seigex wrote: » Adding to mjsinhsv's post, you have 8 years in "Software Development" .. I'm assuming you used SDLC? And if so I'm assuming you took security into account during your development, such as protection against buffer overflows, or XSS attacks. That would fall under the Software Development Security domain. If you took care of SSL certificates, or maintained a local CA, or applied any other kind of data hashing/encryption, then that would fall under cryptography. And your networking experience falls under network security if you applied ACLs to the IOS configuration files, and set up cryptomaps. It's all about how you articulate your justification for 5 years in at least 2 domains.
beads wrote: » @musman The physical security angle sounds flimsy at best. Better to concentrate on the SDLC, compliance, and such. Go through all 10 domains and see what does and doesn't fit. I secured a bicycle with a lock or worked behind a locked door is pretty weak. That would entail nearly everyone imaginable. Still I am sure the ISC2 would accept it. Seriously! Networking isn't necessarily the toughest domain. Its generally telecom and crypto that make people wince in pain. - b/eads
