The path to IT/InfoSec - Experience and lessons learned

GarudaMin

I am writting this in the hope that it will help some of you who are getting into IT field or those that want to move up the ladder. I hope others will share their stories and lessons that they have learned as well.

I started my IT career when I was in university. I worked as a part-time computer specialist in University computing for two years, basically helpdesk/desktop/application support over phone/face-to-face to students and faculties. The job offered 50 cents pay increase for each certification that I get. I got A+, Microsoft Office and helpdesk certifications capping the max pay of $8 an hour. After I graduated, I sent out nearly a thousand resumes. I was worried I was not going to get a job. I had no connections and I did not have people/soft skills. English is not my native language. I came to US in 10th grade and learning to speak/understand was a huge challenge. Anyway, I got a total of 3 interviews for helpdesk/support positions within 2-3 weeks. I got a job with a consulting company and they sent me to work for Board of Education as a helpdesk technician with pay of $17 an hour without benefits.

*******************
Things I learned: Certifications and job experience I got from working at university were the keys to getting that job. It does not matter what the status of the cert is, the knowledge that I gained from the pursuit of the certs allowed me to answer the technical questions in the interview.
*******************

I worked hard at that job. I came in on weekends when they needed and also helped out with network/application group's phone queues. I was also studying MCP/MCSE/CCNA at the same time (I wanted more out of my life). Due to my work ethic and increasing knowledge, I was given $2 an hour raise after 3 months. Then 3 months later, I was being made team leader with additional $2 an hour raise. But I couldn't handle the job, I was getting burned out. I gained 25+ lbs and my blood pressure was in the 140-150s area. I was prescribed with Diovan, which I took for 3 years till I learned that it was the cause of my thinning hair. I stopped taking the pill and hair loss stopped but I am the first person in the entire history of my family who is getting/almost bald (and I am only 31). I keep sending out resumes while working and landed a job as helpdesk specialist for $45k a year with full benefits (and 3% raise at year-ends). I was told by interviewer that my manager from university gave highest recommendation she has ever heard.

*******************
Things I learned: I should not burn any bridges, they help out in more ways that I can ever know. Stress is real and that I should talk to my doctor about side effects of any medicine before I take them.
*******************

I worked hard, I volunteered for overtime whether they are holidays/weekends/nights. I contributed technical tidbits and fixes to issues that I have encountered with the group, while studying for MCP/MCSE/CCNA. I also asked manager about any ongoing projects and if I could help in any of those. I show initiative regularly and came to be relied upon within the group. 16 months later, there was an opening for Jr. systems admin position and I applied for it. The downside to it was no pay increase and it was night shift. I took it anyway, I needed the title for my resume.

*******************
Things I learned: Showing initiatives, having a good rapport, quest for knowledge and hard work still lead to success. And that I must make sacrifices in order to advance some times.
*******************

I did the same things I have been doing. I worked hard, I volunteered for projects and I studied hard. At that point in my life, I was studying desktop/server/AD/SQL/Exchange/Backups/deployment solutions, and all the hardware/software products I touch at work. I studied ahead of the group on Windows 2008 servers, Windows 7, etc... 17 months later, my night shift co-worker left and my body started to take a toll of working night shift. I applied for a system admin position at a different company and was offered $70k with full benefits + a pension. I didn't take it. I took $10k increase counter offer from same company. Even though base is way lower at same company, with overtime I was making like $90k+ (granted I have to give my time to make additional money). I figured I like money better at the cost of my health. I wanted to retire early and the more I can save, the better it is. I kept studying, I stuided CCNP/VMware/SIP/VoIP/SANs/OSCP/CISSP etc... 3 and a half years later I have became unofficially level III system admin (the highest tier), I was also assisting network admin and VMWare admin and have multiple projects. I was becoming unhappy considering the workload I do as well as assisting other system admins and doing every roles with a title of Jr. system admin with low pay. I have addressed this multiple times too but to no avail. I started getting actual certs instead of just studying only. I had CISSP done, I did OSCP, I got MCITP/CCNA/Cisco Storage Specialist cert, as well as SIP and VoIP certs. I was then given $13k increase with day shift and they took off junior prefix.

