How do I transition from a Compliance/Audit career track to something more technical?

vital

Half my career background is in IT Audit and I'm currently in a Governance/Risk/Compliance related Security Analyst position. I also have my CISSP, CISA, Security+ and Network+.

I'm interested in getting into Intrusion Analyst, Incident Handling, Pen Testing, or Security Engineering. All the technical security jobs seem to require 2+ year related experience and my current experience doesn't seem to really count much. How do I break into this barrier? I even asked the Security Ops Director in my company and he pretty much told me they prefer someone w/ experience.

Mike7

Maybe ask your director if he will consider you for pen testing role if you can get OSCP certified within say 3 months.