Aspiring Cloud Security Engineer with no formal IT background — where do I realistically start?
Hey Everyone
Hope you are doing well, I am actually in guidance from the cybersecurity experts of this subreddit, Please help me if you can.
So my actual long-term goal is to become a Cloud Security Engineer, but I'm fully aware that's a senior-level specialization and I need to work my way up to it. I have no formal IT degree or certifications yet, everything I know has been self-taught alongside nearly six years of technical support and community operations work in the Web3/crypto space.
Here's where I currently stand skill-wise:- Linux command-line (file ops, text processing, process management, networking utilities, bash scripting for basic automation)
Networking fundamentals (TCP/IP, DNS, HTTP/HTTPS, SSH, subnetting/CIDR)
AWS basics (EC2, S3, IAM — self-study via Free Tier; Cloud Practitioner exam in progress)
Web3/blockchain domain knowledge (wallets, transaction debugging, block explorers, on-chain analytics via Arkham and Nansen).
My support background involved issue reproduction, structured bug reporting, escalating to engineering, writing security advisories and onboarding documentation, and responding to phishing/scam incidents in real time — so I'm not completely starting from zero on the security awareness side, but I know that's a long way from actual security engineering.
What I'm trying to figure out:- What entry-level roles should I realistically be targeting right now to start moving toward Cloud Security? (Cloud Support Engineer? SOC Analyst? IT Help Desk? Something else?)
Is there a stepping-stone path that makes sense — e.g., Cloud Support → SOC → Cloud Security, or is there a smarter route?
Which certifications should I prioritize and in what order?
I keep seeing CompTIA Security+, AWS Solutions Architect, and CySA+ mentioned but I'm not sure what sequence makes sense for my specific background?
Is my Web3/blockchain domain knowledge actually useful in this path, or mostly irrelevant to cloud security roles?
Honest and direct answers appreciated — I'd rather hear the hard truth now than spend a year going in the wrong direction.