Worth the move?

NightShade03

So I have been looking around for a new job for a few weeks now. I would really like a job in anything relating to security/linux/cisco however I don't seem to be getting anywhere with that. I did get an interview for a field systems engineer (for an MSP) but it would be dealing with almost all microsoft stuff. Do you think its worth the move even if it means more money?

impelse

That's depend of some factors. What are you doing right now in your present job?

NightShade03

The question is what am I NOT doing....we are a 2 person IT dept responsible for everything. Helpdesk, system admin, network, project management. My problem with that is I never really get much exp in one area because I'm constantly jumping from thing to thing and don't get to focus on anything. While we deal with M$ mostly here I run a few linux servers as well, but they really are for only hosting a web application I wrote for our helpdesk. I think that with the other job I may get more expose to hands on installs of large systems and troubleshooting.

RobertKaucher

Would the new position help you in achieving your ultimate goal of a position in info sec? Would it provide experience useful in such a position? If so, then I would say yes. If not then I would ask if it at least places you in a more advanced technical position. If it does and it is more money then I would say, why not.

But I wonder if you might be overlooking some posibilities in the two man shop. Could you not gain experince in info sec there by taking over duties of monitoring and auditing things such as the firewall, remote access server, database server, etc?

impelse

You got a problem that a lot of us have: GENERALIST, doing for everything.

I am trying to do more security, I am studying for CCNA security and after that I will do some linux and later CEH. During this time I already installed snort, configured some firewall and hardenning some switches.

If you feel that the new possition will help you to be more specialist I would say GO.

NightShade03

RobertKaucher wrote: »

Would the new position help you in achieving your ultimate goal of a position in info sec? Would it provide experience useful in such a position? If so, then I would say yes. If not then I would ask if it at least places you in a more advanced technical position. If it does and it is more money then I would say, why not.

But I wonder if you might be overlooking some posibilities in the two man shop. Could you not gain experince in info sec there by taking over duties of monitoring and auditing things such as the firewall, remote access server, database server, etc?

I think you made a lot of the points that I was kinda thinking.

It could possibly help with the info sec thing because you need to know how to defend systems not just break into them + M$ has the largest market share so its kind of relevant.

It DEF gets me into a more technical role as I would be at a different customer site each day dealing with different networks/systems and putting all skills to the test daily.

As far as overlooking, you make a point but in all honesty the company I work for has no interest in security, outsource their firewall and core router management, are still using a terminal server on Win2k for remote access and refuse to change. I couldn't get a single security item changed in 5 months, I think staying longer with that kind of focus is a moot point...

UnixGuy

I say wait 'till you get what you really want, even if you have to wait for a year or more

NightShade03

UnixGuy wrote: »

I say wait 'till you get what you really want, even if you have to wait for a year or more

Fair point but it could be a long time......

Slowhand

Do you like working with Microsoft products, or is that a negative factor for you?

NightShade03

Totally indifferent. I certified in it early because it is widely deployed and the company I worked for would pay for it. I honestly don't think it would make a difference.

Am I totally off in thinking that more hands on with M$ and configuring things daily will help with info sec career in the long run?

dynamik

NightShade03 wrote: »

Am I totally off in thinking that more hands on with M$ and configuring things daily will help with info sec career in the long run?

I don't think it's specific to Microsoft, but having a solid understanding of MS, *nix, Cisco, etc. will only help you. I'm the only MCSE where I work (next closest is 291 away from an MCSA), and I think I add a lot of value to the clients I work with by having that extra knowledge. The other engineers have a good understanding of MS security concepts, but I can tear their GPOs apart, show them how to script some tasks, etc. The other day I had an in-depth discussion with someone about setting up a PKI, and I got some great feedback for that. Paul Boz is the same on the Cisco side of things. He's got a CCIP, CCNP, CCDP, and CCNA:S. I'm the closet to him with only a CCNA (soon to be CCNA:S). Having a solid understanding of one or more technologies will really take you a long way.

NightShade03

I agree with you which is why even though dealing with M$ servers and technologies daily might not be what I want to do in the long run, there will be other things like firewalls, routers, switches that I have to deal with as well. So I think that it might be worth it. Plus according to the job posting they pay for certifications (I don't know if there are limitations on that).

Guess I will see what the interview brings on Monday.

NightShade03

Went on the interview today....

It was interesting, however disappointing to say the least. Turns out they are a small (25 ppl) MSP and only half of those are really techs. Pay wasn't really what I want looking for however they were willing to pay for boot camps, certs, and I would have access to a small "dummy" data center. Even still I think that waiting for something I'm more interested in and one that may even pay better is the best move at the moment...