NASA Security Job
CrapMasterZero
Member Posts: 29 ■□□□□□□□□□
So I got a call from a NASA research center (this is a govt. job) about a possible job opportunity in their IT Security department. It is a Computer Engineer position and would require me to help out in their vulnerability scanning, patch and log management efforts. The manager also said that this would be my role in the beginning (I would be the junior most member of this team) and that there's possibility of going into the areas of penetration testing, web security and incident handling in the future.
I asked him why he required an engineer for this position. His response was that he wanted someone who really "understood" the stuff and would direct the system admins in remediation of vulnerabilities. I didn't quite understand this point. Anyway...
Sounds to me like lots of grunt work in the beginning, which I don't have a problem with. Should I consider this? He said he would contact me again for a face to face interview.
I would like to get other members' opinion on this type of work and pros/cons. Thanks in advance.
He mentioned that I would be using tools like Foundstone Vulnerability Scanner, Splunk and Dell KASE...any ideas?
I asked him why he required an engineer for this position. His response was that he wanted someone who really "understood" the stuff and would direct the system admins in remediation of vulnerabilities. I didn't quite understand this point. Anyway...
Sounds to me like lots of grunt work in the beginning, which I don't have a problem with. Should I consider this? He said he would contact me again for a face to face interview.
I would like to get other members' opinion on this type of work and pros/cons. Thanks in advance.
He mentioned that I would be using tools like Foundstone Vulnerability Scanner, Splunk and Dell KASE...any ideas?
Comments
-
millworx Member Posts: 290Sounds like a great opportunity in my book, with the potential for growth. Not to mention stability considering it's a govt job. Does this require clearance? And you could always get that relevant work experience to get a full fledged CISSP cert.Currently Reading:
CCIE: Network Security Principals and Practices
CCIE: Routing and Switching Exam Certification Guide -
CrapMasterZero Member Posts: 29 ■□□□□□□□□□Sounds like a great opportunity in my book, with the potential for growth. Not to mention stability considering it's a govt job. Does this require clearance? And you could always get that relevant work experience to get a full fledged CISSP cert.
I am already a govie (in IA field) but want more technical hands-on security work...hopefully this is it? I guess I won't find out until I go through a formal interview... -
Bl8ckr0uter Inactive Imported Users Posts: 5,031 ■■■■■■■■□□Wow. Do you mind me asking what are your quals?
-
steve13ad Member Posts: 398 ■■■■□□□□□□Sounds like a great opportunity but with the recent push for more a privatization of space missions I'd be a little concerned.
But hell how many people can say that they've worked for NASA? It's a dream that every boy has had! -
CrapMasterZero Member Posts: 29 ■□□□□□□□□□Bl8ckr0uter wrote: »Wow. Do you mind me asking what are your quals?
BSEE from a UC, 1.5 years in government IA work (crypto, key management, C&A work). I was surprised that I got a call...I never expected it. -
shaqazoolu Member Posts: 259 ■■■■□□□□□□I'm already in a job doing all of those things and I think I would jump all over that. If nothing else, it's freaking NASA. You are sure to get some amazing experience there. At this point, I would actually consider taking a pay cut for it. It sounds really cool.:study:
-
tpatt100 Member Posts: 2,991 ■■■■■■■■■□CrapMasterZero wrote: »BSEE from a UC, 1.5 years in government IA work (crypto, key management, C&A work). I was surprised that I got a call...I never expected it.
You have govt experience, I would jump all over that. Having NASA on your resume for a few years would get you noticed and major geek cred.
When you were told they needed somebody who actually "understood" the stuff, a lot of times government agencies put people into IA positions because they volunteered or they had nowhere to go. So you end up with people with IA titles who know how to "click here" generate a report but have no clue what the report means. They have to do it to maintain compliance but come audit time they have no idea what is going on. -
carboncopy Member Posts: 259I didn't know working for NASA is a big deal.
It is until you start working there, lol. At least for the one in Florida. -
Cisco Inferno Member Posts: 1,034 ■■■■■■□□□□geek cred trophy right there. and plus i doubt NASA would skimp out on their employees.2019 Goals
CompTIA Linux+[ ] Bachelor's Degree -
NOC-Ninja Member Posts: 1,403carboncopy wrote: »It is until you start working there, lol. At least for the one in Florida.