*******************
Things I learned: It does not matter if I know and have more knowledge than what a cert required, the credential of the cert is the ultimate thing. Technical world is vast and that I should keep reading/studying for certs. Information eases anxiety and the more I know, the better I am prepared.
*******************

Even though my pay is still low considering what I do and what other company are offering, I sticked with the company. With overtime and benefits, I am making more than what other companies would pay. Plus, I applied for a few jobs and I did get interviews (due to better resume), I still didn't get those jobs. They have multiple interviews for a position and I always made it to the final interview. But it is still hard without connections. I have learned that without connections, life is really hard. Anyway, I keep studying and stay abrast with my field as well as security field since I love security, which you may have noticed from OSCP, CISSP, CEH that I was doing. 4 months later, there was an opening for Information Security Analyst position and I applied. I got the position with a pay increase of $33k and I have been in the same position since but much happier. I was told that they didn't want to let me go from systems position but had no choice since I could leave the firm. I still assist with the systems I set up since I am in same company but I don't mind that. I am still keeping up with latest technology in addition to exploits/vulnerability. Even though I am an information security analyst, I am more like an engineer since I am the only one and I designed/setup a lot of security infrastructure with my co-worker, who is also a manager.

*******************
Things I learned: Even if I have no connections, as long as I am good/great at what I do, roads will open albeit they may take longer. I should always keep the hunger for knowledge for it is power. Security gets better/easier when I have the whole knowledge of enterprise culture and every systems/products from programming/database/web to systems/VoIP/network I have learned contribute to it greatly.
*******************

I am also planning to take MSISA from WGU starting December, the knowledge I will gain in pursuit of the degree title for my resume will help with my future endeavor. I hope any of you planning to get into IT or making a career change will get something out of my experience. Always keep showing initiative and good luck on your journey.
Looking through the preview before posting this, I noticed this is a long read.

emerald_octane

excellent memoir.

f0rgiv3n

Definitely great information there as well as insight. Thanks for sharing

GPIT

1. Thanks for taking the time to write this. It was not a boring read and had some good information.
2. Congrats on getting to where you are today, and good luck on your future endeavors.

jdballinger

Thank you very much for sharing your story with us! This is exactly the kind of motivation that many people need to hear in order to keep them going in their own careers. It was a long read, but very much worth it.

cyberguypr

This is very detailed. Perfect to give newcomers a glimpse into what it takes to succeed. Thanks a lot for sharing.

kurosaki00

Was looking for info on Network Analyst and found this thread (not really related)
And it was a great read. Anyone starting up should read OPs post.

Thanks man

jm0202

Excellent memory. I am identified with you since I am from a foreign country as well and i worked hard for my certs. TO be honest with you the certs and experience I had at that moment where the elements that convinced my company to bring me to the US. Like you because of work (and other personal issues in my life) i had the high blood pressure problem but it is gone already. I am currently a system admin and I am very unhappy.... So I decided to go into the Infosec field since I have the experience. Recently i passed the CISSP exam and I am waiting for the endorsement process to finalize.
I agree with all your learned knowledge. The only thing i can said is that YOU NEED TO HAVE CONNECTIONS. My advice to you is join the ISSA chapter in your area... if you do that you can get CPEs for your CISSP and you will meet other fellow CISSP in your area...

tecke

This is very motivating and highlights a realistic view of the work ethic required to get ahead these days. Thanks for writing this up!

cgrimaldo

Extremely motivating...Thank you for sharing!

JoJoCal19

Thank you for sharing! This is definitely motivating and is great to read as I am in the middle of finishing up my Bachelors degree in May and trying to also move up to a more advanced position. Good luck in your future endeavors.

Dr IT

Thank you very much for this post just the motivational tonic i needed to motivate myself when i am stuck with the 70-640 studies ( now back to the books again )

rep added