The public is largely supportive of improving cybersecurity measures in Indian cities, emphasizing the urgent need for greater awareness, education, and infrastructural improvements. While many express optimism about future advancements, there is also criticism regarding deficiencies in current practices. The proposal to appoint a Chief Information Security Officer (CISO) has garnered mixed reactions, with some recognizing the demand for skills while others remain skeptical about the measure's effectiveness.

Government of India

Cybersecurity Professionals

Citizens

&gt;Namaste!
Thanks for submitting to r/developersIndia. While participating in this thread, please follow the Community [Code of Conduct](https://developersindia.in/code-of-conduct/) and [rules](https://www.reddit.com/r/developersIndia/about/rules).
 
It's possible your query is not unique, use [`site:reddit.com/r/developersindia KEYWORDS`](https://www.google.com/search?q=site%3Areddit.com%2Fr%2Fdevelopersindia+%22YOUR+QUERY%22&amp;sca_esv=c839f9702c677c11&amp;sca_upv=1&amp;ei=RhKmZpTSC829seMP85mj4Ac&amp;ved=0ahUKEwiUjd7iuMmHAxXNXmwGHfPMCHwQ4dUDCBA&amp;uact=5&amp;oq=site%3Areddit.com%2Fr%2Fdevelopersindia+%22YOUR+QUERY%22&amp;gs_lp=Egxnd3Mtd2l6LXNlcnAiLnNpdGU6cmVkZGl0LmNvbS9yL2RldmVsb3BlcnNpbmRpYSAiWU9VUiBRVUVSWSJI5AFQAFgAcAF4AJABAJgBAKABAKoBALgBA8gBAJgCAKACAJgDAIgGAZIHAKAHAA&amp;sclient=gws-wiz-serp) on search engines to search posts from developersIndia. You can also use [reddit search](https://www.reddit.com/r/developersIndia/search/) directly.

*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/developersIndia) if you have any questions or concerns.*

AutoModerator

Offensive Security engineer, 7 YoE here. Most of us don't hack CCTV, but we can in case of red team/ physical security engagements. Search shodan, ip based cams, default passwords etc. cyber has many fields such as malware analysis, red team, pen testing, Appsec, vuln. Management, incident response, digital forensics, iso, vrm etc. 

Most things which process inputs can be hacked, internet connected cars, phones, baby monitors, cctvs, ships, satellites , even bill boards. It just needs the right skills, motivation and time.

We usually test servers, infra, web and mobile apps for banks, insurance etc. and try to find major loopholes before it goes in prod. + Quarterly, half yearly assessments.

That backup file or config file you guys put on the server, makes our job easy. ;)

Pay is usually good if you are in a good company, slightly more than devs probably because cyber teams are small. Yes it is worth it. I was on the news several times for hacking some orgs!

Fantastic_Clock_5401

Charismatic_Evil_

karma_yogi_12

A few of my friends are in the cybersecurity field.

  
1. They cannot hack the devices but the network, yes.



2. All of them learned it themselves. Started learning Linux, reading, watching videos about hacking, doing tutorials but then to get a job they all also have a degree in information security etc.

  
3. They were all freshers formally when they joined, but the amount of time they spent "hacking", I would say they were already equivalent to a sde with 3 years full time exp.

  
4. Most of them don't even touch code now after 8-9 years in the industry, They mostly do meetings with the clients and create a general security roadmap for the company. Actually, they never did much hands-on on the job, only worked with the security tools which a company used.

  
5. All of them are earning on par with a SDE or even a bit more.

  
6. Everything is worth it if you like to do it. Then you won't feel like you are working, but ggoing about your normal day and getting money for it.

