|
Posted by on June 26, 2005, 2:54 pm
If you were Registered and logged in, you could reply and use other advanced thread options
gregholmes@sbcglobal.net wrote:
> I currently have my BS in Computer Information Systems and would like
> to get into the field of computer security. My searches for entry-level
> security jobs have come up empty, considering they all want experience,
> which I do not have (my experience deals more with software/hardware
> and basic networking). A colleague mentioned the CISSP cert. However,
> it appears that in order to obtain it, one must have the relevant work
> experience, which puts me back at square one.
>
> I do not know how I should go about pursuing a security career and
> would like some insight into how I should go about it from those who
> are currently doing it.
>
> Long story short:
>
> 1) Is it realistic for me to think I can get into the security field
> with my current degree?
> 2) If not (or in addition to my degree), what can I do to get into the
> field? (books, classes, courses, etc).
Leythos,
There is no simple answer to your question. Much of how you should
prepare will depend on the company to which you would like to apply.
In other words, different companies have different requirements. Some
companies are looking for very technical folks with deep backgrounds in
infosec. Others are looking for entry level people who just have a
good work ethic and technical aptitude. Some things you can do to get
started include pursuing some of the low level security certs
(including Security+ and SANS GSEC). Also, stay involved in lists like
comp.security.misc. Read and learn. Set up a lab at home and practice
building firewalls, experimenting with security tools, and exploting
vulnerabilities.
Also, keep in mind that there are different types of Infosec jobs.
Some companies are looking for very hands-on pen testers, IDS monitors,
and the like. Others are looking for high level designers, and others
are looking for risk assessment and auditing types. I just suggest you
find the type of infosec work that suits you best and learn as much as
you can. Then keep applying for those infosec jobs. If you get into a
large enough company, even in a non-infosec role, sometimes you can
then move into an infosec role later.
Hope all this blabber helps.
> 3) What is the average $$$$ a security professional can make? Although
> the desire is there, I would like to know if it is worth any investment
> (financial or time-wise) I may have to make.
>
> Any and all feedback is HIGHLY appreciated. Thank you in advance.
|