How to move from help desk to cybersecurity?

Question

Description:

Been on help desk for 3 years, and I’m torn between staying on my current team for a possible promotion or jumping to a junior cybersecurity role that says it wants SIEM and incident response experience. I’m getting mixed advice because I have solid troubleshooting and ticketing skills, but my hands-on security work is mostly from labs and a few internal audits. How do I position myself for the cybersecurity move without making my resume look too thin, and is it smarter to wait for a help desk to sysadmin step first or apply now?

3 Answers

Sort by:

Want to answer?

Join the conversation and help others by sharing your insights.

Log in to your account or create a new one — it only takes a minute and gives you the ability to post answers, vote, and build your expert profile.

Log in or Register ›

How we moderate answers

We manually review all contributions to ensure that every answer provides clear, actionable, and professionally relevant guidance. We prioritize responses that show practical experience, cite real examples, or demonstrate familiarity with hiring, skills, and job-market trends. Low-quality, duplicate, or AI-generated content that lacks substance is filtered out to maintain accuracy and credibility across the platform.

What makes a high-quality answer

A high-quality answer offers structured, practical, and experience-based guidance that directly addresses the question. Strong answers include specific steps, industry examples, tools or frameworks, and clear reasoning rather than vague opinions. They avoid emotional language, personal journaling, or lifestyle advice, and instead focus on skills, responsibilities, hiring expectations, resumes, interviews, salary insights, and career transitions. Answers written by individuals with verified professional backgrounds or direct experience in the field are prioritized.

Expert participation rules

Experts participating in Q&A must base their answers on real professional experience, not speculation or generic statements. Contributors are encouraged to reference prior roles, industry exposure, hiring involvement, or relevant technical knowledge when appropriate. All expert responses must remain objective, neutral, and career-focused, avoiding promotional content, personal anecdotes, or lifestyle guidance. Verified experts may receive enhanced visibility on the platform, but only if their contributions consistently meet our quality standards and align with Jobicy’s career-focused topic guidelines.

Answer 1 · 2026-06-18T11:53:23+00:00

Go after the junior security role now, and frame your help desk time as real ops experience with user access, phishing reports, endpoint issues, and calm communication under pressure. Pair that with labs by naming tools you used, plus one or two internal audit wins. Huge W if you can show you already think like an analyst.

Answer 2 · 2026-06-21T17:59:19+00:00

Apply now. Your help desk time isn’t thin - it’s the base layer. Ticket triage, user access, endpoint weirdness, and incident-style troubleshooting map cleanly to SOC work. I watched a whole team get hired off that story because they could already think in signals, not just clicks.

Answer 3 · 2026-07-01T00:14:39+00:00

help desk first, cyber later was the old corporate conveyor belt, and I would not wait for a sysadmin badge if the junior security post is already asking for SIEM and incident response. Frame 3 years as volume plus pattern recognition - 50+ tickets a week, access resets, phishing triage, endpoint fixes, audit notes - then add labs with exact tools like Splunk or Sentinel and 2-3 concrtee detections. Apply now; the promotion queue is usually just another meeting loop.