Announcement

Collapse
No announcement yet.

Education+Sponsorship+payment may lead to a Security Clearance

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Education+Sponsorship+payment may lead to a Security Clearance

    Demystify the 'getting started in Security' process.
    -Go to one of these schools listed at: https://www.sfs.opm.gov/ContactsPI.asp?p=st#Institute2
    for the security program.
    -Submit a request for the 'years for service' program for the DHS.
    info here: http://www.dhs.gov/files/programs/cybersecurity.shtm
    So now you're in school, payup between $1500-3200 during your 2nd year of school to get a security clearance. graduate from one of those schools, work for DHS for 1-2 years under 'years for services' program. After your time with DHS, you should be ok to find something else.
    Just because you're paranoid it doesn't mean they aint out to get ya!

  • #2
    Re: Getting started in the security field

    This is going to be a hit and run comment. I'm busy, but can't let this pass.

    Originally posted by KernelConflag View Post
    Demystify the 'getting started in Security' So now you're in school, payup between $1500-3200 during your 2nd year of school to get a security clearance. graduate from one of those schools, work for DHS for 1-2 years under 'years for services' program. After your time with DHS, you should be ok to find something else.
    YOU can't buy a security clearance. You can't pay for it, you can't even request it. Security clearances have been discussed all over the forums (nearly to death), but please please PLEASE don't post things that you're just guessing on.

    (posting in this case as a retired INFORMATION SYSTEMS SECURITY OFFICER)

    Comment


    • #3
      Re: Getting started in the security field

      Originally posted by shrdlu View Post
      This is going to be a hit and run comment. I'm busy, but can't let this pass.



      YOU can't buy a security clearance. You can't pay for it, you can't even request it. Security clearances have been discussed all over the forums (nearly to death), but please please PLEASE don't post things that you're just guessing on.

      (posting in this case as a retired INFORMATION SYSTEMS SECURITY OFFICER)
      See page 3 of this PDF. In the case of my original post, the hiring entity would be DHS as a participant of the 'years for service' program. The $$ you pay is for the background check. Study up bud!
      http://www.clearancejobs.com/security_clearance_faq.pdf
      Just because you're paranoid it doesn't mean they aint out to get ya!

      Comment


      • #4
        Re: Getting started in the security field

        Originally posted by KernelConflag View Post
        See page 3 of this PDF. In the case of my original post, the hiring entity would be DHS as a participant of the 'years for service' program. The $$ you pay is for the background check. Study up bud!
        http://www.clearancejobs.com/security_clearance_faq.pdf
        I looked at the PDF...exactly where does it say that someone can pay to have their own clearance done? Someone who is very familiar with this explained it to me just last week because I was asking what could be done to get a clearance to take certain Master's courses once I finish my current degree. Basically, certain jobs may require that a person takes specialized courses (that require a clearance to take the class) in preparation for that job (Master's level intelligence courses, for example). A person can sign a contract with the employer and is granted an interim clearance in order to take the classes. In order to obtain a real security clearance, a legitimate entity (the employer - military, a government agency, certain government contracting companies, etc) must sponsor the person and pay for the background check and all other steps needed to obtain the clearance. This is up to the company, not the individual. If the background check hits a snag, the interim clearance can be taken away. If the clearance is approved, then the person can complete the courses and must work for the sponsoring employer for the previously agreed upon amount of time, at a minimum.
        "Why is it drug addicts and computer afficionados are both called users? " - Clifford Stoll

        Comment


        • #5
          Re: Getting started in the security field

          Originally posted by KernelConflag View Post
          See page 3 of this PDF. In the case of my original post, the hiring entity would be DHS as a participant of the 'years for service' program. The $$ you pay is for the background check. Study up bud!
          http://www.clearancejobs.com/security_clearance_faq.pdf
          To quote your linked article, which you may not have read:

          Getting a Clearance
          Can I obtain a security clearance on my own?
          No. You must be sponsored by a cleared contractor or a government entity. To be sponsored you must be
          employed by a cleared contractor (or hired as a consultant) in a position that requires a clearance. As an
          exception, a candidate for employment may be submitted for a clearance if the cleared contractor has made
          a binding offer of employment and the candidate has accepted the offer. Both the offer and acceptance
          must be in writing. The offer of employment must indicate that employment will begin within 30 days of
          receiving the clearance.
          It would appear that you cannot just pay to get one, but must be sponsored by an employer as AgentDarkApple stated.
          A third party security audit is the IT equivalent of a colonoscopy. It's long, intrusive, very uncomfortable, and when it's done, you'll have seen things you really didn't want to see, and you'll never forget that you've had one.

          Comment


          • #6
            Re: Getting started in the security field

            Originally posted by streaker69 View Post
            To quote your linked article, which you may not have read:

            It would appear that you cannot just pay to get one, but must be sponsored by an employer as AgentDarkApple stated.
            We seem to be experiancing a breakdown in communication. The portion of the PDF that you quoted is exactly what i was refering to. A student, as a participant of the 'years for service' program, who graduates from one of the school linked in the original post can obtain a clearance (via paying for the background check).

            And yes, the hiring entity must sponsor the actual 'clearence' you recieve. Most any government agency which dedicates resources to IT security can be the hiring entity. (DHS, NSA, CIA, FBI, etc.)
            Just because you're paranoid it doesn't mean they aint out to get ya!

            Comment


            • #7
              Re: Getting started in the security field

              Originally posted by KernelConflag View Post
              We seem to be experiancing a breakdown in communication. The portion of the PDF that you quoted is exactly what i was refering to. A student, as a participant of the 'years for service' program, who graduates from one of the school linked in the original post can obtain a clearance (via paying for the background check).

