day: taqueria
This word has appeared in 29 articles on NYTimes.com in the past year. Can you use it in a sentence?
Common Questions About Learning Systems Explained
I never thought about it before. I see it all the time—and I suspect you do, too.
You take it for granted. Why would a restaurant, or at a “Farmers Market, ” or even a franchise misstate, okay, lie, about it?
Farm to Table.
I admit, upon reading the first article, I read the others.
Yes, it was from Tampa, and yes, it is from 2016; however, there is no doubt, at least in my mind, that it exists in your location or any place you visit that mentions “farm to table.”
Or, in the case of the “farmers market” from my farm (not mine, as I do not have one), it isn’t always the case.
The question then is, what will you or I do about it?
Will we ask to speak to the head of the restaurant, or in many cases, it is the manager who is there, to find out? I doubt the server will know.
Will we think about it? Will we forget until after we get home and then say, “Hmm, I should have asked..”
I bring all of this up because we often have questions when looking at buying any learning technology (Learning Systems, AI tools, e-learning tools, VR/AR, content creators, etc.) and even 3rd party content, whether you are hiring someone to build it for you, or you are purchasing it.
The Common with Learning Systems (LMS, Learning Platform, Talent Development, Combos)
It is very common for people looking to buy any learning technology (I now place learning systems under this overall umbrella term) or content to ask the typical questions that many people ask.
Many go so vague or ambiguous that every system has it, but the prospect isn’t aware, so they push out the common and then expect people to retort as though it is uncommon.
The List of Common Questions – If you are asking these, I can tell you every system offers it
Can accept videos – i.e., upload them to be used in their system
- Modern UI/UX that is easy to use – Every vendor will claim they have this, even though I see many that do not, unless you believe that Microsoft should have never discontinued Windows 2000.
- Has a catalog
- Assign users to _____
- Can you take quizzes or assessments, or can you do so
- Self-registration, forget password, custom domain (this gets a bit tricky, I’ll explain shortly), ability to schedule webinars/seminars – for webinars, you can connect to X web conferencing, or the vendor says that you can do webinars or talk to folks via a webcam.
- Some level of skills management – skill capabilities; ditto for the calendar – widespread here, scheduling sessions – common,
- Customer Training – Can skin and add your logo – and can skin (i.e., change the colors) and add a logo to any additional tenant that the system has – think child or sub-portal
- Can skin and add logo – any system that exists out there
- Provides outstanding support – They all claim to do so. Take it for what it’s worth.
- Offers integrations – most common are HCMs
- Mobile Responsive – This doesn’t mean they have a mobile app.
- It can be seen on a mobile device – think access via the browser.
- Micro-Learning – They can all do it – micro- only means short. Oh, and vendors were able to do this in 2000; it’s not a new concept.
- Certificates – Most have templates, the ability to edit the certificate, a certificate can be e-mailed to the learner, a certificate can be provided upon completion of content/course/path, and so forth
- The system offers assigned learning – with a lot of things you can do, from assigning learners to a specific course or courses they have to complete to locking down a course, so they have to go step by step before moving on to a learning path
- Support for the hierarchy at the enterprise, business unit, or other desired levels
- Repeatable creation of events based on a standard course template (e.g., number of days, min/max seats, title, description)
- Has LXP capabilities
- Create workflows
- Compliance – Audit trail is quite common
Administration Common items – I very rarely see a vendor saying they do not have this – but there is one that isn’t common (you won’t see it below, but will shortly)
- Administrators can set multiple levels of approval (e.g., no approval needed, supervisor approval, instructor approval, etc.)
- Administrators can create a learning path, journey, or curriculum path.
- Administrators can add content/courses to the system and add or remove it from a curriculum/learning path
- Assign and enforce access based on user profile
- Assign content/path based on skills, ditto for a job role
- Administrators can limit access to catalog items based on skill profile or skill proficiency
- Administrators can create skills – needed, requested, and assigned to learners, learners, or in general in the system
- Administrators can compare learner to learner based on skill(s) tied to a role
- Capture multiple user attributes (e.g., Organization, Department, Manager, Job role, etc.)
- Create user groups based on defined attributes (e.g., organization, department, country, etc.).
- Control profile settings by field (e.g., allow learners to change e-mail addresses but not change user name)
- The administrator can limit access to catalog items based on user profiles (e.g., job role, location, customer, partner, etc.).