-
colemic Member Posts: 1,569 ■■■■■■■□□□That's even better than being in the air force and chatting up up a girl in a bar:
Guy: Yeah, I'm in the Air Force...
Girl: Ohhh, you're a pilot?!?!?!
Guy: why, YES I am...
(queue Dr. Galazkiewicz Bud Light commercial)Working on: staying alive and staying employed -
QHalo Member Posts: 1,488That's even better than being in the air force and chatting up up a girl in a bar:
Guy: Yeah, I'm in the Air Force...
Girl: Ohhh, you're a pilot?!?!?!
Guy: why, YES I am...
(queue Dr. Galazkiewicz Bud Light commercial)
Maverick- yes I'm a "Naval Aviator"
Sorry I know you're in the Air Force, but you immediately reminded me of that scene. -
CrapMasterZero Member Posts: 29 ■□□□□□□□□□Thanks for all the comments guys. I am still waiting for the hiring official to call Anyway it's government...I should know better
I am more excited about this position because it's hands on which is a rarity in government because most of this stuff is usually contracted out, rather than it being in NASA (although it's definitely a plus).
I like security and so far I have been mostly dealing with crypto and key management type work but I want to expand my horizons a little bit. I eventually hope to get a MSEE (Computer Networks...you have to know networks before you can protect it right?) and since this job involves network security I feel it would be a good fit for me (not to mention I don't have to leave government).
Also, I feel that the skills I will learn here will be more helpful in going to private sector if I choose to do so in the future.
For now I am just crossing my fingers and hoping that everything will work out....I hate waiting. -
CrapMasterZero Member Posts: 29 ■□□□□□□□□□You have govt experience, I would jump all over that. Having NASA on your resume for a few years would get you noticed and major geek cred.
When you were told they needed somebody who actually "understood" the stuff, a lot of times government agencies put people into IA positions because they volunteered or they had nowhere to go. So you end up with people with IA titles who know how to "click here" generate a report but have no clue what the report means. They have to do it to maintain compliance but come audit time they have no idea what is going on.
That's what I thought. Being in IA for a while I have noticed that a lot of my peers have EE/CS background but don't do traditional "engineering" jobs.
I just feel that information security is still in a nascent stage and treads the line between IT and engineering. I mean I have seen people with diverse backgrounds (EE, MIS, liberal arts) working in IT security. Hopefully with cyber being the buzzword in government these days IT security will get its moment in the sun. -
Samurai004 Member Posts: 68 ■■□□□□□□□□lol i know!!! I always wanted to become an Astronaut
Just say you have to do some hands on penetration testing on the space station and presto, free trip to outer space!!![SIGPIC][/SIGPIC]
_________________________________ -
NOC-Ninja Member Posts: 1,403Samurai004 wrote: »Just say you have to do some hands on penetration testing on the space station and presto, free trip to outer space!!!
CrapMasterZero @ did you get the job? -
CrapMasterZero Member Posts: 29 ■□□□□□□□□□Am in talks with HR to arrange travel for an interview...it's govt so it's slow
-
NOC-Ninja Member Posts: 1,403CrapMasterZero wrote: »Am in talks with HR to arrange travel for an interview...it's govt so it's slow
-
CrapMasterZero Member Posts: 29 ■□□□□□□□□□update....I traveled to the interview and ended up receiving an offer from NASA. The position involved me being in charge of their vulnerability scanning and patch management efforts. After talking in detail with everyone there I decided that it wasn't for me and that I wanted my career to go in another direction. So, I declined it to take another position at a different company. The pay is substantially high here with opportunity to do R&D work in cyber-security. These guys also pay 20K a year to get your Masters which is huge for me. The position is in the DC area and I would be working in the area of Computer Network Defense (less operational IT support and more theoretical work). I start in a week....pretty excited
-
colemic Member Posts: 1,569 ■■■■■■■□□□Congrats on the job! Although I don't know if I could turn down the chance to say I worked for NASA.Working on: staying alive and staying employed