              And yes, the hiring entity must sponsor the actual 'clearence' you recieve. Most any government agency which dedicates resources to IT security can be the hiring entity. (DHS, NSA, CIA, FBI, etc.)
              You are not paying attention. In addition:

              http://www.washingtonpost.com/ac2/wp...nguage=printer
              http://www.state.gov/m/ds/clearances/c10978.htm

              For your future reference:

              https://www.cia.gov/careers/opportun...y-officer.html

              No, you don't qualify. No, I'm not ex-CIA. Hush, erehwon. Stop laughing.

              BTW, it's not "experiancing" it's experiencing, and you're right about your inability to communicate. You're just wrong about everything else. Reading comprehension 101, boy.

              Comment


              • #8
                Re: Getting started in the security field

                Originally posted by KernelConflag View Post
                We seem to be experiancing a breakdown in communication.
                We certainly are, because all of what you've posted thus far seems to be contradictory.

                First you infer the someone can effectively buy a clearance ("payup between $1500-3200"). Then you post a link to a document that specifically says you may not get one on your own, and that the portion quoted to you is what you say supports your first post.

                Can you clear this apparent contradiction up?
                Thorn
                "If you can't be a good example, then you'll just have to be a horrible warning." - Catherine Aird

                Comment


                • #9
                  Re: Getting started in the security field

                  Originally posted by shrdlu View Post
                  You are not paying attention. In addition:

                  http://www.washingtonpost.com/ac2/wp...nguage=printer
                  http://www.state.gov/m/ds/clearances/c10978.htm

                  For your future reference:

                  https://www.cia.gov/careers/opportun...y-officer.html

                  No, you don't qualify. No, I'm not ex-CIA. Hush, erehwon. Stop laughing.

                  BTW, it's not "experiancing" it's experiencing, and you're right about your inability to communicate. You're just wrong about everything else. Reading comprehension 101, boy.
                  Why are your comments so hostile? What im saying is quite simple. A student who graduates from one of those schools as a participant of the 'Years for Service' program, can obtain a clearence while working for a government agency; thereby simplifying the 'how-to find an entry level security job' question.
                  Just because you're paranoid it doesn't mean they aint out to get ya!

                  Comment


                  • #10
                    Re: Getting started in the security field

                    Originally posted by KernelConflag View Post
                    Why are your comments so hostile?
                    Probably because you were disrespectful to her.

                    Remember this?
                    Originally posted by KernelConflag View Post
                    Study up bud!
                    That's a bit of a smack in the face, especially if you don't know to whom you're speaking. There's a real presumption of undue familiarity and it's rather condescending.
                    Last edited by Thorn; December 17, 2009, 18:45. Reason: Grammar correction
                    Thorn
                    "If you can't be a good example, then you'll just have to be a horrible warning." - Catherine Aird

                    Comment


                    • #11
                      Re: Getting started in the security field

                      There is no contradiction. My original post was overly simplified as a result of underestimating the comprehension of the reader. For this I appologize.
                      Just because you're paranoid it doesn't mean they aint out to get ya!

                      Comment


                      • #12
                        Re: Getting started in the security field

                        Originally posted by shrdlu View Post
                        This is going to be a hit and run comment. I'm busy, but can't let this pass.



                        YOU can't buy a security clearance. You can't pay for it, you can't even request it. Security clearances have been discussed all over the forums (nearly to death), but please please PLEASE don't post things that you're just guessing on.

                        (posting in this case as a retired INFORMATION SYSTEMS SECURITY OFFICER)
                        we do really need to have the "security clearance" panel discussion at DEFCON (yes, I know, you don't want to participate...)

                        "\x74\x68\x65\x70\x72\x65\x7a\x39\x38";

                        Comment


                        • #13
                          Re: Getting started in the security field

                          Originally posted by KernelConflag View Post
                          There is no contradiction. My original post was overly simplified as a result of underestimating the comprehension of the reader. For this I appologize.
                          So, are you saying we're unable to comprehend the issues regarding security clearances?

                          The problem with your over-simplification is that it is, frankly, wrong.
                          "\x74\x68\x65\x70\x72\x65\x7a\x39\x38";

                          Comment


                          • #14
                            Re: Getting started in the security field

                            It looks like points and counter points have been made, and it looks like the issue has been clarified. An apology has been made, and a mistake acknowledged. Let's move on and make the topic more productive...

                            Let's expand on the topic of discussion in other ways, as it looks like there is agreement now on what was intended.

                            What kind of problems could this create? If a large enough group of people flock to register with programs like this, and get sponsorship, and complete this process, is it possible to overwhelm the background check process and decrease the quality of review? Will a maximum number of people allowed for sponsorship provide a flow-control mechanism to prevent such an attack?

                            One idea that has been proposed in the past in defeating background checks, TSA checks, security check-point checks, random search, etc. is to brute-force the attack. If there is only 1 target, but 50 "suicide bombers" heading for that target, only one has to get through. Diversification in the techniques used to not be spotted would also provide feedback to the attacker, and help them understand which attacks work to defeat the system of checks, and
                            which attacks are detectable.

                            [I'm going to come back later and clean up this thread and move this discussion off to a new thread]
                            Last edited by TheCotMan; December 17, 2009, 20:02.

                            Comment


                            • #15
                              Re: Getting started in the security field

                              Originally posted by theprez98 View Post
                              we do really need to have the "security clearance" panel discussion at DEFCON (yes, I know, you don't want to participate...)

                              I for one would like to hear that talk.

                              xor
                              Just because you can doesn't mean you should. This applies to making babies, hacking, and youtube videos.

                              Comment

                              Working...
                              X