Cyber Security
Discussion
I've been thinking of a career change for a while now. I keep seeing adverts popping up here and there about the skills shortage in cyber security, is this accurate? I do have a friend that works for Airbus in cyber security but I'm not sure exactly what he does as he won't tell us, plus getting hold of him to "chat" is difficult because he's always working.
What would be the best certs to gain in order to get a foot in the door. I have no degree and have considered some sort of access course but wondering if it's worth pursuing that avenue.
I'm 35 and I earn a fair wedge currently working as a free lance chef but I'm starting to loathe the job again. I am prepared to take a pay cut if needed.
This website in particular is one that keeps "targeting me...
https://itcareerswitch.co.uk/product-cyber-securit...
What would be the best certs to gain in order to get a foot in the door. I have no degree and have considered some sort of access course but wondering if it's worth pursuing that avenue.
I'm 35 and I earn a fair wedge currently working as a free lance chef but I'm starting to loathe the job again. I am prepared to take a pay cut if needed.
This website in particular is one that keeps "targeting me...
https://itcareerswitch.co.uk/product-cyber-securit...
There is a general shortage of IT people. Developers especially and cyber security. Pay is good in security, although its hard because you have to be constantly learning and evolving.
CREST certification is a good place to start. You will be hard pushed to get a role without something like that. Some companies will take grad level people in and train and certify them but that might be too big a pay cut for you.
CREST certification is a good place to start. You will be hard pushed to get a role without something like that. Some companies will take grad level people in and train and certify them but that might be too big a pay cut for you.
That s the hardest part of breaking into IT. Everyone wants experience. You will need to go into a lower role, get the experience and then work towards your qualification.
Are you in to computers and technically proficient or is it the money that you are after? While there is a skills shortage there is still plenty of competition for grad level jobs and you'll be up against people with degrees.
Are you in to computers and technically proficient or is it the money that you are after? While there is a skills shortage there is still plenty of competition for grad level jobs and you'll be up against people with degrees.
OK - where to start...
Cyber Sec' covers a very broad sector. What your friend does for Airbus may be entirely different from what other's do, and what you may want to do. So I think it is most important to decide what you want from a job/career. The good news, is that in the long term, your salary level will be easily achievable in many different areas of cyber-sec, and I see no reason why you could not make a change.
So - do you have any natural ability/instinct/interest? Many of the researchers, developers, coders have a natural interest. If you are going in cold, competition is hard (there is strong demand for those with the skills, but less demand for somebody who cant demonstrate a long term interest), and there is a mountain of learning to climb. If you don't, then you may be better looking at a different area... For example Technical support for the big Security vendors or Security specialists is a good way in. From there you can launch into dev, pre-sales, solutions Architecture, installation etc. In fact pretty much anywhere.
If you don't want a hands on tech role at all, you can still work in cyber sec. Project management, Program management, Product marketing and sales all existing within cyber sec. In fact if I go a step further, I know a fair few MD's, VP's and General Managers who all only work in Cyber Sec.
I agree that training is a good place to start. And if you have experience/aptitude then CREST makes sense. But other certs include CISSP, CompTIA Security+, CISM or some of the SANs courses. People will argue the value of these, but they are at the well respected end of the certifications, and will help you to demonstrate to an interviewer that you are keen, have done your homework and committed. If I were interviewing for a support role, and a applicant had decided to change career, and had got themselves one of these off their own back, then I would be happy hear them out.
Cyber Sec' covers a very broad sector. What your friend does for Airbus may be entirely different from what other's do, and what you may want to do. So I think it is most important to decide what you want from a job/career. The good news, is that in the long term, your salary level will be easily achievable in many different areas of cyber-sec, and I see no reason why you could not make a change.
So - do you have any natural ability/instinct/interest? Many of the researchers, developers, coders have a natural interest. If you are going in cold, competition is hard (there is strong demand for those with the skills, but less demand for somebody who cant demonstrate a long term interest), and there is a mountain of learning to climb. If you don't, then you may be better looking at a different area... For example Technical support for the big Security vendors or Security specialists is a good way in. From there you can launch into dev, pre-sales, solutions Architecture, installation etc. In fact pretty much anywhere.
