Quais são as principais habilidades de segurança cibernética para um novo administrador?

Según mi experiencia, esto es es lo que podria recomendarte para que inicies tu carrera en Ciberseguridad: - Primero tener una clara comprensión en los fundamentos de seguridad como la tríada CIA (Confidencialidad, Integridad, Disponibilidad) - Tener un claro entendimiento entre Seguridad de la Información Vs. Ciberseguridad, ambos tienen una definición muy parecida PERO se diferencian por el alcance. - Saber las diferencias entre Riesgo, Vulnerabilidad y Amenazas, estos 3 términos van muy de la mano y te ayudaran a entender como operar en seguridad. - Luego profundiza un poco en dichos 3 términos, por ejemplo, revisa Gestión de Riesgos, Tipos de Amenazas y Vulnerabilidades. - Si dominas estos conceptos, te resultara mas facil lo demás

Las habilidades clave para un nuevo administrador de ciberseguridad incluyen: 1. **Visión de futuro** y adaptación al cambio. 2. **Resolución de problemas** y habilidades analíticas. 3. **Inteligencia emocional** y capacidad para trabajar de manera autónoma. 4. **Dominio de la ingeniería social** y gestión de equipos. 5. **Conocimientos técnicos generales** de TI. Estas habilidades permiten enfrentar eficazmente los desafíos de ciberseguridad. Y si, todo lo anterior se puede adquirir y mejorar con actualización constante. hoy día mucha información está al alcance de todos

Security fundamentals are extremely important. Once you know the basic concepts of networking, cloud computing, programming when it relates to security, you can dive deeper into which area interests you. Certifications like Security+ are very beneficial for getting a broad overview of security and how it relates to different areas of computing.

As a penetration tester, I get to know hundreds of networks very intimately. I've found that 95% of the time, the administrators believe they know what lives on their network, until after the test. After I've shown them the tools I used to enumerate their network, they are commonly in awe and want the same tech, which is entirely possible. Tools such as BloodHound and using it to map your AD domain, is a great example.

Fundamentals, fundamentals, fundamentals. Which fundamentals? Well, that can vary depending on your long term plans, if any. For many of us who got our start 20 years ago, our fundamentals were either in IT (system administration or network administration) or through software development. The fundamentals of those fields benefited us as we continued growing our skills and broadening ourselves to the realm of security. Now, you don’t have to go either of those routes directly, but I still think that diving in to security without knowing how systems/apps communicate or how an operating system handles memory management, will put you significantly behind someone who has that knowledge with little to no security experience.

Es importante tener estos conceptos y sobre todo entender su funcionamiento general, soy de la idea que hay que partir de lo general a lo particular Si entendemos cómo funcionan todos los sistemas y cómo encaja su engranaje, cuando ocurra un suceso será más fácil identificar el problema y irnos a lo particular para resolverlo

Network skills are important because, in order to understand security vulnerabilities and their consequente attacks, you need to understand how the protocols works. If you’re an attacker, you need to think like a network administrator because it can be helpful to exploit flaws caused by misconfigurations for example. The opposite is true for network security engineers. “You cannot exploit or defend something you don’t understand how it works”. As simple as that.

Comprehensive knowledge of networking is crucial for a cybersecurity administrator. This includes understanding protocols, firewalls, routers, and the ability to analyze network traffic for potential security threats.

This pertains to job function and team size. While yes an Administrator should understand the basics it may not necessarily be required in the job functions. I have met IT admins that were only responsible for overseeing the addition and disabling of user accounts. I have also met IT Admins that only dealt with networks and vpn connections. However a competent IT admin will be knowledgeable in all areas

Networking skills are key within a cybersecurity education. Understanding why things happen on the underlying infrastructure is the only way to truly understand why cybersecurity attacks happen. While a CCNA or Network+ isn't required, they go a long way to help you apply and understand the why.

De hecho si iniciamos en el mundo de los sistema TI algo básico de programación esta en nuestro aprendizaje inicial y de nosotros depende aumentar la habilidades de programación en diferente lenguajes, de hecho la experiencia que se va adquiriendo en el camino nos va indicando en qué lenguajes debemos fortalecer más. De igual modo como avanzamos en el camino vamos creando nuestras propias herramientas para resolver los problemas, claro siempre hay que actualizar porque este mundo de TI está en constante movimiento, y no podemos quedarnos quietos en el aprendizaje.

Basic programming skills are beneficial for a cybersecurity administrator, especially in scripting languages like Python or PowerShell. These skills aid in automating tasks, analyzing logs, and developing custom security solutions.

Una vez en el trabajo, tuve los desafios de automatizar tareas repetitivas o procedimentales como: obtener un reporte de los servidores que tengan un puerto abierto, o de configurar un flujo que capture registros, los procese y los lleve hacia algun destino como un colector, SIEM, entre otros. Como lo resolvimos, creando script en Bash y en Python respectivamente. Si estas iniciando en áreas como Ciberseguridad, Seguridad en Nube, y afines, es importante que conozcas y sepas usar Python y Shell Scripting. Sobre todo, refuerza la parte de ciclos y condicionales. Es el dia a dia.

Scripting and Automation, Proficiency in scripting languages (like Python, PowerShell, or Bash) and automation tools can streamline security tasks and improve efficiency in managing systems and analyzing security data. Communication and Collaboration, Strong communication skills are essential for conveying complex security concepts to non-technical stakeholders. Additionally, the ability to collaborate effectively with cross-functional teams is crucial for implementing security measures.

Basic familiarity with programming languages and scripting tools such as Python, PowerShell, Bash, and Java is  required for a new administrator. Moreover, Programming skills enable you to automate processes, write unique scripts, analyze data, and design security solutions and it is beneficial for new cybersecurity administrator. Although you don't have to be a skilled programmer, you should be able to use libraries and frameworks, understand and write code, and fix problems. By participating in LinkedIn Learning online classes, viewing tutorials, and completing tasks and challenges, you can develop programming abilities.

Other than certifications, you can create your own multi cloud environment at home. All cloud providers provide free versions and it is really enough to gain hands on experience.

Traditional computers are like tiny ovens, with many limitations and possibilities. Cloud platforms like AWS, Azure, and Google Cloud are like bottomless backpacks with so much of services to offer. Learning about cloud computing is like learning how to unlock access to these incredible services. Administrators with this skill provide organizations and customers with continuous innovation, scalability, security, cost-efficiency, and access to the most innovative technologies, thereby enabling them to access new technologies and innovation continuously

Given the increasing adoption of cloud services, familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features is important. This includes securing cloud infrastructure, data, and applications.

Hoy en dia, pero en realidad viene desde mucho antes, el stack tecnológico que usa toda empresa comprende desde contenedores, infraestructura como código, linux, git, y por supuesto Cloud Computing. Las principales nubes son AWS, Azure y GCP, en ese orden, no esta nada mal arrancar por aprender AWS, la mayoria de empresas la eligen como su Cloud Provider predilecto. Seas un DBA, un Desarrollador, un DevOps, un Administrador de la Seguridad, incluye Nube dentro de tus skills.

Cloud computing skills are integral in modern cybersecurity. Acquiring expertise in cloud platforms like AWS, Azure, or Google Cloud is essential. Understanding cloud architecture, identity and access management, encryption methods, and secure configurations is crucial. Proficiency in securing cloud resources, implementing robust access controls, and comprehending shared responsibility models ensures effective protection of data and applications hosted in the cloud, a pivotal aspect of cybersecurity in today's digital landscape.

Cybersecurity exists to protect your customers, developers, and stakeholders. For each of these three personas, communication is the crucial element for them to get value. How we communicate security to customers turns security from a roadblock to a desired feature. How we communicate cybersecurity to developers educates them on what is required of them to do. How we communicate to stakeholders shifts cybersecurity from a cost center to a value center.

The ability to clearly and concisely convey complex security concepts to a non-technical audience is essential. This includes writing reports, presenting findings, and explaining the significance of cybersecurity measures to stakeholders. Strong interpersonal skills also facilitate collaboration with IT teams, management, and external vendors.

Clear communication is crucial in avoiding panic. When you are responding to a customer's email regarding a suspected incident, it is essential to choose your words carefully. It is recommended that you proofread your emails or have them reviewed by quality assurance before sending them out.

