Getting into Pentesting, using this strategy?

[3xban]

^ ++1 

and another ++1, great point ajohnson!  Security is not an entry level job.  Those that can swing past the HR screens and senior management to tag a manager spot will need to tread lighly around the technical team.  Nothing loses respect more than an ISO/CISO trying to tell the technical team with years of experience, how to do their job when the manager clearly has no idea what they are doing. 

[Falcon]

Thank you all for the great advice.
I've been looking for entry level positions but they
are hard to come by in a small city. In the interim I will
take this advice to heart and start off small.
Thanks again.

[T_Bone]

I'm actually working and have been working on getting some stuff together a-la Moodle and GoToMeeting to train people but its not based on any cert. More like a "hacking without borders" type of class using Rosetta Stone like methods of penetration testing, forensics and counterforensics all rolled in one. Zero fluff and no re-hashed information but not sure of the appeal it would have since there would be no cert to achieve in taking the course.

Been throwing the idea around for some time, actually made the Moodle site, some modules, and so forth, just been swamped with other training priorities.modules, and so forth, just been swamped with other training priorities.

That actually sounds pretty cool.  Certs are just a bonus to some of those decent technical courses, honestly the main reason I am currently taking eCPPT is just for the knowledge.  In my market it is not that well known of a cert.  But the content is decent and a great way to get a better understanding of the material.

As for what you are trying to do, I think that would be a great way to learn.  Then afterwards the students can take that knowledge back to their current jobs and making their pen tests worth that much more or for the beginners to go and maybe pursue some entry level certs.  I look forward to hearing more about this when you find time in the busy schedule.

This sounds excellent Sil, I really couldn't care less about getting a certificate of any kind, all I could care about is gaining the knowledge from yourself. keep us updated

[lynoharvey]

Hi
Falcon--I wish you luck in your efforts at getting a job. I would be interested to hear how you get on as time passes.
I am currently doing volunteer IT work with a charity---I really enjoy it and I am learning lots at the same time.
In the UK people are not taking their jobs for granted at the moment and many people in all types of careers are having problems finding work.--I am not sure what the situation is like in the USA.
Many people on the Masters were taking the course to boost their chances in the employment market. I did the course at De Montfort and I also did a year’s placement in the IT department of a large organisation.  The Master’s was challenging and expensive and it definitely takes a lot of effort.
I think it was worth doing and I am proud of the achievement but there are other ways of learning. I like the look of the Sans courses and am saving up to take one or even challenge one of them.
One thing I do enjoy is doing some of the challenges that are posted on the Internet-- on this forum someone has posted about the Honeynet Challenge---I am also taking part in the US Cyber security challenge and also the UK version---and also the Forensic challenge. They are all free and open to everyone whether you have been years in the profession or not.
I enjoyed Sil’s web guide because it gave an experienced view of what is helpful in the path towards a security role.

[Falcon]

Thank you lynoharvey,
I think it’s great that you volunteer your time and services.
Today I applied for two entry level Security Analyst positions. The company is asking that CISSP cert is obtained within six months of hire.
Even though this is a small city the job market isn’t bad here.  I will probably put off a MSc. Hopefully I can get on with a company that will pay part of that.

[lynoharvey]

Hi Falcon,
I wish you good luck with your applications.
I am currently going through the graduate recruitment process for a large networking organisation. If I get the post I will be over the moon.  I enjoy anything to do with networks and think security is a part of any job in this area. If I don’t get it I will just keep applying for jobs.
take care

[millwalll]

I agree with lot the comments here just to give you idea my situation. I left uni and all I wanted to do was work in pentesting I was lucky enough to get a break with a company only to find there was a big gap in my learning. The company sadly had to let me go as they felt I was not ready to be put out as consultant so they could not make money from me I am not trying to work on the areas I identified where I need some improvement.

Getting a job in security in no easy task and I would say your better to get a job as helpdesk ssyadmin and try work your way into security than leaving uni and getting a job in security straight away unless you lucky and get in with big company that can afford to spend money on training you.