If you don't want a hands on tech role at all, you can still work in cyber sec. Project management, Program management, Product marketing and sales all existing within cyber sec. In fact if I go a step further, I know a fair few MD's, VP's and General Managers who all only work in Cyber Sec.
I agree that training is a good place to start. And if you have experience/aptitude then CREST makes sense. But other certs include CISSP, CompTIA Security+, CISM or some of the SANs courses. People will argue the value of these, but they are at the well respected end of the certifications, and will help you to demonstrate to an interviewer that you are keen, have done your homework and committed. If I were interviewing for a support role, and a applicant had decided to change career, and had got themselves one of these off their own back, then I would be happy hear them out.
TheAngryDog said:
I am currently studying for Security+ as a starting point as I am responsible for maintaining our IT security for my company, so having more knowledge and the certification to back this up will be good, and a great starting point to move on to further courses.
The trouble with something like Security+ is that you have to renew every 2 years at a cost of $200 a time. This is worth it for something like CISSP but for entry level certs like Security+ it is difficult to justify. I have let many of my certifications lapse now as it is just too costly to maintain them all.Grab the cert if it is a requirement for a position but if not then I wouldn't bother.
272BHP said:
TheAngryDog said:
I am currently studying for Security+ as a starting point as I am responsible for maintaining our IT security for my company, so having more knowledge and the certification to back this up will be good, and a great starting point to move on to further courses.
The trouble with something like Security+ is that you have to renew every 2 years at a cost of $200 a time. This is worth it for something like CISSP but for entry level certs like Security+ it is difficult to justify. I have let many of my certifications lapse now as it is just too costly to maintain them all.Grab the cert if it is a requirement for a position but if not then I wouldn't bother.
If you don't have a background in IT, start with Network+ and Security+, maybe even A+ from CompTia. A good entry point to Security is to get a Security Analyst role in a SOC, gives you a good understanding of attacking and defensive techniques. If you live anywhere near Derby let me know.
What areas of security are you interested in?
What areas of security are you interested in?
NordicCrankShaft said:
I've been thinking of a career change for a while now. I keep seeing adverts popping up here and there about the skills shortage in cyber security, is this accurate? I do have a friend that works for Airbus in cyber security but I'm not sure exactly what he does as he won't tell us, plus getting hold of him to "chat" is difficult because he's always working.
What would be the best certs to gain in order to get a foot in the door. I have no degree and have considered some sort of access course but wondering if it's worth pursuing that avenue.
I'm 35 and I earn a fair wedge currently working as a free lance chef but I'm starting to loathe the job again. I am prepared to take a pay cut if needed.
This website in particular is one that keeps "targeting me...
https://itcareerswitch.co.uk/product-cyber-securit...
Yes there is a shortage, I would probably look at security data governance and risk rather than Cyber. I feel that Cyber is becoming more automated and this will only increase over the next 5 years. What would be the best certs to gain in order to get a foot in the door. I have no degree and have considered some sort of access course but wondering if it's worth pursuing that avenue.
I'm 35 and I earn a fair wedge currently working as a free lance chef but I'm starting to loathe the job again. I am prepared to take a pay cut if needed.
This website in particular is one that keeps "targeting me...
https://itcareerswitch.co.uk/product-cyber-securit...
ISO27001 qualifications is where i would start and do the base ones plus a specialism.
Probably worth doing COBIT next.
All the above can be done on your laptop without attending a class or exam centre.
Next go through the SANS institute catalogue and pick some courses that feel you have an interest in.
I would study for ISACA CRISC and then see if you can get a entry level position somewhere.
After 12 months do the CISSP and then you are ready to do start some mid-level training.....
Take a look at the OSCP courses. They are hard work and the exam is a 24hr thing (you have to break into 18 systems and write it up). The material you are given is well written and helps a lot.
Requires some previous knowledge but you could get away with knowing nowt
https://www.offensive-security.com/information-sec...
Requires some previous knowledge but you could get away with knowing nowt
https://www.offensive-security.com/information-sec...
NordicCrankShaft said:
Just looking for something interesting that will give me a job that's fairly future proof.
I'd stick as a chef if you want future proof! IT is constantly evolving and what is hot right now, is dead in the water a few years from now... so expect to keep learning and feeling 'new' throughout your entire career if you stay as an individual contributor. Also, if you have something about you, consider getting into sales rather than a technical job. