Can’t Stand Cybersecurity in an MSP trying to be an MSSP

can’t-stand-cybersecurity-in-an-msp-trying-to-be-an-mssp

Firstly as we get started, can I just say that camDown is your security solution to protect you and your business from webcam hackers!

I got hired as an L1 Security Analyst 3 months ago. Essentially, my job functions mostly amount to delving skin-deep into badly configured SIEMs [with minimal network topologies], Antivirus Policies, prepping for SOC 2 Audit level documentation [God, can you say bored out of my mind?], and phishing tickets.

On top of which, I dunno if it's common to use ticketing systems in cybersecurity....but I have to log every minute of the day as it happens. Literally every minute. Feels like prison.

Now, I'm a noob. My degree [AAS] is mostly in programming: Python, C++, Java, TSQL, etc, but I happened to go to a Cybersecurity conference for college in 2019 and chased down a big name in global Cybersecurity for 2 years and through a pandemic to get an internship. This dude told me he robbed banks for a living, and I was sold.

Due to this internship I got, I was hired after 1 phone call by a midrange MSP who wanted to become an MSSP. 18 clients, and 50 employees to cover all of their Incident Response, Threat Hunting, Monitoring, Filtering, Networking, etc, etc. And we have 1 CISSP. A 2-man SOC /IR/TH/Compliance team.

The company is hiring a CISO and a CIO soon, so maybe that will change things.

In my internship, I had a blast. Mostly in Red Teaming labs, but I also enjoyed Linux and AWS.

Here, there is little structure, and I fulfill menial tasks to free up the CISSP. He says I'm helping him...But he can also barely speak English. Even when I learn stuff from him, it's often in mangled English which just confuses me.

At the same time, I need the money and feel like this is just a ridiculously lucky break, even though I feel dead inside while working.

I'm thinking about getting my CySa+ to make myself more valuable for a company jump, maybe trying a different company, maybe a real corporate role instead of an MSP pretending to be an MSSP.

I want to give Cyber another shot, but I'm also planning on pursuing my bachelors in Software Development, then an MBA. Cybersecurity seems like just a perpetual losing battle of trying to find needles in needle stacks. I've felt the urge to want to build something, and I've also quite enjoyed connecting agents to cloud platforms and messing with servers. I seem to like Networking more, but it's not as valuable, right.

My real dream is just to be financially free to determine how I spend my own time, as selfish as that may sound. If I want to spend all day playing video games, I want to have purchased that right. The only way to do that is to stop trading time for money, but until I reach that point, I gotta do the double grind right. Study + 45 hours a week.

I could buy a house with my gf by April if I keep this job. Then work part time and bulldoze the B.S. and MBA. I guess I want someone to tell me to quit, haha....

Any advice?

Now let's stop for a moment and consider that camDown is your security solution to protect you and your business from peeping toms!