Getting started in the security field [books, resources, advice]

[g3k_]

Re: Getting started in the security field

Does anyone have any advice to get past the bull when looking through job openings? Looking on dice, most of the jobs I saw were like "needs over 9000 years of pentesting experience with a bajillion certs, DoD clearance and a doctorates" In all seriousness, a majority of the places were looking for people with more experience than the field has been alive, and someone with that much experience would be a Defcon speaker with an established job already.

tl;dr I got the impression that they are looking for people that don't exist.

I understand that 9/10 most job listings are garbage and you can ignore what is posted, but the starting entry looks like it is a steep climb compared to getting into the regular IT sector.

[AgentDarkApple]

Re: Getting started in the security field

I got the impression that they are looking for people that don't exist.

Good point on that one. Someone who is 25 and has been hacking since they were 10 can claim to have "15 years of IT Security experience". And experience with anything beyond 10 or 15 years back might not be very helpful for some jobs since technology changes so quickly. Some basic skills/knowledge are applicable in any situation, while some are worth squat within two years.

[theprez98]

Re: Getting started in the security field

If I had seen the job description for my current job, I wouldn't have even applied, much less expected to get hired. So I think job descriptions in some ways are pie in the sky. That being said, there are still certain things they're going to be looking for.

Bottom line, find a way in from someone you know.

[KernelConflag]

To Be Merged with Getting Started.

Demystify the 'getting started in Security' process.
-Go to one of these schools listed at: https://www.sfs.opm.gov/ContactsPI.asp?p=st#Institute2
for the security program.
-Submit a request for the 'years for service' program for the DHS.
info here: http://www.dhs.gov/files/programs/cybersecurity.shtm
So now you're in school, payup between $1500-3200 during your 2nd year of school to get a security clearance. graduate from one of those schools, work for DHS for 1-2 years under 'years for services' program. After your time with DHS, you should be ok to find something else.

[shrdlu]

Re: Getting started in the security field

We seem to be experiancing a breakdown in communication. The portion of the PDF that you quoted is exactly what i was refering to. A student, as a participant of the 'years for service' program, who graduates from one of the school linked in the original post can obtain a clearance (via paying for the background check).

And yes, the hiring entity must sponsor the actual 'clearence' you recieve. Most any government agency which dedicates resources to IT security can be the hiring entity. (DHS, NSA, CIA, FBI, etc.)

You are not paying attention. In addition:

http://www.washingtonpost.com/ac2/wp...nguage=printer
http://www.state.gov/m/ds/clearances/c10978.htm

For your future reference:

https://www.cia.gov/careers/opportun...y-officer.html

No, you don't qualify. No, I'm not ex-CIA. Hush, erehwon. Stop laughing.

BTW, it's not "experiancing" it's experiencing, and you're right about your inability to communicate. You're just wrong about everything else. Reading comprehension 101, boy.

[KernelConflag]

Re: Getting started in the security field

There is no contradiction. My original post was overly simplified as a result of underestimating the comprehension of the reader. For this I appologize.

[RuckusKnight]

Re: Getting started in the security field

Anyone have tips for getting an entry level job? I've yet to see anything entry level posted in my area.

My current plan is to study and take the CCNA between now and graduation, and just try and network like hell between now and (which will sadly be limited to the local DC group and 2600 meeting :( )


A little background:

I'm working on finishing up a bachelors in information science, concentration information security, and will graduate Jan 2011.

I know there's a lot of debate about the value of a degree... I did it mainly because I wanted to, not because I thought it would get me a job. I definitely enjoyed it, and picked up some good skills along the way (probably would not have become interested in cognitive psych or behavioral economics if I hadn't done some required classes...) but I'm worrying that I have too little real experience.


I did a summer internship at a local start up which was mostly systems admin type stuff, and will be working at a university research lab as an undergrad researcher this summer, but I don't really have any formal experience.

[HighWiz]

Re: Getting started in the security field

Anyone have tips for getting an entry level job? I've yet to see anything entry level posted in my area.

What/Where is your area?

[RuckusKnight]

Re: Getting started in the security field

What/Where is your area?

Pittsburgh, PA

[loud25]

Re: Getting started in the security field

You think this will be a good entry level start if I have security+ networking+and A+. I do have a top secret security clearance or what would be another road I should take. Any help would be greatly appreciated. Thanks in advance

[b0n3z]

Re: Getting started in the security field

You think this will be a good entry level start if I have security+ networking+and A+. I do have a top secret security clearance or what would be another road I should take. Any help would be greatly appreciated. Thanks in advance

If you are willing to move to georgia than I can tell you now you can easily get a job as an AIT teach for all the new dumb privates coming into the army. Other than that, anything DOD wise will basically be open to you since you have all that stuff.

[loud25]

Re: Getting started in the security field

So what are some other areas that I should focus on.

[AgentDarkApple]

Re: Getting started in the security field

If you are willing to move to georgia than I can tell you now you can easily get a job as an AIT teach for all the new dumb privates coming into the army. Other than that, anything DOD wise will basically be open to you since you have all that stuff.

I just moved to GA, where is this lovely job?

[drd3malloc]

Re: Getting started in the security field

I want to say you all "Thank you all".
I absolutely know nothing about security field.
But From now on,I began to be a security in the internet.
I will learn to be the best.
Thank my brothers...............

Thanyawzinmin

[TwistedDUO]

Re: Getting started in the security field

I'm far from an expert on the field of job gaining. Especially in this crap economy. But I will pass along some great advice from people who have taught me. First and foremost, get your degree in the field. Sucks, I know. You've been hacking and cracking since birth, so sitting down in a classroom and listening to somebody ramble about stuff you already know may not be the best of times. But the reality is that is what employers are looking for. It's a weeding process. Get as many certs as you can and be familiar in as many protocols as you can retain. Being diverse is imperative. Next bit of advice has been mentioned, learn TCP/IP inside and out. Even as a coder (which I am), being specialized is sometimes a hindrance. It also narrows your marketability. In most places it's all about the network setup. Even if you're a glorified tech-support weenie, you're the go-to guy when the network finds its way to the dumpster.