It Security Track/Path

ITSpectreITSpectre Member Posts: 1,040 ■■■■□□□□□□
in IT Jobs / Degrees
Hello all,

So my goal after thinking about this more in depth over the past month, I want to leave the help desk and get into the Infosec realm. Based on many many threads that are posted here.... these things I do need to know

- Networking concepts in detail
- the OSI Model in detail
- How a OS system works in detail
- Linux
- Python

Certification Lineup

- Sec+ (complete)
- RHCSA (in progress)
- eJPT
- CCNA/MCSA
- OSCP
- CISSP

Right now I am working on my RHCSA. The job I am at now may be sending me to another state but it will be for a sysops job working with Linux and Windows as an administrator. I am hoping I get that job. I really do not want to go to another help desk job again after working at different desks for over 2 years. My goal is to be a pentester and show people where the vunerabilities are in their own networks. I want to also teach classes on basic security concepts and how to secure their OWN networks at home... by telling and showing them how to do it... (this will also count for CE credits)

I welcome any and all advice on how to attain my goal!
In the darkest hour, there is always a way out - Eve ME3 :cool:
“The measure of an individual can be difficult to discern by actions alone.” – Thane Krios
· Share on FacebookShare on Twitter

Comments

  • tpatt100tpatt100 Member Posts: 2,991 ■■■■■■■■■□
    Focus on the sysops job for a while, knowing how a corporate network works will probably make pen testing easier to understand.
    · Share on FacebookShare on Twitter
  • beadsbeads Member Posts: 1,533 ■■■■■■■■■□
    Another alternative into security would audit or as I like to say where InfoSec careers either start or go to die. - b/eads
    · Share on FacebookShare on Twitter
  • dmoore44dmoore44 Member Posts: 646
    If you can get your employer to send you, the SANS training is invaluable. The material and instructors are top notch.

    Also, you might want to pick up some light reading... I'd recommend Counter Hack Reloaded by Ed Skoudis to break the ice on security related topics (it's a bit old now, but still a great read), the latest edition of Windows Internals (6E Part 1 and 6E Part 2) by Mark Russinovich to cover Windows in depth, Network Security Through Data Analysis by Michael Collins to learn threat detection methodology (The Practice of Network Security Monitoring by Richard Bejtlich is also fantastic for this topic), and the Red Team Field Manual by Ben Clark to have a handy desk reference for various security tools.
    Graduated Carnegie Mellon University MSIT: Information Security & Assurance Currently Reading Books on TensorFlow
    · Share on FacebookShare on Twitter
  • jerseytechjerseytech Member Posts: 59 ■■□□□□□□□□
    May I ask why a MCSA cert?
    · Share on FacebookShare on Twitter
  • ITSpectreITSpectre Member Posts: 1,040 ■■■■□□□□□□
    jerseytech wrote: »
    May I ask why a MCSA cert?

    The reason why I added the MCSA cert is I need to understand how windows networking work... or can I just substitute that for a CCNA/CCNP
    In the darkest hour, there is always a way out - Eve ME3 :cool:
    “The measure of an individual can be difficult to discern by actions alone.” – Thane Krios
    · Share on FacebookShare on Twitter
  • UnixGuyUnixGuy Mod Posts: 4,570 Mod
    In your sysop job:
    - Learn how to script (bash for linux, powershell for windows)
    - Learn everything you can about Active Directory. I mean everything!
    - Learn everything you can about Certificates management.
    - Get your hands on on any Enterprise Anti Virus solution.
    - Learn about Malware
    - Any mobile management solution (MDM).
    - Learn Patching.
    - Get your hands on any proxy/firewall you might have.
    - Are they using any cloud (Azure/AWS)? Learn everything about it on the job.

    (Truth is, you don't necessarily need to pass RHCSA or MCSA...but why not if you're very driven. CCNA is good too).

