Preparing for job role of Network Security Analyst

GreenHornet

First a little background:
Current job role: Managed Hosting Network Tier II
Technologies: Cisco ASA
A) VPN S2S configurations
Access-list to control inbound and outbound traffic
C) Configuring high availability for (2) cisco ASA's

F5
A) Building VIP's and Pools for servers
Installing SSL Certificate's (still kind of new at this one, I hate these)
C) Removing servers from pool (load-balancing) for server updates
============================================================
***Technologies I'm practicing on my own time via labs, boson netsim, and GNS3***

Cisco Router/Juniper
A) BGP, OSPF, HSRP troubleshooting
Practicing GRE tunnels config

I'm focusing my efforts in the following:
A) Packet Analysis
IDS/IPS
C) TACAS, RADIUS
D) Failover config for both asa
E) Linux navigation, installation of vmware on linux, tcp/****, ip-tables, wireshark
F) Need information on which IDS/IPS to practice with


Future Certifications:
CEH
CISSP

I'm just looking for feedback from hiring managers and senior'd Network Security Engineers/ Analyst

DonDeal

Do you have a bachelors degree? Over 70% of the security analysts positions require it, but some will take experience on a one to one basis.

GreenHornet

DonDeal, yes I do.

B.S. IT/Telecommunications
A.S. Network System Administration
M.S. Information Security Management 60% completed

YFZblu

If you're looking for a pure Analyst role, I wouldn't pursue more of the network administration related technologies. Including TACACS/RADIUS. Your network experience will be valuable and already provides more than enough on that end.

Definitely learn Linux, and deep-dive into TCP/IP if you haven't already. You'll also want to learn at least one scripting language that you can rely on.

GreenHornet

I'm not looking for a pure Analyst role. I dont want to lose my networking skills. I'm wondering if I should just leave the CEH alone and just focus on getting better with the following:

Linux
Perl Scripting
Packet Analyzer
IDS/IPS

I cant afford any of the SANS's training or certifications so I'll just focus on the CISSP. Any thoughts would be greatly appreciated ?

lsud00d

SSL certs are pretty straightforward once you get the hang out of it...where it really starts getting interesting is federation across web/application farms...pay attention if you're working with SAN certs!