doubts about how to start in the area

[snpinheiro2]

Hello, I'm a ServiceNow student, but I really like the SecOps module. How do I start to gain market visibility and get my first opportunity?

[superhumanben]

That's a really tough question to answer. Personally I went the other direction and was an Attack Surface Management analyst who fell into SecOps modules and what they could do. One note though is that many of the SecOps modules rely on data imports from products like Tenable, Qualys or Wiz (among many others). Getting experience or even a lab to setup with similar products is not impossible but likely financially inconvenient at best.

Getting the fundamentals of SN down and continuing to explore the SecOps world on the side would probably be my suggestion (and all depends on the area you're most interested in). Some of the plugins (example vulnerability response) allows you to load demo data when installing on a PDI. Configuration compliance is another that has demo data to start wetting your feet a bit. All in all though, keep up to date with security standards and procedures. The Hacker News is a great site though sometimes geared towards vulnerability management. SANS courses could be an additional area to explore like the 401 (https://www.sans.org/cyber-security-courses/security-essentials-network-endpoint-cloud/)