Live data from Hacker News

Ask HN: Need Career Recommendations

news.ycombinator.com

1–10 of 56 posts

Ask HN: Need Career Recommendations

#1
Hi.

I'm looking for some career recommendations, not quite sure what path to go. To me, I'm currently 17 years old and now doing cybersecurity since 3 years. Been doing bug bounty since then, at https://hackerone.com/f9cd8782?type=user. Got into it randomly when I accidently found a critical vulnerability when I was 14, had prior coding and system knowledge, as I've started coding at the age of 10.

I now stopped doing security research for Epic Games, for specific reasons. I've reported around 130 valid vulnerabilities in their engine and games (binary exploitation), including remote code execution, netcode vulnerabilities (mostly critical ones affecting the gameserver itself, technically a 0day due to it being the engine).

I've been told many times that I am low-balling myself and should get into smart contract or browser security. Please let me know what you think and feel free to ask any questions.

Re: Ask HN: Need Career Recommendations

#2
Hey that’s impressive that you’re so young and found so many vulns.

If I was in your place I would chart out a path for myself to be CISO or CIO at a large org. Continue with your graduation and attempt to get ethical hacking certifications (CISSP or CompTia junior or senior year). I would also start a technical blog about your research (once those are patched ofcourse) This will be a boost to your credentials when you apply for jobs. All the best!

Re: Ask HN: Need Career Recommendations

#5
If you are 17 and have already being doing sec research for 3 years... well, why do you have trouble choosing between smart contracts and browser security? From my point of view, you could do both.

More seriously, if you haven't already, brush up your math/physics skills to get ready for university, and do either computer science or software engineering. It's only 3 or 4 years but the diploma will last you forever. Since you seem like a smart guy, getting the degree will be very easy for you. You thank me later, when you are 40.

Re: Ask HN: Need Career Recommendations

#6

Ah this reeks of bs but welcome to hacker news where everyone gets the 350k+ offers. Lol posting the #2 for Epic Games, this totally is very real and very possible for a 10 year old to even do.

To give a bit more of a realistic point of view to this thread: I have around 10 years of working experience as a software engineer working in a few countries in Europe. Just recently I have reached my personal highest salary: 95K EUR/year before taxes, which is around 5K after taxes per month. I know there are fresh graduates in the US that are probably making double of that in their first year at FAANG; but hey that's life, to each their own!

Re: Ask HN: Need Career Recommendations

#7

Ah this reeks of bs but welcome to hacker news where everyone gets the 350k+ offers. Lol posting the #2 for Epic Games, this totally is very real and very possible for a 10 year old to even do.

Hi. I've edited my profile description for proof, https://hackerone.com/f9cd8782?type=user

Re: Ask HN: Need Career Recommendations

#8
post #5

If you are 17 and have already being doing sec research for 3 years... well, why do you have trouble choosing between smart contracts and browser security? From my point of view, you could do both. More seriously, if you haven't already, brush up your math/physics skills to get ready for university, and do either computer science or software engineering. It's only 3 or 4 years but the diploma will last you forever. S…

Hey. Thanks for your message, I've already thought about working on my math skills, also wanted to take some time and read into cryptography.

Much appreciated, thinking about it.

Re: Ask HN: Need Career Recommendations

#9
post #2

Hey that’s impressive that you’re so young and found so many vulns. If I was in your place I would chart out a path for myself to be CISO or CIO at a large org. Continue with your graduation and attempt to get ethical hacking certifications (CISSP or CompTia junior or senior year). I would also start a technical blog about your research (once those are patched ofcourse) This will be a boost to your credentials when y…

Hey, thanks for your message.

I wanted to start a technical blog, but Epic Games never (and still don't) gave me permission to publish my research about Unreal Engine 0days or remote code execution in their games.

Will definitely work on certifications in the future.

Post reply on HN