Where to go from here (professional looking for direction)

ducatibob

Hi all,

Need some advice here. I've been in IT since 2000. I am a security professional and have been a CISSP since 2002. My past role was a Systems Security Engineer and my current position is a Senior Security Information Specialist. My certifications are as follows: CISSP, CCSP, CEH, MCP, TICSA, S+, L+ and GCIH.

I currently make a very good salary working for a health insurance company, however I am not doing what I "love." I am skilled in vulnerability assessments and penetration testing. That's what I did in my past position. Now I find myself answering RFPs etc, basically becoming a dull blade. To make matters worst, its not the ideal environment I see myself in. Anyone who has worked in Insurance may understand that statement.

I am looking into another certification, but don't know where to even start. Is the EC Council CHFI worth pursuing?

I don't want to be in a management position, but do want to get back to the technical stuff a little bit more. I would prefer a hybrid of technical stuff and project management. Are the new ISC2 certs any good?

Thanks,
Bob

dynamik

You should look at the OSCP: http://www.offensive-security.com/

If you're looking for a more technical (ISC)2 cert, check out the SSCP. I'm not too familiar with the concentrations or the new software development-related one though.

If you're looking at forensics, there's some good suggestions in this thread: http://techexams.net/forums/viewtopic.php?t=40222

Welcome to the forums

UnixGuy

if you would like to move to the networking side of things, maybe you can try CCNA: security, CCSP, and CCIE:security. That if you found a networking job.

Kasor

I don't think certification will help you. You should go after the advance computer science degree which offer you better career and understanding about what is security.