How to Start Your Information Security Career?
Adriano Dias Leite | Feb 03, 2010 | Comments 47
Sometime ago I posted a question on LinkedIn and an article here about the benefits of being graduated in Infosec. The topic generated almost a hundred replies, and the discussion quickly changed to “How to start an Information Security Career?”
After a bit of researching on the topic and talks to successful professionals, I was able to put together some interesting facts:
In a 2009 ranking of the 50 best jobs in America, the information technology sector accounted for 17 slots. Of these, information security jobs enjoyed some of the highest job growth, seeing a 27% increase in jobs over the past ten years, which should not be surprising since security threats and consequently stricter regulations are emerging all the time, all over the world. An information security career basically involves protecting one of the most valuable assets of a company or organization: Its information. The threats are countless: from malware to hackers, and unhappy employees to natural disasters. The career requires fine skills and can be very lucrative, with the top IT security professionals able to command big paychecks.
One good thing about an information security career is that the barriers to entry are fairly low, since the skills can be self-taught. However, while a formal degree in computer science is not an absolute necessity, having one may prove to be a major factor in a firm’s decision to hire you. Many potential employers will also ask you for a professional certification in information systems security. But nowadays, the main obstacle to get into the Security field is experience. To be considered for any Information Security Job most companies will want several years of experience (around five is preferred). This might sound a bit like the chicken and the egg problem: how to have experience if you can’t get the job, and vice versa? As I said before, you just need to plan.
Fortunately, there are alternative ways you can start your information security career:
- One is to establish your credentials in a related information technology career before applying for information security jobs. For example, you can begin as a network administrator, gaining experience in how to secure networks as well as how they can be penetrated, before moving on to become an information security engineer. That’s exactly how I started my career around 14 years ago.
Pages: 1 2
Filed Under: Articles • Certifications • Featured • From me to you • Job Market • My career • News
Very good blog Adriano. I am very much interested in Information Security Career. I am a recent graduate and without having certifications and experience you are left jobless. Now I am CCNP and recently became an Associate of (ISC)2 toward CISSP. I want to know if there are truly jobs for junior Infosec guys like me. Although I havn’t started working, I am looking for great opportunities for Infosec career/jobs. Responses will be very much appreciated. Thank you
Thanks Adraino, just found your blog it is very helpful for me.
Very interesting post. I think the best way to get into IT security is not by academic credential but through an experience in another related domain (software, network, …). People “from the job” will see you as having some “real world experience” when you will be doing security analysis and recommendations that impact them. Seasoned network engineers are unlikely to take a young “security professionnal” seriously, unless he shows top gun hacker skills.
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
Hello,
I wanted to say that your article gave me a good insight on some of the problems I will encounter trying to start a career in infosec. I actually have been trying to network and find other security professionals.. mostly to find hackers and crackers. I possess some skills in cracking and practice new skills daily. I do have one question that you may be able to answer. If starting an info security consulting firm, how does one portray themselves as a legitimate business and not someone trying to scam or create problems for a business? I’ve done several other startups before, and would like to with infosec, but I just don’t know how to get past this road block.
Thanks.
hi sir , i am judith
i did my master in biomertic security system and i am trying very hard to get a job in
access control companies or internet security organization, the problem is i cant understand the fact of them asking for experience. i am fresh graduate, i finished my bachelorsin Btech Information techology and then went on for my masters, so i dont knw where to start or which palce to apply for ? where ever i go they r asking for experience:(
right now i am preparing for doing a ccna ceritfication . could you please advise want i should now
hi every one, just concluded my Bsc in computer information system and am considering doing my Msc in information security. but am alittle bit confused bcos i think Msc in another field like risk management will be better. although am aware that infosec is a lucrative field, am also thinking an MSC in inforsec is not worth it since an infosec professional certification should be more respected by employers. please i will appreciate a swift reply to dis as am supposed to make a decision soon. thanks everyone.
