Career advice needed

docrice

We get a lot of posts from people trying to break into infosec (many which are essentially the same thing over and over). I came across a few blogs on this subject which hopefully will keep this sticky more up to date:

Rafal Los:
http://blog.wh1t3rabbit.net/2014/02/entry-level-hiring-in-infosec-comedy-of.html

Little Mac:
http://forensicaliente.blogspot.com/2013/03/getting-your-feet-wet-joining.html

Mandiant:
https://www.mandiant.com/blog/raising-public-profile-information-security-professional/

Info for BSides:
http://www.securitybsides.com/w/page/12194156/FrontPage

docrice

Here's another presentation (slides and notes only) from DEF CON Atlanta by "adric":

http://www.atlbbs.com/sharkin/breakin-dc404.pdf

http://f.adric.net/index.cgi/wiki?name=Breakin

teancum144

The following is a great video on what it takes to break into the security field:
https://www.youtube.com/watch?v=0MFfBS4KskY

newjack

Thanks, these all seem like great blogs and videos.

Out of college I got an entry level position in Forensics and then I left the position for a more involved role with security as a Support Engineer for security product. I now want to move from that to a more analytical role or network security role in a financial firm. I just scheduled my Security + exam next week, once I pass that I think I will move onto the SSCP or the CISSP.

ashish.acharya@gmail.com

Hi Guys,

Im an IT professional with 12 yrs of exp. I have 7+ yrs of programming background and 5 hrs of Project Mgt. I am quite faschinated by the IT security auditing domain and have attempted for my CISA certifications. Needed advice on further certifications so as to move into this field.

Request all your valuable advices please.

Regards,

raybfree

I personally would go through the Cisco Security track. Cisco is regarded... add security to that, you'll be in demand. With limited funds, you want to invest in the more technical track since you already have your CISSP.

andrecvnt

Hey guys, whatsup! I'm new to the forum, I was always seeing the posts but I have never registered until now!
I want you guys to give me an advice..


My background:
5 years of experience working with Security in as a Consultant at PricewaterhouseCoopers in Brazil.
Certifications: CEHv8
My projects are more related to Penetration Testing and Security analysis.


My goal: work abroad. I want to work in Europe (I'm from Brazil). What do you guys think I need to study or which certifications should I seek to complete this goal? I have paid for the ECPPT, I'm studying for it at the moment, but I'm not sure if this will be enough for being accepted in job interviews abroad. I want to complete this goal in the end of July 2016, so I have 1 year to prepare myself. Which advise you guys would give me to accomplish this?

teancum144

Here's a relevant thread on this topic:

• http://www.techexams.net/forums/security-certifications/112239-isacas-new-csx-cyber-security-nexus-certifications-roadmap.html#post953741

diggitle

In my experience the easiest way into information security is to target small companies. Enterprise companies are in need of a person with 7+ IT years of experience with CCNP, MCSE, etc) and Info Sec experience with CISSP. Most small companies due to budget constraints want trainable entry to mid level folks.

riverupdude

Same questions, but I've been long term unemployed. I acquired Linux+ last year, A+ & Network+ before that, however, I would like to learn more and get CERTIFIED in something useful Networking related. I found that the A+ exam was changing when I was taking it and don't wish to purchase anything that is on the verge of being obsolete in 6 months, that is related to the study guides. Any advice.

I was certified AIX UNIX administrator for IBM for many years and support 24/7 Admin services, familiar with TCP ****,firewalls, etc, just never worked with switches and perimeter devices. So, just being humbled by all the chatter and hope someone can make a constructive suggestion. I'm am nearing retirement age as well, but I've always worked in IT.

Seeking suggested entry point certification for Networking Security and Self Study guides.

docrice

This is quite an old thread to be revived, but I'd say go read up on the CCNA. After Network+, CCNA is a pretty logical step. For labs you can eBay older equipment cheaply. Although I'm not a proponent of vendor-centric certifications which tend to drift off into teaching about equipment rather than security, I think the material in the CCNA is a good start even though it's not really security-focused.

JDMurray

Looking at what education/certification/experience is requested on job positing that a candidate find desirable is the best due diligence. I work in NetSec Ops and I use the information in the CCNA R/S every day. The same is true of the Security+, which has quite a bit of networking stuff in it, as does the CEH. All of those certs are asked for by hiring managers. Eventually, it comes down to what your budget for certs is.

bhuvanesh2016

Myself bhuvanesh from India. I'm a BE graduate and holding CCNA & CEH certifications with 5years of IT experience (NOC -3yrs & SOC -2yrs). Since i do not have the programming skills, I'm very much confused on chosing my further path. Whether to chose CISSP or go for forensics or go for Incident handler..

kaiju

You will get better results if you create your own thread.