    Certificates wise:
    - Get the CISSP. Take it, don't wait till you have 5 yrs of experience, just be an associate. Get it out of the way. it's not that hard.
    - Any SANS you can. Even if you have to pay for it (trust me). The more the better.
    - eLearnSecurit, you will learn a lot for cheap-ish.
    - OSCP if you can dedicate 3 months of your life for it, I say don't postpone it, take it as soon as you can.
    - If you happen to work with any firewall in your sysop job...get a certificate for that.
    - if you happen to work with amazon, get Amazon AWS cert.
    Certs: GSTRT, GPEN, GCFA, CISM, CRISC, RHCE

    Learn GRC! GRC Mastery : https://grcmastery.com 

    · Share on FacebookShare on Twitter
  • chrisonechrisone Member Posts: 2,278 ■■■■■■■■■□
    I think perhaps ccna is overkill. It is a very very hard cert if you have zero networking experience. I think for what you want to get out of networking you can achieve with the network+ exam. The ccna is very long, lots of material to cover, two 800pg books, labs, and learning a lot of Cisco related fluff that you do not necessarily need for security/pentesting. I think your good with comptia network+ exam here.e
    Certs: CISSP, EnCE, OSCP, CRTP, eCTHPv2, eCPPT, eCIR, LFCS, CEH, SPLK-1002, SC-200, SC-300, AZ-900, AZ-500, VHL:Advanced+
    2023 Cert Goals: SC-100, eCPTX
    · Share on FacebookShare on Twitter
  • ITSpectreITSpectre Member Posts: 1,040 ■■■■□□□□□□
    UnixGuy wrote: »
    In your sysop job:
    - Learn how to script (bash for linux, powershell for windows)
    - Learn everything you can about Active Directory. I mean everything!
    - Learn everything you can about Certificates management.
    - Get your hands on on any Enterprise Anti Virus solution.
    - Learn about Malware
    - Any mobile management solution (MDM).
    - Learn Patching.
    - Get your hands on any proxy/firewall you might have.
    - Are they using any cloud (Azure/AWS)? Learn everything about it on the job.

    (Truth is, you don't necessarily need to pass RHCSA or MCSA...but why not if you're very driven. CCNA is good too).

    Certificates wise:
    - Get the CISSP. Take it, don't wait till you have 5 yrs of experience, just be an associate. Get it out of the way. it's not that hard.
    - Any SANS you can. Even if you have to pay for it (trust me). The more the better.
    - eLearnSecurit, you will learn a lot for cheap-ish.
    - OSCP if you can dedicate 3 months of your life for it, I say don't postpone it, take it as soon as you can.
    - If you happen to work with any firewall in your sysop job...get a certificate for that.
    - if you happen to work with amazon, get Amazon AWS cert.

    Now to build on what you just said *very good info and I wrote it down in my notebook that I keep at my desk* To go deeper into what I want to do in Infosec... I decided to get into infosec first.... THEN focus on Hacking, pentesting, intrusion, etc.... Thinking like a hacker but being able to document what I do and how I did it... (I keep a notebook near me and when I learn something new I document what I do to make something happen, or the steps I took to do it) So I am already in the habit of documentation. At my last job I was tasked with documentation because I sent out a document every morning about Security threats, trojans, tips, and what issues we were dealing with for that day. (The help desk lead loved me for that because it made his job easy)
    In the darkest hour, there is always a way out - Eve ME3 :cool:
    “The measure of an individual can be difficult to discern by actions alone.” – Thane Krios
    · Share on FacebookShare on Twitter
  • ITSpectreITSpectre Member Posts: 1,040 ■■■■□□□□□□
    Also for the CISSP.... Ive already started listening to audio lectures in the car on the way to work... once I complete those I will get the sybex book. I have noticed that most of the materials covered some of it is based off a secured environment.
    In the darkest hour, there is always a way out - Eve ME3 :cool:
    “The measure of an individual can be difficult to discern by actions alone.” – Thane Krios
    · Share on FacebookShare on Twitter
  • AntonovAntonov Member Posts: 10 ■□□□□□□□□□
    Very informative , thanx
    · Share on FacebookShare on Twitter
Sign In or Register to comment.