lol lesson learned never respond from a smart phone with auto word change on lol…but I think you’ll get most of my previous post….sorry..& thanks
Even having a bachelors in information sciences & technology…now doing a Masters with an Information Security & Forensics focus…trying to get a CISSP, CEH and or on the job experience is still ridiculous…the ISC & EC don’t want you to take the test without years of “experience” on the job & the damn job won’t let you in with that same “experience” and or already being eligible to get the certifications…I guess a degree has no fricken value these days? Chicken or egg or just a plane joke…it’s frustrating & how can you break into consulting? Won’t those companies still seek the same chicken vs. Egg prerequisites…I’m getting the feeling there us also an age & race perception factor coming into play on opportunity for “experience” to begin with….just my experiences the past 5 1/2 years moving around the IT skill…unlike it seems most people put here my education in IT is comprehensive & I’d like the same level of “experience” seems to be immpossible…has this happen to others? How’d you get around the road blocks…I’m not ok with just collecting my pay check anymore but I don’t want to be at risk in not finishing this Masters either…because of taking too much risk…need advice finding the balance but still getting around the road blocks….thanks for the posts & the community website…it’s pretty good
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
Hi,
I work as a trainer for CPEH, CPTE(Penetration test engineer, CDFE(Digital Forensic Examinar). I am into this from last 8 months. I want to learn more and would like work for some company where i can understand real life issues.
How to start with it? Its not possible to get a job coz they ask for experience.
Please guide me on this….
[...] essay is additionally utilitarian if youâre deliberation to start your Information Security career or seeking for a little career [...]
[...] article is also useful if youâre considering to start your Information Security career or looking for some career [...]
[...] my new article when I found an article that certainly adds up to what I’ve said before about starting your information security career. I’m reposting it here since it might be of benefit to you [...]
[...] article is also useful if youâre considering to start your Information Security career or looking for some career [...]
[...] article is also useful if youâ??re considering to start your Information Security career or looking for some career [...]
Most organizations are not doing enough to truly secure themselves. Not only are organizations not doing enough, they are convincing themselves and the people around them to the contrary.
Information technology careers are very hot right now.
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
[...] article is also useful if youâre considering to start your Information Security career or looking for some career [...]
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
[...] article is also useful if youâre considering to start your Information Security career or looking for some career [...]
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
[...] article is also useful if youâre considering to start your Information Security career or looking for some career [...]
[...] article is also useful if youâre considering to start your Information Security career or looking for some career [...]
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
[...] article is also useful if youâre considering to start your Information Security career or looking for some career [...]
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
[...] article is also useful if youâre considering to start your Information Security career or looking for some career [...]
[...] article is also useful if youâre considering to start your Information Security career or looking for some career [...]
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
HI
I have done ccna,ceh,rhce certifications and i find it very difficult to get in to information security side like penetration tester or as an ethical hacker.I also have around 2 yrs of technical support experience in virus and spyware support. can anyone guide or help me to find jobs in penetration testing …..
pls help…
thanks in advance
[...] (regardless whether you are a senior professional going for your first managerial role or just starting your Infosec career), and my plan is to update it on a regular basis with further questions I’ll be asked and also [...]
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
[...] article is also useful if youâ??re considering to start your Information Security career or looking for some career [...]
Many are the post i have read but this is a piece i could imagine my self been talked to,Good piece,keep the good work going.God bless
[...] postsThe 10 Coolest Information Security CareersHow to Start Your Information Security Career?7 Things Every Security Professional Should KnowInformation Security Career Tips by a Guru: [...]
[...] article is also useful if youâre considering to start your Information Security career or looking for some career [...]
[...] the bits or bytes, or the controls required by a given framework by heart. Being successful in your Information Security career requires you to have a deep understanding of the business needs (and how to enable, not disrupt [...]
I have become a fan of your posts now. Personally, I have taken up a job as a Pre-sales executive with a leading IT Security company in India and was thinking whether I have made the right decision as I have a non-technical background ( B.Com ) and MBA ( HR and Marketing, but I came across one of your articles and all the doubts in my mind have settled forever. Also it helped me realize the different aspects of my job and what my employer would be expecting from me.
Thanks for all the help.
Regards,
Mukesh Sharma
[...] article is also useful if you’re considering to start your Information Security career or looking for some career [...]
[...] the rest here: How to Start Your Information Security Career — My Information … Share and [...]
[...] How to Start Your Information Security Career — My Information … Share and [...]
I have seen some crappy posts but this one really impresses me. Good work!
Social comments and analytics for this post…
This post was mentioned on Twitter by MyInfosecJob: How to Start Your Information Security Career http://bit.ly/a9UXaL...
Excellent article Adriano. You’re really doing a great job with this site. It’s becoming more interesting every day.
Regards,