good job! how is the exam? ( i am considering doing it one day). as for needing a low-rent EH-hacker, i'll call you if i need one.

First of all, thanks for taking the time to lay this out.  And thanks for hitting on pretty much all of my weak areas.  I'm familliar with getting around a Windows based NOS and Cisco networks but never looked at them from the "outside in" or from the hackers viewpoint.  I know about the weaknesses of these systems and know how to mitigate fixing them.  However, I never went as far as learning what those exploits were and knowing how to deploy them.  This is new turf for me. 

With that, I hope you don't mind me asking a few more questions?

I've been around long enough to know that in all humor there is a hint of truth.  I can imagine the field is tight because I can't imagine many IT staffers hiring 3rd parties to break into their systems.  I for one am not that willing to learn about my incompetence.  (Lots of big egos in the IT backend world.) I imagine that those who hire a team are not usually the IT directors does this = true?

I can imagine that the marketing for a pentest is not mature yet as this seems to be a evolving market. THerefore, not many CEO's are aware of the benefits or even the service.   Is that also true?   This would equate to a small and tight job market for pentesting I would imagine. 


Thanks - how do I market myself once I pass the exam?


What does the payscale look like? 

I understand, although I have a VA background it's not where I want to stay.     

Excellent advice
Do you usually work "piece meal" or sit on a list waiting to be picked up on a job like a mercenary or something?    Are you employed full time with benefits or are you contracted? i.e 1099 etc.    I have a family to take care of so would I need another source of income during the "slow" months? 


Great help, and don't mind my screen name - I have to do things like that to keep myself from getting "too" serious sometimes.