  
7. I don't know about the benefits but one disadvantage I see that although they have opportunities to move to English speaking countries, mostly they are rejected for positions in Europe because their work is very language focused (documentation, meetings, etc)

jumpbeetech

Cybersecurity is less about "hacking phones or CCTVs" and more about protecting systems, networks, and data from unauthorized access or attacks. Here’s some clarity on your questions:

1. **Daily tasks:**
   * Monitoring and responding to security incidents.
   * Penetration testing or ethical hacking.
   * Auditing systems for vulnerabilities.
   * Implementing security protocols.
   * Training employees on cybersecurity best practices.
2. **Roadmap:**
   * Learn basics: Networking, OS (Linux, Windows), and programming (Python, Bash).
   * Certifications: CEH, CompTIA Security+, OSCP, CISSP.
   * Tools: Familiarize yourself with tools like Wireshark, Metasploit, and Burp Suite.
   * Hands-on: Set up labs (TryHackMe, Hack The Box) to practice.
3. **Salary comparison:** Freshers may earn less than SDEs initially but salaries catch up with experience and certifications. Roles like SOC analyst or pentester are good starting points.
4. **Is it worth it?** If you enjoy problem-solving, staying updated with tech, and critical thinking, it’s a fulfilling career with a growing demand globally.
5. **Perks:** Job security, the satisfaction of safeguarding organizations, and opportunities to work in diverse industries.

It’s not as “flashy” as movies, but if you’re passionate about security, it’s a rewarding field!

BoxLost4896

There are many aspects of hacking, it's not as simple as if we can hack phones cctvs or laptops, the path we take to hack matters, are we talking about hacking the network, or just accessing the files (network based) , do we create a RAT or other malware (malware analysis), are we doing social engineering, or is the attack cloud based. There is hardware security as well, for eg. side channel attacks, really interesting field if you are into low level stuff. My point is hacking is purpose driven, you start by being decently knowledgeable at everything, then you specialise in one thing then you can specialise in a lot of other things. By the time that happens, you are going to deal with more paperworks than field work.



Due to this diversion, the road map varies. It's true that freshers are not favored. So we start with something like, as a network analyst, embedded engineer or just a simple developer. With experience and gradually pushing yourself to this direction you can later get into good Cyber Sec positions. 


That said the majority of cyber sec professionals you come across in India just use tools to monitor and mitigate. Which is comparatively easier. It is a very important job and some do prefer it that way. But if you are inspired by the hacking scenes in movies and stuff, then most of that stuff is majorly done in research, very less opportunities in corporate, and the ones that do aren't taking freshers for those roles. It's not easy, and it takes time.

IamStygianLight

Information Security Team lead- 5 YOE, CISSP, CRISC, CySA+, Security+, CCNA, CCNP, and CEH(not proud of it). 

My responsibilities include but are not limited to.

1. Leading and overseeing all SecOps teams- NW security, OS security, Vulnerability management.
2. Taking charge of the security front whenever we’re deploying new applications to our customer’s environment. Having a say in the go live decision. 
3. Pre go live, I make sure we’re sorted in terms of DB hardening, OS hardening, Vuln management, NW hardening and FW hardening. 
4. Identifying risk’s in our customers environment, mapping it into risk registers- utilizing different security control frameworks such as CIS, NIST etc.
5. Pushing out pentest’s and secure code reviews pre go live. Making sure all defects are communicated to the customer, and either mitigated, accepted or deterred. 
6. Conducting POC’s for different tools that we want to bring in. Checking if it meets our orgs use case and then working with Architects to fit it in the customer’s environment.
7. Conducting Cyber awareness sessions to all of our customer’s. 
8. Delivering all security control checks for all DB’s, servers, applications and open vulnerabilities based on our customer’s KPI’s and SLA’s.
9. Running tabletop exercises (an excerise on how incident response teams would respond to incidents) and presenting the Lessons learnt.
10. DevSecOps- identifying and mitigating vuln’s in container images, in cloud environments.

Roadmap:- Most people are not going to get the same opportunities that I did at a very young age. I realize I understand security at an extremely high level when compared to people with 6-8 YOE, but you’d have to find the right mentor, and the company that is willing to give you this much exposure. For this, i have been very lucky- but i know that I put it more efforts into my career than most people anyway. I’d say, start small, but start somewhere- be curious about how everything works, be willing to participate in different projects, learn religiously and take feedback correctly. I’d also say to not stay in one realm of security for too long.  Do not forget to network as those can lead to amazing opportunities should you have potential. 

Salary- its between 30-40 LPA- fixed. Bonus isn’t included here- but given based on performance. I don’t think its remotely close to what a dev makes- but its okay.