Effective communication is critical for cybersecurity professionals. The ability to articulate security issues, policies, and recommendations to both technical and non-technical stakeholders is essential. This skill helps in creating a security-aware culture within the organization.

As a penetration tester, I can often tell when the other side has employed critical thinking in the process of designing their networks or applications. Administrators with critical thinking skills will see the security needs of their networks and applications in the design phase. They will make sure that the strategic decisions are made then, saving them a lot of money in the long run.

By honing your critical thinking skills, an administrator can become a more effective and a valuable asset in the ever-evolving field of cybersecurity. It involves being able to identify and solve problems quickly, make informed decisions by weighing different options as at when needed, and then go on to choose the best course of action for their team or organization. Even more, is adapting to changes as the cybersecurity and technology world at large is constantly evolving which then allows administrators with good critical thinking abilities to learn new things, adjust their strategies, and embrace new technologies in order to stay ahead of the curve.

O senso crítico é crucial, pois os riscos variam conforme sua exposição: seja no desenvolvimento, homologação ou produção. Avaliar a exposição é essencial para tomar medidas adequadas. Em um ambiente dinâmico, é necessário discernimento rápido para tomar as decisões corretas.

Cybersecurity administrators need strong critical thinking skills to analyze and respond to security incidents. This involves the ability to assess complex situations, identify potential threats, and make informed decisions quickly.

I agree with the above statement. I call it thinking out of the box. This one of the most important skills for a cyber security professional. This skill will help you to solve problems and overcome challenges.

Being overly sure about things in cybersecurity can be a problem because asking questions helps us stay proactive. For new administrators, important cybersecurity skills include knowing how to use technology, always learning, and having a smart "if-then" plan. Focus on understanding spotting threats, and responding to incidents. By asking questions like "why," administrators can be proactive and prevent problems instead of just hoping they won't happen.

✴ Soft skills are truly important. ✅ Communication: Effectively conveying technical information to non-technical stakeholders. ✅ Problem-Solving: Identifying and resolving security issues efficiently. ✅ Critical Thinking: Analyzing security data to make informed decisions. ✅ Attention to Detail: Paying meticulous attention to security configurations and logs. ✅ Continuous Learning: Staying updated with the latest cybersecurity trends and technologies.

The biggest mistake people make when trying to start in the cybersecurity industry is trying to be an engineer or pentester without having a grasp on the fundamentals. To succeed, you have to first get a solid understanding of: Networking: TCP/IP stack, standard protocols and services, how data move from A to B; Infrastructure: how DNS, DHCP, WEB, SMTP/IMAP, etc. works; leading platforms used to implement them; Operating systems: both Unixes and Windows. You can pick your favourite to use, but learn how both work. Databases: what is a DBMS, how data is stored, manipulated and queried; Applications: both tick and web-based app design. If you get to know this, you are set up to thrive. :)

1. **Connaissances de base :** Concepts de sécurité (confidentialité, intégrité, disponibilité), menaces courantes (malwares, phishing). 2. **Gestion des réseaux :** Configuration de réseaux sécurisés, protocoles réseau (TCP/IP, DNS), pare-feu, VPN, IDS/IPS. 3. **Cryptographie :** Principes de chiffrement, gestion des certificats SSL/TLS. 4. **Sécurité des systèmes :** Sécurisation des OS (Windows, Linux), mises à jour, contrôle d'accès. 5. **Sécurité des applications :** Vulnérabilités (OWASP), développement sécurisé. 6. **Gestion des incidents :** Détection, réponse aux incidents, outils SIEM. 7. **Évaluation des risques :** Identification, conformité (ISO 27001, GDPR). 8. **Audit :** Tests de pénétration, reporting.

✴Network Security: Understand protocols and security concepts ✴System Administration: Manage OS and software updates, create and manage user accounts ✴Vulnerability Management: Identify and mitigate system vulnerabilities ✴Security Monitoring: Monitor logs and detect incidents ✴Cloud Security: Understand cloud computing concepts, secure cloud infrastructure and applications ✴Incident Response: Develop response plans, restore systems after breaches ✴Risk Management: Assess cybersecurity risks Compliance and Regulations: Understand industry-specific cybersecurity regulations ✴Communication and Reporting: Effectively communicate risks and incidents ✴Continuous Learning: Stay up-to-date with cybersecurity trends