u/Resident-Wrangler-65

Hi society.

I'm interested in cybersecurity and planning to specialize in penetration testing through self-study, without pursuing a university degree.

I have around a year to build toward a junior role. Here are my honest questions for people who work in the field or hire:

1. Is it possible to land an entry-level pentester job without a degree if the portfolio is strong enough?

2. One year — realistic, or am I miscalculating?

3. Does a GitHub portfolio actually influence hiring decisions, or do certifications still dominate the screening process?

4. What do most beginners waste time on that you wish someone had told them earlier?

Not looking for motivation. Just reality.