CISSP job question

billyr2009

Hi folks,

I had a question and I thought who better to ask than this CISSP forum. Since passing the CISSP I find that I have the option of working as either a security auditor or an ids analyst. I have experience in both almost equally. Which do you guys feel is more in demand and which do you feel will be the position that will be around for a long time?

imthatguy

Sounds like you should really think about whether you would like to be in a more technical or more business-oriented role. It's personal preference, really--with the recent realization from business that security is directly related to your bottom line, as well as reputation, I believe both will be in demand for quite a while. Both are good positions for those who are incessantly analytical, but I would think security auditing requires a bit more paper work--however IDS analysts do have to prepare reports as well. In terms of pay, I would think security auditor would be around 25-30% higher than that of the IDS analyst, or more, depending on the organization. That's my two cents.

JDMurray

What kind of security auditor? What are the duties?

billyr2009

That would be government security compliance audits. It would include some vulnerability scanning.

rraman

My wife has 4 years of network software test/development 13 years before and now wants to take CISSP exam. Will this prior work experience satisfy CISSP certification requirements. Can you get CISSP certification without recent work experience? What are the prospects for entry level positions in bay area?

Thanks in advance

billyr2009

To elaborate more on Jd post. It would be a government auditor such as in NIST/RMF and doing vulnerability assessments.

@rramen sorry I don't the have answer to your question. To check if your wife's software engineering is applicable to the cissp it would be best to email isc2 and ask them.