Who would hire me
IT Certifications and Careers (Official Discussion Thread)
- Thread starter fendi_mane
- Start date
StretfordRed
Afro-European
CEH is/was seen as the kiddy pen-testing certification as it is all book based. The OSCP is seen by many pen testers and pen test organisations to be the defacto certificate
OCSP is run by the guys who do Backtrack Linux/Kali Linux: https://www.offensive-security.com/...cp-offensive-security-certified-professional/
SANS are the (pretty much) defect training organisation, who in turn provide GIAC training courses (GCIA, GCIH, GREM, etc): http://www.sans.org. Their courses are expensive and most people have their funded by the work place. Else wise you can do work/study where you be an assistant in the class and be able to take the course at a very cheap rate
Security certifications are difficult in terms of usefulness. Most of them are useless without experience. But that experience can just be running labs at home, but you need to be more than a paper cert
Ice_MF_Mike
Pro
Its a security certification. Its in very high demand. And more importantly, it gives you a very broad knowledge of the infosec realm. From there you have a better idea which direction to proceed as its a HUGE field. Below are the domains for this certification:
The CISSP® domains are drawn from various information security topics within the (ISC)²®CBK®. The CISSP CBK consists of the following 10 domains:
- Access Control – A collection of mechanisms that work together to create securityarchitecture to protect the assets of the information system
- Concepts/Methodologies/Techniques
- Effectiveness
- Attacks
- Telecommunications and Network Security – Discusses network structures, transmission methods, transport formats and security measures used to provideavailability, integrity, and confidentiality
- Network Architecture and Design
- Communication Channels
- Network Components
- Network Attacks
- Information Security Governance and Risk Management – The identification of anorganization’s information assets and the development, documentation andimplementation of policies, standards, procedures, and guidelines
- Security Governance and Policy
- Information Classification/Ownership
- Contractual Agreements and Procurement Processes
- Risk Management Concepts
- Personnel Security
- Security Education, Training and Awareness
- Certification and Accreditation
- Software Development Security – Refers to the controls that are included within systems and applications software and the steps used in their development
- Systems Development Life Cycle (SDLC)
- Application Environment and Security Controls
- Effectiveness of Application Security
- Cryptography – The principles, means and methods of disguising information toensure its integrity, confidentiality, and authenticity
- Encryption Concepts
- Digital Signatures
- Cryptanalytic Attacks
- Public Key Infrastructure (PKI)
- Information Hiding Alternatives
- Security Architecture and Design – Contains the concepts, principles, structuresand standards used to design, implement, monitor, and secure, operating systems, equipment, networks, applications, and those controls used to enforce various levels ofconfidentiality, integrity, and availability
- Fundamental Concepts of Security Models
- Capabilities of Information Systems (e.g. memory protection, virtualization)
- Countermeasure Principles
- Vulnerabilities and Threats (e.g. cloud computing, aggregation, data flow control)
- Operations Security – Used to identify the controls over hardware, media and theoperators with access privileges to any of these resources
- Resource Protection
- Incident Response
- Attack Prevention and Response
- Patch and Vulnerability Management
- Business Continuity and Disaster Recovery Planning – Addresses thepreservation of the business in the face of major disruptions to normal businessoperations
- Business Impact Analysis
- Recovery Strategy
- Disaster Recovery Process
- Provide Training
- Legal, Regulations, Investigations and Compliance – Addresses computer crime laws and regulations, the investigative measures and techniques that can be used todetermine if a crime has been committed, and methods to gather evidence
- Legal issues
- Investigations
- Forensic procedures
- Compliance Requirements/Procedures
- Physical (Environmental) Security – Addresses the threats, vulnerabilities, andcountermeasures that can be utilized to physically protect an enterprise’s resourcesand sensitive information
- Site/Facility Design Considerations
- Perimeter Security
- Internal Security
- Facilities Security
Last edited:
5 yearsWelcome to the thread breh. I understand your frustration, Ive been at the helpdesk for 5 years and ready to move on up. I come here for motivation to keep pushing and continue to sharpen my skills
i've been almost a year now and im looking to stay MAX 5 months more
Go to school, if you're not already in one.
It's true that you don't necessarily have to have a degree to work in IT, but it'll make it a lot easier to get your foot in the door. More importantly, if you enroll in an IT program you'll meet people that already work in the industry, and they might be able to put in a good word for you or help you get a job. Like a lot of people say, sometimes it's not just what you know but who you know. Doesn't even have to be at a university either, there are community colleges with pretty good IT programs. Even getting your associates will make it a lot easier to land your first job.
In the current economy, a lot of time HR departments will throw your resume in the bushes of general principle if you don't have some sort of education, even if it's not strictly required for the job.
IT is just computer programming aint it? Correct me if I'm wrong though
IT is just computer programming aint it? Correct me if I'm wrong though
Not at all, in fact some people don't even consider programming to be IT. There are a LOT of areas in the field you can go into, for example -
-Tech Support/Helpdesk
-PC Tech
-Network/Server Administration
-Database Administration
-Website Design
-Project Management
-Business Analysis
-IT Security
-E-commerce
Nobody does all of this, you have to specialize in something. I work in IT but I know little about programming. That's why it's important to go to school and figure out what you want to do, because just saying you want to work in "IT" is vague.
Ice_MF_Mike
Pro
Reposting this again.
Ice_MF_Mike
Pro
What he said. Look IT is so broad. No matter what background you can likely leverage it in IT in some way. It doesnt just have to be programming or fixing windows. Nowadays its those non traditional roles that seem to be where its at. And at the root of those is being able to translate technical topics to non technical people as well as impacting the business. Get into a role like that and you are good to go. And you may not even need to be all that technical to do so. But you will always need to stay current and keep learning, especially whats hot in order to stay relevant. And having a good educational foundation will make it easier for you to move between these different roles and learn new things.
Cryptography seem's like what I'd be interested in. thanks for the information my dude!
Thanks for the clarification!
I'll definitely look in OCSP. I was thinking CEH would open me up to more security related gig's but since you broke it down like that, I'll research other options.