The Student Roadmap to Becoming A Penetration Tester by Jonathan Helmus

Jonathan Helmus, senior penetration tester at Nordstrom headquarters, delivers an inspiring and structured guide for students, career switchers, and junior practitioners aspiring to build a professional career in offensive cybersecurity [00:00]. Helmus emphasizes cultivating a persistent "student mindset," explaining that curiosity, continuous self-education, and adaptability are far more important in long-term cybersecurity careers than static technical credentials [12:12].

The presentation outlines a step-by-step career development roadmap, detailing the foundational domains required for penetration testing: TCP/IP networking, Linux and Windows system administration, scripting, and web application architectures [24:46]. Helmus reviews essential industry certifications, discussing foundational certificates like CompTIA Security+ and Network+ before progressing to hands-on practical certifications such as the Offensive Security Certified Professional (OSCP) and eLearnSecurity Junior Penetration Tester (eJPT) [36:28].

Helmus provides practical guidance on leveraging online training labs like TryHackMe, Hack The Box, and VulnHub to develop methodical problem-solving habits [48:38]. He emphasizes the critical importance of soft skills, professional report writing, and active participation in local security communities such as BSides and DEF CON groups to establish industry relationships [01:00:43].

(AI summary — Gemini Flash)