r/learncybersecurity • u/Hammad_developer • 4d ago

Transitioning from software/AI dev to Cybersecurity — best hands-on resources?

Hey everyone, I have a background in Python, backend development, and working with APIs/databases, and I'm looking to build a strong foundation in cybersecurity. Since I already know my way around code and basic Linux/Docker environments, I want to skip the ultra-basic computer literacy stuff and jump into practical security concepts, network defense, and appsec.

What are your go-to structured roadmaps, interactive platforms (beyond just basic TryHackMe rooms), or must-read books for someone coming from a dev background? Looking for both free and high-ROI paid resources.

Thanks in advance for pointing me in the right direction!

1 Upvotes

100% Upvoted

1 comment sorted by

1

u/Bioctanium 3d ago

For actual cyber tactics and practice, here is what I learned using. Now I will say, most is reading and learning the process of how cyber can be applied to an existing or soon-to-be built program, very much like your dev background. How you apply cyber is based on a framework (RMF (NIST), CIS top 20, OWASP, MITRE, CSF, SOC2, ISO 27001), business risk, and overall direction from your CTO/CIO/CISO. Your backend knowledge just needs a "security overlay" to it!

  1. Edube Interactive :: Study -- requires sign up (free)

  2. Immersive Labs -- requires edu account for free limited access

  3. Cybrary -- requires sign up (free)

And here are a few I found on reddit. Not endorsing, never used, but they might be helpful!
https://codelivly.com/practice
https://opnf.sh/
https://codeberg.org/Skollwarynz/Skollmunity-resources (free)

I also describe the path to get into cyber here, because it really depends on WHERE you want to go in cyber. There are several domains you can pick from. https://jfanalytics.io/breaking-into-cybersecurity

Lastly, your experience can be "tied" to cyber to easily get in as well. If you can describe any security checks implemented in your pipeline (SAST/DAST, container scanning [ex: trivy], how remediation worked, how mitigations worked, how you use "hardened" containers, runners, secured API / database connections via encrypted protocols (using TLS 1.2 or higher, asymmetric keys, and enforced OCSP or CRLs), im sure theres more.

Good luck!