There are no benefits as such. The only thing I feel like is having so much power over software teams cause I literally will not allow their go lives unless they fix their shitty apps along with their horrible coding practices.

NoTown510

Guys I will be graduating this sept and currently I have pjpt and this month i will be giving pnpt and am also planning to give crto before june. If u are in this field working as a pentester or a red teamer give me some tips on how do I get internship or most preferably a job and yes oscp is also on my list. I don't like ceh and will never give this exam

6Droopy

dimsumplatter75

We recommend checking out the FAQs section on our wiki. It looks like the following wiki(s) might match your query:

- [Getting Started in Cybersecurity](https://wiki.developersindia.in/community-guides/resources-to-get-started-in-cybersecurity.html)."

&gt; Our [wiki is open-source](https://github.com/developersIndia/wiki), please consider contributing to help other community members.

*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/developersIndia) if you have any questions or concerns.*

It's great to see your curiosity about the cybersecurity field! As professionals, we don’t just hack for the sake of hacking; we aim to protect systems from threats. A typical day might involve monitoring security alerts, conducting vulnerability assessments, and responding to incidents. As for salaries, they can vary widely based on experience and specialization, but many find they can compete with or even surpass software development roles, particularly with certifications like CEH or CISSP.

Regarding hiring freshers, while experience can be a hurdle, many companies are recognizing the importance of fresh perspectives. What specific areas of cybersecurity are you most interested in? And have you considered looking into courses or certifications? They can really help in getting your foot in the door! 

Do you think your current skill set could align with roles in this field?

Recent-Technology-83

A couple of cyber architects in my team, consult with global teams

Change_petition

Analyze and build security use cases to be monitored by SOC. Work on SIEM and SOAR tools. Develop automations supporting security incidents. Develop applications if required. Work on IAM tasks... Any workflow or anything that is required...and so on...

Advanced-Size-3302

I am a senior security engineer with almost 5 YOE, I own the GRC, vulnerability management and network security part with overlapping responsibilities in cloud security and working on security incident escalated by security analysts.

Cyberyoddhaa

Purple team here , both offensive and defensive assesments. Red team engagements happen after a meeting with management and deciding what is included in scope .  There is no specific roadmap but if u want to keep improving and moving to critical roles then you need to keep yourself updated .

eg0clapper

I’ve been fortunate to be in cybersecurity space for the last 16 years. My advice is to be a developer for a few years, but slowly cultivate a security mindset going into how can you break something and then comes what controls you can place to prevent the same.
most of the security analyst are heavy tool dependent , they may not be able to reason why the code is built such way to gave a particular result.
Only by being a developer, can you truly know to end how various module interact with each other and bugs are usually found at the intersection of this modules .

Mysterious-Bunch6630

They have Qualys, Crowdstrike, Splunk and god knows what other tools, all they do is, "I see RED, I should alert the System Engineers." That's it, they don't even put 1% of the brain reading the alert and I don't blame them. Better be safe than be sorry is how they operate.

Thejeswar_Reddy

Please remake your post in r/Indians_StudyAbroad.

If your post is not related to studying abroad, **please wait while the mods review your post**

For any further assistance send us a Modmail.

Here's a backup of your post:    

Title: Which IT sector is safest in coming years? Cybersecurity or ..  
Body:  

Hey folks,  
I’m stuck between two paths and would love your guidance:

1. **BCA in Cybersecurity → MCA Cybersecurity**
2. **BCA in Health Informatics → MBA in Healthcare Management**

I recently found that **cybersecurity is one of the least replaceable fields by AI**, and India’s demand for cyber experts is rising. Meanwhile, healthcare tech seems stable but niche, and MBA roles often pay less and grow slower unless you're in a big city.

I like tech, stability, and the idea of building things (I’ve run small online projects before).  
I won’t be going abroad, Im focused on the **Indian job market only**.

Which path feels more future-proof and safer for long-term growth?

