Michael Kim: DJ turned Red Teamer

About the Guest: Michael Kim is a seasoned professional in the realm of offensive security, boasting an extensive background in red teaming and penetration testing. Throughout his dynamic career, Michael has contributed his expertise to a variety of organizations, which enables him to offer a unique perspective on cybersecurity. Prior to diving into the security field, Michael followed his passion in music production and DJing for over a decade. His pivot to cybersecurity was catalyzed by the realization that it did not require a formal degree but could be pursued through alternative educational platforms like boot camps. Michael's commitment to continual learning and self-improvement is demonstrated by his approach to gaining new skills and certifications necessary for advancing his career. Currently, he holds the position of red team operator. Episode Summary: In this episode of the Philip Wylie Show, host Phillip Wylie engages with Michael Kim, an expert in offensive security, to discuss his unconventional journey into the field of cybersecurity and insights on red teaming and penetration testing. Michael's narrative is not only a testament to career shifts but also an inspiration for individuals looking to pivot into new endeavors later in life. This conversation delves into the intricacies of cybersecurity, the differences between penetration testing, and red teaming, as well as effective learning strategies for those aspiring to break into the security sector. Michael and Phillip exchange valuable information on the evolution of cybersecurity careers, revealing how passion and dedication can lead to substantial professional growth despite starting from non-technical backgrounds. The episode underscores the importance of a proactive work ethic, the utilization of learning resources like TryHackMe and Hack The Box, and the strategic pursuit of relevant certifications. With Michael's background in music and his proactive approach to personal branding on LinkedIn, listeners are offered a multifaceted perspective on forging a successful career path in offensive security. Key Takeaways: Transitioning to cybersecurity does not require a formal degree; alternative education paths like boot camps can be effective. Red teaming involves stealth and in-depth tactics, unlike the broader approach of penetration testing. Certifications like OSCP are valuable but not entry-level; it's essential to build a foundation of skills prior to attempting advanced certifications. Resources such as TryHackMe and Hack The Box Academy are highly recommended for hands-on learning and skill development. Personal branding and active engagement on professional networks like LinkedIn can significantly benefit one's career advancement. Notable Quotes: "I always start with saying… I'm not here to push past, I'm just here because I just want to help out." "If I can do it, anyone can do it. If you have the passion, if you have dedication, never give up because everybody has a different starting point." "It's important to have a plan of action. And I feel like from there on, you can build on that plan of action." "I feel like if everybody does their due diligence to try to research, understand what certs actually help, it'll be easier to navigate [the field]." "We only go through this once and there'll be times when you look back fondly and like, 'Oh, I used to not be able to do this, but now I can do this really easily.'" Resources: https://www.linkedin.com/in/michael-kim-83b0627b/ https://twitter.com/MeterPeter4Eva