เป็น Network Security Analyst ได้แม้ปริญญาไม่ใช่สาขา IT
ได้ 100% หลายคนสำเร็จจากสาขา: Business, Finance, Engineering, Arts, Military, Non-technical สิ่งสำคัญคือ Skills + Certifications + Portfolio + Networking
Roadmap 6-12 เดือน (Career Transition)
Phase 1: Foundation (1-2 เดือน)
- Networking Basics: TCP/IP, DNS, DHCP, HTTP/HTTPS, Subnetting, OSI Model
- Linux Fundamentals: CLI, File System, Permissions, Services, Logs
- Windows Fundamentals: AD, Group Policy, Event Logs, PowerShell Basics
- Security Concepts: CIA Triad, Threat/Vuln/Risk, Attack Vectors, Defense in Depth
Phase 2: Core Certifications (2-4 เดือน)
- CompTIA Security+ (SY0-701) - Baseline ที่ HR/Talent มองหา (DoD 8570 Compliant)
- CompTIA Network+ (N10-008) - ถ้าพื้นฐาน Network อ่อน (แนะนำก่อน Sec+)
- (ISC)² CC - Certified in Cybersecurity (Entry-level, ฟรี Exam จนกว่า)
Phase 3: Specialization & Hands-on (3-6 เดือน)
- Blue Team / SOC Path: Splunk/Elastic, MITRE ATT&CK, Incident Response, Threat Hunting → CySA+, Splunk Core Certified User, BTL1
- Network Security Path: Firewall (Palo Alto PCNSA, Fortinet NSE4), VPN, IDS/IPS, Zero Trust → CCNP Security (SCOR)
- Cloud Security Path: AWS/Azure/GCP Security Services → AWS Security Specialty, AZ-500, CCSP
Phase 4: Portfolio & Experience (ขนานกัน)
- Home Lab: Proxmox/VMware, Firewall (OPNsense/pfSense), SIEM (Wazuh/Elastic), AD Domain
- TryHackMe / Hack The Box / RangeForce / Let's Defend (Blue Team Labs)
- Contribute Open Source Security Tools / Write Blog / YouTube
- Volunteer/Intern/Apprenticeship (Non-profit, Small Biz, Gov Programs)
Degree ที่เกี่ยวข้อง (Related Degrees)
- Computer Science, Information Technology, Information Systems
- Cybersecurity, Information Assurance (เฉพาะทาง)
- Computer Engineering, Electrical Engineering
- Mathematics, Physics (Analytical Thinking)
- Business/Management (สำหรับ GRC, Risk, Policy)
ทักษะ Hard Skills ที่ HR มองหา
| Skill | Tools/Tech |
|---|---|
| SIEM | Splunk, Elastic, Sentinel, QRadar |
| EDR/XDR | CrowdStrike, SentinelOne, Defender for Endpoint, Cortex XDR |
| Network Analysis | Wireshark, Zeek, Suricata, PCAP Analysis |
| Vuln Management | Nessus, Qualys, Tenable, OpenVAS |
| Scripting | Python, PowerShell, Bash, KQL/SPL |
| Cloud | AWS/Azure/GCP Security Services, IaC Scanning |