IT Security Training

paulsmith

Hello all

I am an IT Security newbie and i have been in my current role for 3 months. I have been told that there is money available for my professional development.

I currently have an active course on CBT Nuggets for Comp TIA Security +

But what other professional courses would you all recommend, the correct path? I'm confused. I hear MTA, Security + CISSP ETC....

Thanks

ITSec14

Since you are 3 months in, I would do Security+ or GSEC (if your employer will pay for it). How many years of overall IT experience do you have?

CISSP can be done too. It requires 5 years of experience in 2 or more of the domains covered in the exam, or you can get a waiver for 1 year of the required experience if you have an IT degree or a cert from the list provided on the (ISC)2 website.

paulsmith

Hello

thank you for your reply.

I have 6 years experience in IT working at 2nd Line level and in the final year was doing 3rd line stuff too.

I have a degree in Music Technology lol

Thanks

scaredoftests

I have a degree in food and beverage management as well. never used.

ITSec14

paulsmith wrote: »

Hello

thank you for your reply.

I have 6 years experience in IT working at 2nd Line level and in the final year was doing 3rd line stuff too.

I have a degree in Music Technology lol

Thanks

I would pursue the Security+ first to give you an understanding of general concepts. That exam usually takes about 1-2 months to prepare for, depending on your study habits.

After that, focus on building experience then I would attempt the CISSP after you have been in your current role for 1-1/2 years. You can use the Security+ for the 1 year experience waiver too.

jamesleecoleman

What sort of things do you do at work? Maybe we can give you more information on which certs.
Also tell us where you would like to go in the future.

markulous

What's their budget? If it's big, don't even bother with CompTIA, go straight to SANS GSEC.

UnixGuy

If you're company pays for SANS then do as many as you can

otherwise, go for Security+ then give eLearnSecurity eJPT ago, you will learn a lot for cheap

E Double U

Go for SANS if the budget will cover it. I would recommend GSEC since you're a rookie.

DatabaseHead

I'd learn as much OJT as possible, once that stabilizes then think about additional training. Nothing will beat what you learn on the job.

With that said, years ago I did some research on security certifications. Both on indeed and monster and the C|EH was one of the most sought after certifications out there. ~15% of all security positions either required or preferred. (If memory servers me correctly).

Of course the CISSP is the big boy, ~50% of all security positions required or preferred.

technogoat

How did you get an entry level job in IT security?

I'm working on helpdesk and plan to get my CCNA security soon

I want to get out of helpdesk

NavyMooseCCNA

technogoat wrote: »

How did you get an entry level job in IT security?

I'm working on helpdesk and plan to get my CCNA security soon

I want to get out of helpdesk

Getting the Security+ is something to think about. I've heard very mixed reviews of the CCNA Security exam. You may want to think about CCNA CyberSecurity.

technogoat

NavyMooseCCNA wrote: »

Getting the Security+ is something to think about. I've heard very mixed reviews of the CCNA Security exam. You may want to think about CCNA CyberSecurity.

Just ordered the book for CCNA security

I have classes in which we used ASA

also, CCNA security is free for me

I'll see if I can get cyberops covered

hmmmm, if CyberSecurity takes me less than a month then I'll go for it

the CCNA CyberSecurity looks good

might get Security+ as well just to get the foundations down

ITSpectre

I would get Sec+ to lay the foundation
Then either get CCNA security or CASP
following that I would get eJPT or OSCP if you want to be a Penntester
it depends on where you want to go in security.... find your area of interest and then go from there