Thanks in advance 🙏

  
my\_qualifications: 12th passed

*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/Indian_Academia) if you have any questions or concerns.*

if you are doing bca do it from a reputated college and specialized ar e only tags which doesnt matter and go for MCS masters in cyber security rather then going for MCA in cyber security , if you are really interested in cyber security  i recommend Masters in Cyber Security

Playful_Bed3231

Bca normal one, this shouldn't even be a que this is bca not btech cse from tier 1 college

Knighthereal

USA is 15 years behind china in cyber security and do not want to challenge China, Us has given up.

India is like 15 years behind USA.

Govt of India might have some nice jobs in cyber security which will give extreme security, peace and govt benefits. Try that. My suggestions is try govt kind of roles in India in cyber security.

Horror-Upstairs-9820

&gt;Namaste!
Thanks for submitting to r/developersIndia. While participating in this thread, please follow the Community [Code of Conduct](https://developersindia.in/code-of-conduct/) and [rules](https://www.reddit.com/r/developersIndia/about/rules).
 
It's possible your query is not unique, use [`site:reddit.com/r/developersindia KEYWORDS`](https://www.google.com/search?q=site%3Areddit.com%2Fr%2Fdevelopersindia+%22YOUR+QUERY%22&amp;sca_esv=c839f9702c677c11&amp;sca_upv=1&amp;ei=RhKmZpTSC829seMP85mj4Ac&amp;ved=0ahUKEwiUjd7iuMmHAxXNXmwGHfPMCHwQ4dUDCBA&amp;uact=5&amp;oq=site%3Areddit.com%2Fr%2Fdevelopersindia+%22YOUR+QUERY%22&amp;gs_lp=Egxnd3Mtd2l6LXNlcnAiLnNpdGU6cmVkZGl0LmNvbS9yL2RldmVsb3BlcnNpbmRpYSAiWU9VUiBRVUVSWSJI5AFQAFgAcAF4AJABAJgBAKABAKoBALgBA8gBAJgCAKACAJgDAIgGAZIHAKAHAA&amp;sclient=gws-wiz-serp) on search engines to search posts from developersIndia. You can also use [reddit search](https://www.reddit.com/r/developersIndia/search/) directly without going to any other search engine.

## Recent Announcements &amp; Mega-threads

- **[Community Roundup: List of must-read posts &amp; interesting discussions that happened in September 2024](https://www.reddit.com/r/developersIndia/comments/1fsmm19/community_roundup_list_of_must_read_posts/)**
- **[Who's looking for work? - Monthly Megathread - October 2024](https://www.reddit.com/r/developersIndia/comments/1ftfqg2/whos_looking_for_work_monthly_megathread_october/)**

### [An AMA with Subho Halder, Co-founder and CEO of Appknox on mobile app security, ethical hacking, and much more on 19th Oct, 03:00 PM IST!](https://www.reddit.com/r/developersIndia/comments/1g1v2tg/join_subho_halder_cofounder_and_ceo_of_appknox/)

*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/developersIndia) if you have any questions or concerns.*

It is in demand in big product based companies and service based companies also. It is a growing field and many companies are looking for interns, freshers and experienced people in the field . 
You just have to search for a keyword like product security , application security , VAPT or pentester in linkedin jobs and you can see many opportunities. 
If you get in small service based company you may get paid less but same for other roles you get paid better in big mncs or product based . 
I am telling this for offensive security roles

Sanamdhar

It's not niche and it actually requires you to be good at it .


Source : guy who works in cyber

Job market is close to non existant for freshers in cybersecurity unless you are freelancing and finding bugs on your own, only would recommend it if you are already a experienced developer and are switching

SnooWords9600

I feel cybersecurity is something that most small level orgs will have the last concern for (as far as in India). It's mostly the big orgs that will focus on it since they have also achieved their main goal, so this is an add on/enhancement

Tinde_Ki_Sabji

[deleted]

i suggest not for a moment i took such a course and became a generalist dude!

nontechpmo07

It's in demand. But you need to have skills

Plenty_World_2265

The Union Home Ministry has mandated that each Indian city appoint a Chief Information Security Officer (CISO) to enhance cybersecurity amid rising digital threats.

Cybersecurity in Indian Cities

Why This Matters

Public Sentiment Summary

Highlighted Comments

Parties Involved

What the people want