Cybersecurity Career Guide: Starting from Diyarbakır
Diyarbakır's cybersecurity ecosystem is growing. Dicle University, OIZ firms and remote opportunities have expanded sharply since 2020. Here's an 18-24 month roadmap for starting from scratch — the process we follow while growing our own team at VefaSec.
0-6 Months: Foundations
Networking + Linux + scripting. TCP/IP, routing, subnetting. Kali Linux install and daily use. Python and Bash basics. Resources: TryHackMe 'Pre Security' + 'Jr Penetration Tester' paths (~$10/month). Dicle University's CS program suits the groundwork.
First CTFs (picoCTF, HackTheBox starting point). Year 1 target: solve 30+ HTB boxes, attend 5+ CTF events. GitHub profile — every write-up and script in a public repo.
6-12 Months: Specialization
Pick a focus: web pentest, mobile, network, cloud, AppSec, red team. No path is universally right — depth builds a strong CV. I recommend web + cloud to my team — highest market demand.
First cert: eJPT ($200). CEH is expensive and dated; eJPT is more hands-on. Aim for HTB rank Hacker → Pro Hacker. Follow bug bounty pros on Twitter/LinkedIn and read write-ups.
12-18 Months: First Professional Job
CV ready: one cert, 50+ boxes, GitHub. Local options include VefaSec, other regional security firms and IT departments at large OIZ companies. For remote: Upwork, TopTal, Remote.co — foreign firms actively seek Turkish pentesters.
Salary bands (2026): Junior Diyarbakır ₺35-55K, Remote TR ₺60-90K, Remote abroad $1.5-3K/month. Your first job shapes the next 3-5 years — weigh mentorship and learning over salary.
18-24 Months: OSCP and Expert Level
OSCP is the most prestigious entry certification. $1,600 exam + 3-month lab access. Hard — 70% fail on the first try. Passing it lifts your salary by 40-60%.
After OSCP: OSWE (web), OSEP (red team), CISSP (management). Choose based on direction: red teamer → OSEP, defense/management → CISSP, web expert → OSWE.
Diyarbakır Advantages
Low cost of living + remote work = strong financial runway. Someone making $3K/month in Istanbul spending $2.5K can make $2K in Diyarbakır spending $1K — higher real savings.
The regional cyber community is growing. Dicle University CTF team, VefaSec's monthly tech meetups, regional conferences. VefaSec opens two junior roles annually — Diyarbakır-based, remote-first.
Talk to VefaSec about your project or audit needs.
Our Diyarbakır-based team delivers end-to-end software development, penetration testing and cybersecurity advisory to enterprise clients. The discovery call is free and non-binding.