In regards to the CISSP experience requirement, how creative can you get with it?
I work day in and day out looking after a variety of SMB clients. Doing absolutely everything. Including security related stuff like locking down firewalls. Implementing security policies, designing disaster recovery plans etc.
I basically cover all 10 knowledge areas... but my job title does not infer security.