Infosec jobs with no degree?

bhoops

If I want to get in to Infosec, will I get shut out from lack of a 4 year degree?

MeanDrunkR2D2

Most likely you will be. It's a higher level role.

devilbones

Maybe. How much experience do you have?

Danielm7

Lots and lots of people in security don't have degrees. They also have experience, some have certs, but mostly just have to really know what you're doing. Longer term you'll likely want one, all fields in the last decade have had a lot of education inflation. Even my wife who is in the medical field, roles that used to require a BS are now a doctorate, ones that were an AS years ago are now a BS, etc. Think of it as insurance.

With all that said, if you don't already have varied IT experience and some security knowledge you're likely going to have a hard time getting in the front door.

636-555-3226

You don't need a degree to be a security guy, you need security knowledge to be a security guy. Get that knowledge and you'll get a security job.

Remedymp

You won't get shut out for not having it. But, if there is a second or third candidate with a BS or MS, you're up against some more favorable competition for those who do have it.

markulous

636-555-3226 wrote: »

You don't need a degree to be a security guy, you need security knowledge to be a security guy. Get that knowledge and you'll get a security job.

This is true, but a degree definitely helps. At the very least it will get you past HR filters.

cyberguypr

As a Sr. Infosec guy with say in hiring matters, I won't hold the lack of a degree against a properly qualified candidate with the right experience. However, my HR folks will use it to narrow down the pool of candidates. Not much I can do about that. So the answer to the question is no, it won't shut you out but will reduce the universe of potential positions you could go for.

BerkshireHerd

agree no degree is required, however, it will allow HR to narrow a stack of resumes in my opinion.

Terminator X

If you don't have a degree you will need the experience. Most job postings will state if you don't have a degree, you'll need "x" amount of years experience in lieu of it. Also will help long term in the way of promotion or finding other jobs. Experience + degree + certs are the golden! Good luck!

gespenstern

It'll certainly help, but doable without it. I don't have one (yet) and I'm a security architect just because I have the certs and I'm good at what I do.

BillHoo

The military is hiring people for cyber security.

The Navy just put out a press release they are developing an aptitude test to identify recruits who have a cyber security mindset.

In my area, a senior NCO (sergeant rank) can get a ton of cyber security certs paid for by the military and years of experience and a security clearance. When he's tired of his $56K salary, he goes into the private sector for $105K to start.

The great thing about It security in the military.. for the most part, it's one of those military jobs where you don't have to be shot at most of the time.

beads

Your limited without a degree and likely forget about moving out of the lower technical roles but I have a Windows administrator who is happy to be doing low level work in his 50s. Without a degree your going to be forever apologizing for not having an education. Seen it done but it's never pretty.

Mind boggling.

- b/eads

cyberguypr

I see your 50+ Windows admin and raise you two guys that we have: 50+ and doing desktop support. If they are happy with it, I'm no one to judge.

Danielm7

beads, making me think of a bunch of coworkers of mine. We have tuition reimbursement, not a ton, but whatever the non-tax amount is, I think 5250ish. Almost no one takes advantage of it, I just can't understand why, it's free if you take your time or pick somewhere that doesn't cost more than that amount. I talked to one of my coworkers about it recently as I explained I was looking into MS programs and he's actually changed his mind and started calling around looking at different schools to finish his BS. No one else though, very strange to me.

bhoops

I've been programming and "devops" for 25 years, without a degree. I guess I am looking for something interesting to do. I'm a little burnt out on programming.

TechGromit

Remedymp wrote: »

You won't get shut out for not having it. But, if there is a second or third candidate with a BS or MS, you're up against some more favorable competition for those who do have it.

I agree, but there a real demand for qualified talent. So long as you have experience in something like Server Administration, you have a good shot at an entry level position. After all it's far cheaper for a company to hire a server admin and train them to be a security professional than to higher someone with experience already.

TechGromit

BillHoo wrote: »

The military is hiring people for cyber security.

I think your referring to joining the military, as opposed to civilian contractors. If memory serves me correctly, the Army military doesn't take anyone older than 35, but i think the Air Force recruits as old as 39. In this case I believe the original poster is older than 39.

docrice

I think there are lots of places where HR demands a degree for the sake of ticking a checkbox. In other organizations (or organizations where the hiring manager has influence over this), a degree can be optional. I interview candidates sometimes and the lack of a degree isn't much of a concern to me at all.

What is a concern however are essentials like:

1) communications skills (writing, presenting)
2) self-drive/motivation
3) sense of discipline
4) trustworthiness
5) skill set relevant to the position
6) mindset

Some of this can be honed through higher education. However, strong candidates tend to be the type who invest themselves on their own and become really good regardless of a piece of paper (degrees, certs). To me, a degree doesn't mean the candidate can deliver on the job. It can't hurt, but it's not an absolute must.

Remedymp

TechGromit wrote: »

I agree, but there a real demand for qualified talent. So long as you have experience in something like Server Administration, you have a good shot at an entry level position. After all it's far cheaper for a company to hire a server admin and train them to be a security professional than to higher someone with experience already.

While this may happen, it's a rarity. For example: I work for a top tier security company in the industry, and they won't even listen to you unless you have some sort of academic background first or you have done an internship in that related field. A Server Admin doesn't exactly contribute anything for the Infosec daily duties.

DatabaseHead

I know of two former help desk employees who don't have degrees who made it into security. One physically networked with the security team and eventually was pulled in when an opening came up. The other ended up moving companies and using the help desk experience he received to meet the requirements for the CISSP. Upon passing the CISSP he received (shortly after) a job offer as a security analyst for a LARGE financial company. Last I saw he was now a senior security analyst. (Yes it can be done)

Matt2

No degree, worked at a fortune 50 company doing IT and non IT. Now in a strictly security role at another company. I'm doing just fine.

SoCalGuy858

DatabaseHead wrote: »

I know of two former help desk employees who don't have degrees who made it into security. One physically networked with the security team and eventually was pulled in when an opening came up.

This is a carbon-copy of my story. Started with my company as a help desk / sysadmin guy back in 2013. Two years later, the Director of IT who hired me became the Director of Information Security with direction from the company to establish an enterprise security program. I had consistently demonstrated interest in security - through general chit chat and going out and earning every security cert I could at the time - and it payed off. After two years in the help desk / sysadmin role, I was brought over to the security team as the company's first and (still sole) security analyst.

It's certainly not the typical way to get into security, nor is my job the typical "security analyst" role that I usually see (SOC monitoring, etc.), but it's security!

EDIT - To add to previous comments regarding degrees: I don't have one. I'm one class away from my associates, though.

DDStime

bhoops wrote: »

If I want to get in to Infosec, will I get shut out from lack of a 4 year degree?

I know that a degree is not needed as I don't have one and FINALLY broke into an infosec role. What type of infosec are you interested in?

I stumbled onto a good site that explained a lot of confusion over infosec and other security jobs.


SECURITY ZIP - Home


It has some decent content about some certs and free training you can use specifically for infosec.