Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 33 guests and 1 member online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Resourcesarrow Career Centralarrow Soon to be college graduate looking for the next logical step
EH-Net
May 18, 2013, 02:42:18 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Soon to be college graduate looking for the next logical step  (Read 4304 times)
0 Members and 1 Guest are viewing this topic.
mjones
Newbie
*
Offline Offline

Posts: 3


View Profile
« on: March 25, 2011, 12:53:58 PM »

I will be graduating this Spring with my Bachelors in Computer Information Systems and a minor in Computer Forensics. I would love to get into the Security field of IT, with forensics being a "back up" plan of sorts.

I have the basic A+/Net+ certifications under my belt and I plan on taking the Security+ exam around graduation. I have held a few IT internships over the years so I do have some real world experience, albeit nothing on the side of forensics or security.

In my searches for possible jobs I have never found a job involving Security that doesnt require years of experience, which makes sense. Would the best career path for me to take involve any entry-level IT job and then just try to wiggle my way into security/foreniscs?

I would love to hear some other members career paths and how they arrived at the level they are at today. Any advice I could get would be fantastic.
Logged
millwalll
Guest
« Reply #1 on: March 25, 2011, 01:24:02 PM »

Hi mjones,

I am pretty much in the same boat. I have tried to apply for jobs but with no experience finding it hard. I am thinking of getting any It job and using money to get security certificates.

I was planing to do the security + too but the material is pretty old(2008). They are updating it in May so might be worth waiting until then.

I think you maybe better off getting IT job and trying to work your way in.

Hope this helps
Logged
chrisj
Hero Member
*****
Offline Offline

Posts: 1163


View Profile WWW
« Reply #2 on: March 25, 2011, 02:03:43 PM »

The way I did it... I started off as a janitor. Don't laugh.

Cliff notes version:

Applied and got a job shipping and receiving for one of the original internet backbone companies. Not enough work, so they had us be janitors too. Built Point of Presence (think data closet, but also routed internet traffic through it). Wired building for VOIP and Data. Found out what they did, lots of time spent doing personal study, and transferred to their Network Ops Center.
Things learned there: Locks, Unix, Networking. Interest in defense after company was hacked.

Changed to a Teleco. Worked they're SONET and IP NOCS.
Things learned there: Fiber Optics, Laser Communications, more networking, Wireless networking. Unix administration. Interest in War driving and war walking.

Laid off, back to school. CIS degree and Anthropology degree. Managed a bar.
Some interest in security, some interest in physical security. Encryption and tunneling.

CO-OP as a data base reports writer. Used tunneling to get around the school's blocks on some sites. Tunneled connections home to do homework and things when there were not reports to write programs for.

Changed to Automotive Data Center. Watch over Electricians installing equipment and cables (cat5, cat5e, Fiber optics). Go between network engineering vendor and auto company. Did wireless audits (look for rogue APs in sites), and ran the network sniffers.
Learned Sniffing and how to look at packets. Network data graphs.

Changed to publishing company. Started as the Unix / Linux admin. Used tunneling to play around   and test things from home. Then showed how to test remotely from my desk. Firewall admin got mad that I could tunnel around the rules. Punishment was taking over the firewall. Set up VPN connections, hunt out people breaking the AUP, locked down the firewall more, etc.

Currently, work for an IT company. Maintaining Load Balacers and server farms, making changes to firewalls, and setting up VPN for B2B and remote user access.

---
Every chance I got, I offered to work the security side / Defense. Some times I got to, some times I was ignored. When I could, I got in good with the security groups. Not in their department, but at least came off as someone that had skills, and understood the security side too. I've spent a lot of time over the last 14 years studying up on things on my own time.


Logged

OSWP, Sec+
tturner
Sr. Member
****
Offline Offline

Posts: 432


View Profile WWW
« Reply #3 on: March 25, 2011, 02:04:03 PM »

That's exactly what I did. I went from helpdesk > field tech support > sysadmin > IT management > hybrid security role w/disaster response/incident handling focus > pure security role. Ask any of us and we probably took a slightly different path to get there. You absolutely have to have the basics first though or the value you will provide will be minimal.

For instance, how do you pentest a database when you don't even know how a database works? Sure you can fire up sqlmap and see what happens or try some generic SQLi but what do you do when the injection is occurring at the wrong point or standard techniques don't work? You fall back to the basics and use critical thinking skills to solve the problem.

Get a normal boring IT job but keep a security focused perspective. Your employer will pick up on your interests and you will learn the core skills that will serve you well throughout your career.If that fails to deliver, once you have a solid grasp of the fundamentals, start shopping elsewhere for a security role.
Logged

Certifications:
CISSP, CISA, GPEN, GWAPT, GAWN, GCIA, GCIH, GSEC, OPSE, CSWAE, CSTP, VCP

WIP: OSWP, GSSP-JAVA, GXPN

Udacity on hold, again. I suck.

http://sentinel24.com/blog  @tonylturner http://bsidesorlando.org
lorddicranius
Sr. Member
****
Offline Offline

Posts: 447



View Profile WWW
« Reply #4 on: March 25, 2011, 02:18:59 PM »

Mike Murray posted a great article over at The Hacker Academy's blog: http://www.thehackeracademy.com/the-key-skill-set-of-great-penetration-testers/

He references an article posted over at InfoSecInstitute: http://resources.infosecinstitute.com/ideal-skill-set-for-the-penetration-testing/

Both are great articles I thought and may help you out a bit.
Logged

GSEC, eCPPT, Sec+
securitygal
Newbie
*
Offline Offline

Posts: 1


View Profile
« Reply #5 on: April 11, 2011, 10:58:12 AM »

Send me your resume as I work with a National Consulting Firm.  They occassionaly have entry level jobs, and will see if your background is a fit for their college recruit class.

pluther@preciseresource.com
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.067 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.