IT Security Certifications/similar - where to start
04-03-2007, 11:00 PM
#1
IT Security Certifications/similar - where to start
So...i'm somewhat happy in my job, like it for the most part but kinda dislike my company for the dumb stuff they do. There's a lot of negative stuff going on.
Currenlty my job is split into two roles, one half is a help desk analyst. Essentially a first level of support/information type center for IT issues/purchasing/new user setup and related. Almost a call center, except that there's only 2 of us supporting 6000 users accross north america.
The other half is the administrator for our ticket management system. Support about 120 actual users of the software, plus technically every employee has access to a webpage that allows them access to part of the software, this all runs accross 4 servers which i'm partially responsible for (server admins help out and do any major updates).
I like the administrator portion just cause i'm the only person that can do it or knows it, so it's a bit of power which is neat.
So today, lookin at various jobs and talkin with buddy that just quit, he asked me where I want to go or what type of job i want and i dunno. So thinkin into it, Desktop support is an easy option, but you can only go so far, pay is only so good, i'd say $60k at the tops (not that thats bad). Lookin at the industry, they're focusing hardcore on IT Security which does seem interesting (not to mention pay quite well), but i have no idea where to start. I've seen some required certifiactions, but a lot seem geared towards IT managers (which i'm not as of yet) or they want 5 years experience in the IT security industry.
It seems like a bit of a catch 9 in that they want experience for the cert, but it's tough to get the experience without a cert. So...where does a person start?
I know there's lots of computers folks on here, someone has to know a lil more about this all.
Any help or info is appreciated.
*edit*
Looking further, it seems an A+ and Network+ are sorta min requirements or good places to start. I've currenlty got my A+ plus a diploma of some sort. I'm thinkin I should look into the Network+ ($225 for exam) and eventually the Security+ ($244 for exam) for starters. I did a sample exam for network+ and it didn't seem tooo too hard, i was clueless on a couple questions but scored 55% ont he test exam (not that thats good lol). So that'll involve some training (interactive computer based through learnkey.com was $244US, and similar for security+ was only $59 (not sure why the difference)). None the less work says they'll cover up to 75% of this crap, so i'm gonna talk to them tomorrow.
Does anyone have any comments/suggestions on the current plans? Or what to look at next?
I think the certification I am ultimately workin toward is the CISSP (which is apparenlty pretty hardcore so i'm finding out) as it seems to sorta be the grand-daddy of this all. But thats only what i've read tonight.
Certified Information Systems Security Professional - Wikipedia, the free encyclopedia
Currenlty my job is split into two roles, one half is a help desk analyst. Essentially a first level of support/information type center for IT issues/purchasing/new user setup and related. Almost a call center, except that there's only 2 of us supporting 6000 users accross north america.
The other half is the administrator for our ticket management system. Support about 120 actual users of the software, plus technically every employee has access to a webpage that allows them access to part of the software, this all runs accross 4 servers which i'm partially responsible for (server admins help out and do any major updates).
I like the administrator portion just cause i'm the only person that can do it or knows it, so it's a bit of power which is neat.
So today, lookin at various jobs and talkin with buddy that just quit, he asked me where I want to go or what type of job i want and i dunno. So thinkin into it, Desktop support is an easy option, but you can only go so far, pay is only so good, i'd say $60k at the tops (not that thats bad). Lookin at the industry, they're focusing hardcore on IT Security which does seem interesting (not to mention pay quite well), but i have no idea where to start. I've seen some required certifiactions, but a lot seem geared towards IT managers (which i'm not as of yet) or they want 5 years experience in the IT security industry.
It seems like a bit of a catch 9 in that they want experience for the cert, but it's tough to get the experience without a cert. So...where does a person start?
I know there's lots of computers folks on here, someone has to know a lil more about this all.
Any help or info is appreciated.
*edit*
Looking further, it seems an A+ and Network+ are sorta min requirements or good places to start. I've currenlty got my A+ plus a diploma of some sort. I'm thinkin I should look into the Network+ ($225 for exam) and eventually the Security+ ($244 for exam) for starters. I did a sample exam for network+ and it didn't seem tooo too hard, i was clueless on a couple questions but scored 55% ont he test exam (not that thats good lol). So that'll involve some training (interactive computer based through learnkey.com was $244US, and similar for security+ was only $59 (not sure why the difference)). None the less work says they'll cover up to 75% of this crap, so i'm gonna talk to them tomorrow.
Does anyone have any comments/suggestions on the current plans? Or what to look at next?
I think the certification I am ultimately workin toward is the CISSP (which is apparenlty pretty hardcore so i'm finding out) as it seems to sorta be the grand-daddy of this all. But thats only what i've read tonight.
Certified Information Systems Security Professional - Wikipedia, the free encyclopedia
Last edited by Hardcore Rock Superstar; 04-04-2007 at 12:58 AM.
04-04-2007, 10:16 AM
#2
Wow... very strange timing on this one because I'm just about to change jobs and join the IT Security field. Here's my story with a bit of info.
Right now I work as an IT manager within a government agency. I have about 10 years of IT experience, 6 of which are from this job.
I first started out working at a computer store doing tech work. After about 2 years there I was contracted out to Enbridge to do desktop support for them. Abour a year later, when that contract ended, I went back to the store for another year. During most of that time I had been applying for a position within the governement. Living in Ottawa really means that to have a "good" job you almost certainly have to be working for the governement in some way.
