Software Testing to Infosec

chandraguptan

Dear Infosec Gurus,

I have got 8 years of experience in software testing and currently working as a Test Lead. I am thinking of gaining certifications in information security. Please suggest me which certification I can go for. Currently I do not have any certification in Information Security. The only certification I have is ISTQB foundation level for software testing.

Expecting your valuable feedback/suggestions

Many Thanks
Chandra

ChooseLife

What are your goals for getting a certification? What are your interests within the InfoSec field? Do you want to continue software testing career with a focus on security aspects?

paul78

Hello and welcome to TE.

As @chooselife asked - what exactly in infosec are you interested in?

With a software testing background, one option may be secure SDLC if you enjoy working on lifecycle aspects of software development. A second option may be application vulnerability and penetration testing.

Some certs which are related include:
https://www.isc2.org/csslp/default.aspx
https://www.giac.org/certifications/software-security
https://www.giac.org/certification/web-application-penetration-tester-gwapt

chandraguptan

Many Thanks ChooseLife & paul78 for your reply...
I was thinking of moving as a security analyst (if possible) or a information security tester...Please note that I do not have a penetration testing experience... Hence please advice which would be the best option...

Kind Regards,
Chandra