Despite recession, information security certification pay continues to climb

veritas_libertas

Find more posts tagged with

Comments

JDMurray

Salaries may be climbing slightly, but hiring has slowed and security people are not immune to lay-offs.

Tin32

JDMurray wrote: »

Salaries may be climbing slightly, but hiring has slowed and security people are not immune to lay-offs.

A lot of the companies are bringing security in house, which means there is certainly some hiring going on.

Turgon

It's hot and a lot of people are trying to get in on it. But as the cost of security rises so will attempts to keep the costs down. A lot of people trying to get in on security underestimate the effort required to get on and the kind of work involved. A lot of paperwork in many roles and on the technical side it can take years and a lot of effort to accumulate the specialist skills. Some folks seem to think it's mostly pen testing. Running pentests isn't difficult, knowing what to test and interpreting the results in a useful way is quite another.

dynamik

Turgon wrote: »

It's hot and a lot of people are trying to get in on it.

How did this thread become about my mom?

JDMurray

dynamik wrote: »

turgon wrote:

It's hot and a lot of people are trying to get in on it.

How did this thread become about my mom?

Eeww...

eMeS

Turgon wrote: »

It's hot and a lot of people are trying to get in on it. But as the cost of security rises so will attempts to keep the costs down. A lot of people trying to get in on security underestimate the effort required to get on and the kind of work involved. A lot of paperwork in many roles and on the technical side it can take years and a lot of effort to accumulate the specialist skills. Some folks seem to think it's mostly pen testing. Running pentests isn't difficult, knowing what to test and interpreting the results in a useful way is quite another.

The system said I couldn't give you rep for this, but I would if I could. More people need to have an honest and serious view of security as a career such as what Turgon has stated here.

Usually when something sounds "cool" it will attract a lot of people.

MS

veritas_libertas

eMeS wrote: »

The system said I couldn't give you rep for this, but I would if I could. More people need to have an honest and serious view of security as a career such as what Turgon has stated here.

Usually when something sounds "cool" it will attract a lot of people.

MS

This is true. I graduated with about 15 students looking to get into computer networking roles (AAS in Computer Networking Technology). They all thought it would be, "cool" to work with computer networks. Of all those students I know of two (me included) that are seriously pursuing a career. I do want to get into security down the line, but I realize it will take dedication and possibly taking a Network Admin role or something else before end up there.

elover_jm

dynamik wrote: »

How did this thread become about my mom?

Please explain?????

tpatt100

Turgon wrote: »

It's hot and a lot of people are trying to get in on it. But as the cost of security rises so will attempts to keep the costs down. A lot of people trying to get in on security underestimate the effort required to get on and the kind of work involved. A lot of paperwork in many roles and on the technical side it can take years and a lot of effort to accumulate the specialist skills. Some folks seem to think it's mostly pen testing. Running pentests isn't difficult, knowing what to test and interpreting the results in a useful way is quite another.

Amen to the paperwork. People think security is all high speed technical stuff. Once you hit the enterprise level its 50 percent administrative Visio/Project/Excel.

Keeping track of vulnerabilities, organizing patch schedules, exceptions for patches due to software conflicts, etc, etc. Anybody can pick up the techy stuff, keeping track of the b.s. due to external audits is a huge part of security.

Slowhand

dynamik wrote: »

How did this thread become about my mom?

I thought every thread was about your mom.

dynamik

I work in security and spend a great deal of my time pouring over policies and writing reports. It's glamorous beyond belief, and all the women flock to me.

Turgon

tpatt100 wrote: »

Amen to the paperwork. People think security is all high speed technical stuff. Once you hit the enterprise level its 50 percent administrative Visio/Project/Excel.

Keeping track of vulnerabilities, organizing patch schedules, exceptions for patches due to software conflicts, etc, etc. Anybody can pick up the techy stuff, keeping track of the b.s. due to external audits is a huge part of security.

hehehe..no kidding. Getting designs and firewall rules approved has been a joyous exercise for many years. Yup lots and lots of policy documents abound.