I eventually got my foot in the door and had a job doing first level desktop support and some helpdesk work. I did that for about 2 years and eventually won a competition to be promoted to 2nd level/Senior support. I lasted there for about another 2 years and then got an assignment as an IT manager which is where I am right now. I have about 18 first-level technicians working for me.......
Well.. until last Friday that is. I got a call from the people who work in our Security Directorate. One of the directors over there offered me a position at the same level I'm at now, I just won't have people working directly for me. The title I'll have is IT Security Analyst. It's something I've always wanted to get in to but, like you, was stuck in the cycle of not being able to do it without experience first.
From talking to the director he basically said that the CISSP is really all that matters. There are a few other courses you could take but in the end they're just extras to give you a baseline.
The CISSP will take you years to get. First you need to be working in the field for 3-4 years. Once that's done you'll have the take the courses and exams. After that you have to have your qualifications endorsed by another CISSP before the credentials can be awarded.
Needless to say that's going to be my long-term goal.
For now I suggest you get in to a company that has a security department and do what you can to get your foot in the door that way. If your company doesn't have anything like that it will be very difficult.
Getting your A+, Net+ or Sec+ is all great but the one people look for is the CISSP.
If you have any questions shoot me a PM... I should be able to answer a little bit better in a month or two once I get started though
Right now I work as an IT manager within a government agency. I have about 10 years of IT experience, 6 of which are from this job.
I first started out working at a computer store doing tech work. After about 2 years there I was contracted out to Enbridge to do desktop support for them. Abour a year later, when that contract ended, I went back to the store for another year. During most of that time I had been applying for a position within the governement. Living in Ottawa really means that to have a "good" job you almost certainly have to be working for the governement in some way.
I eventually got my foot in the door and had a job doing first level desktop support and some helpdesk work. I did that for about 2 years and eventually won a competition to be promoted to 2nd level/Senior support. I lasted there for about another 2 years and then got an assignment as an IT manager which is where I am right now. I have about 18 first-level technicians working for me.......
Well.. until last Friday that is. I got a call from the people who work in our Security Directorate. One of the directors over there offered me a position at the same level I'm at now, I just won't have people working directly for me. The title I'll have is IT Security Analyst. It's something I've always wanted to get in to but, like you, was stuck in the cycle of not being able to do it without experience first.
From talking to the director he basically said that the CISSP is really all that matters. There are a few other courses you could take but in the end they're just extras to give you a baseline.
The CISSP will take you years to get. First you need to be working in the field for 3-4 years. Once that's done you'll have the take the courses and exams. After that you have to have your qualifications endorsed by another CISSP before the credentials can be awarded.
Needless to say that's going to be my long-term goal.
For now I suggest you get in to a company that has a security department and do what you can to get your foot in the door that way. If your company doesn't have anything like that it will be very difficult.
Getting your A+, Net+ or Sec+ is all great but the one people look for is the CISSP.
If you have any questions shoot me a PM... I should be able to answer a little bit better in a month or two once I get started though
04-04-2007, 10:36 AM
#3
Very good idea to get your papers. I went into the IT security biz with only my knowledge and I got screwed over. Granted it wasn't unexpected without my qualifications, but they kept promising me things that never came. I gave them the ultimatum, quit and now have 1 year left for my Petroleum Engineering.
04-04-2007, 10:38 AM
#4
OT but...
Maybe now, but several years ago this wasn't the case - remember the pre-tech bust situation? I was the IT guy at one of the areas best funded startups... it was fun, but it obviously didn't last (done that a couple of times actually).
I've been in the IT sector here in Ottawa for 15+ years and never had a Gov. job - there *are* good private sector positions out there
Cheers,
--
Terry McG
Originally Posted by JordyO
Living in Ottawa really means that to have a "good" job you almost certainly have to be working for the governement in some way.
I've been in the IT sector here in Ottawa for 15+ years and never had a Gov. job - there *are* good private sector positions out there
Cheers,
--
Terry McG
04-04-2007, 11:03 AM
#5
Originally Posted by terrymcg
OT but...
Maybe now, but several years ago this wasn't the case - remember the pre-tech bust situation? I was the IT guy at one of the areas best funded startups... it was fun, but it obviously didn't last (done that a couple of times actually).
I've been in the IT sector here in Ottawa for 15+ years and never had a Gov. job - there *are* good private sector positions out there
Cheers,
--
Terry McG
Maybe now, but several years ago this wasn't the case - remember the pre-tech bust situation? I was the IT guy at one of the areas best funded startups... it was fun, but it obviously didn't last (done that a couple of times actually).
I've been in the IT sector here in Ottawa for 15+ years and never had a Gov. job - there *are* good private sector positions out there
Cheers,
--
Terry McG
Oh.. .I don't mean specifically in the IT field. I mean in general this is a government town (for obvious reasons)..
I've heard lots of great stories about the startups in Kanata but was never lucky enough to work at one. Probably a good thing in the end though because I've heard of a few horror stories too!
Thread
Thread Starter
Forum
Replies
Last Post
prabhakarglv
Car Alarm and Mobile Security
9
04-10-2014 12:45 AM
LaZyLuke
Car Alarm and Mobile Security
4
06-14-2009 06:49 PM