- Allow administrators to create and assign system roles
- Administrators can create job roles and job titles, edit and delete
- Administrators can view reports can schedule to go to X, Y, and Z
- Administrator home page
- Allow administrators to track attendance status (e.g., no show, canceled, attended) of all types of training (e.g., instructor-led, online, virtual)
If the system offers or has a manager’s section
- Manager see their team in a manager dashboard or view
- Managers can assign training to teams and/or individuals
- Managers can update on the job training, mark training complete
- Managers can approve learner requests or deny it
- Manager can add/reject/update/approve learners/users
- Managers can compare learner to learner (within their team) on a variety of items, including skills
- If skills are involved – Managers can review skill ratings and offer what they see as the appropriate rating
- If skills are involved – The manager can assign skills or recommend skills the learner needs or, ideally, needs
- Managers can receive reports (if the administrator approves them)
If the system offers an Instructor area
- Instructors have access to course enrollment information
- Instructors can push surveys/assessments during active class or post-class
- Instructors can update rosters
- Allow instructors ability to print rosters, send e-mails to participants, and update course attendance post-class
Reporting
- Offers reports – and provides data, including what content X took, what they completed, and other learner data
- Reports provide overall information by group, department, etc., and individual
- Ad-hoc
Learner Environment
Think the learner side – Now, whether it is excellent or not, is another story – think of a chapter in the life of learning
- Search functionality allows learners to find specific courses, materials, and delivery formats based on keywords, titles, delivery formats, and other tagged identifiers (Some systems limit what can be generated, so think of this more as a search capability)
- Courses have standard attributes regardless of delivery mechanism, including title and description.
- If the system offers “opportunities” – it is viewable on the learner side with additional information and specifics – the learner can apply. Opportunity will list requirements – this won’t stop someone from applying anyway.
- Learners can enroll in or request enrollment for a course, content, group, etc.
- Learners can view the entire catalog and select their courses
- Learners can be assigned courses/content, learning paths
- Learners can view documents and download them (Common is PDF)
- The learner can see their status, i.e., a progress bar, percentage of completion, or whatever format the vendor has presented it in – some do use colors and expect the learner to know what they mean.
- Learners can be assigned materials, videos, etc.
Skills
I will note that if you are buying a system specifically focused on customer training, as in 95% or higher of their clients are using the system for customer/client/partner/distributor training, etc. – they will not match the skill capabilities of a system that is only dedicated to skills OR a system that is combo – i.e., customer and employee, or employee only – think a talent development system.
Equally how good it is, or robust for these items is debatable – a lot stink at it, or uh, not good – but hey, someone loves them – and that is all that matters – I bet they love candy corn too.
The List of Skills
- Create catalogs of content only for job roles tied to skills
- Curriculum can be set by skills, interests, job roles matched to skill or skills
- Catalog Search by content related to a specific set of skills/interests (Example: Leadership)
- Recommends courses/content based on job role, skills
- Skill gap analysis
- Skills tied to opportunities (openings or, for example, specific limited opportunities such as a project manager for an upcoming project) in the company/organization – This applies only if the system offers opportunities within their platform
- Analytics directly tied to career development and acquisition of skills for specific job roles
- Identify by each learner the skills assigned to them AND the skill(s) they selected
- Skill Ratings – I can tell you the majority lack one key capability, okay two (specifically what each rating means, and what are the base requirements for that skill – i.e., skill three means you have achieved a level of blah, can do blah blah, blah; and have done blah blah) – I mean what does a two mean without such information? Think this way – I am training you at an ice cream store. What does one mean? At two, you should know how to scoop ice cream and talk to a human across the other side of the counter.
I won’t dive into security, but there are common questions folks ask, and the vendor can do or does; nor will I cover mentoring or cohorts, which will be noted on my newest template. Additionally, mentoring, including coaching, is new to many systems. Some claim that they do, but they do not.
I left out AI – because it is new, and so assumptions that all systems have X or even 10% have X are erroneous.
The most common one I hear is the ability to create content or courses using AI.
The reality here is that if a vendor has jumped into AI, they will likely focus on the low-hanging fruit areas of content and course builder in the system, creating quizzes and assessments.
For whatever reason, nobody seems to ask about token fees – or whether the AI authoring tool or capability, if offered by the system, is included or not, i.e., whether an additional fee applies.
Nor what LLM they are using. An important question to ask. Most use Open AI.
I omitted the common questions about the system’s cost, use case, and so on.
Lastly, I avoided commonalities in a couple of other areas simply because it is easy for a vendor to say, ‘We have it,’ and this is often achieved by them implementing a workaround to achieve the desired results.
Bottom Line
Speaking of workarounds to give the impression that the system has this capability, do you assume that the salesperson is familiar with the entire system?
What about they know what is in the works and can provide such information to you?
Even if you are talking to the head of sales?
Do you believe everything that comes out of the salesperson’s mouth? Because they are the authority here, and thus, if they say it is true, it must be.
Do you ask for specific information only to receive an SLA that is presented as providing such details?
If the salesperson and you are not meshing, do you deal with it, grumbling under your breath?
All of these are the farm-to-table experience.
Just without the vegetables and meat.
Oh, and
the
Farm.
E-Learning 24/7
Word of the Day: whimsical
This word has appeared in 243 articles on NYTimes.com in the past year. Can you use it in a sentence?




