General IT Experience counted as Cyber Experience?

GeekyChick

Today I had an interview with HR at a company I was interested in. The topic of years of experience and salary came up. I have 15+ years of IT experience, including helpdesk, network admin, network design/consulting, and cybersecurity. I was surprised the person in HR didn't consider the general IT experience as what she called "cyber" experience. What do you all think? If you are a hiring manager would you consider IT experience specifically applicable to a cybersecurity job (information security job)? In other words if there was a job that asked for 7 years of experience, would it be acceptable for me to include my years of IT in the count?

stryder144

Yes, especially if it is cyber "adjacent": building secure networks, provisioning user accounts and verifying that the permissions/groups are correct, etc.

GeekyChick

Hi Stryder! That's what I thought. I'm not sure she understood that IT experience helps to build the foundation for security. If you don't understand the basics of networking, for example, how could you defend it?

shochan

Ya know, cybersecurity type jobs were not that plentiful back say 5-10yrs ago...Sure they were out there, but were not called that specific terminology per se.  Majority of the cybersecurity jobs I have seen want 10+yrs of IT experience, not necessarily all cybersecurity exp.  I believe if someone has been in IT for over 10yrs that has done some sort of hardened of a server/wkstn/router/switches/etc, which would mean some sort of security experience in my mind, but that's only my opinion...

GeekyChick

Thank you Shochan! That's a good point. There weren't that many "cyber" jobs 10 years ago, at least not like there are today. 

E Double U

Interesting topic. I would consider  some"general" IT experience as information security to a degree because many functions within IT have a security component. It seems some people are simply looking for the word security in the job title or team name without focusing on the actual work. For example, at a previous employer the InfoSec team took over responsibility of firewall management from the networking team. Would you say that InfoSec started doing networking or had the networking team been performing an security task? 

SteveLavoie

Too many HR department focus on the job title. IMO, most IT Security job should have at least 5 years or general IT support/networking/administration before being considered for a security job (in a infrastructure IT Security job).  

JDMurray

I would stay away from orgs looking for people with "cyber experience." That is a pop-culture buzzphrase that suggests an org not really knowing what it is needing for information security people. If an org's job posting (or an HR rep) doesn't use industry-standard terminology then they are short on more than just security people.

GeekyChick

Interesting @JDMurray. Now that I think of it, I don't believe this company was heavy into security. I think they are more into development. Not that those 2 are mutually exclusive. My bet is they are just now trying to incorporate security into their development. 

That company didn't have anything for me, but right after that I was offered a federal position that I'm considering. It's a cybersecurity job very similar to what I'm currently doing. I haven't officially accepted it yet as I'm still not sure. I have no experience with public sector jobs.

JDMurray

Public sector (government) jobs pay less than the equivalent private sector (commercial) jobs, but they may have better benefits, retirement, and other perks than what you might be seeing now in the private sector market. You can get the best of both worlds by working for a private sector company that is a government contractor, such as most aerospace companies are. Government contracts and clearances with private sector pay and usually good benefits too.

GeekyChick

Yes, you're right. I'm working as a contractor now and it's not bad. I wasn't even looking for a government job exactly. There was a particular "project" I was interested in and this came open. I'm still kind of on the fence. I'm waiting to see what they can do salary-wise before I decide. Have you worked as a govie?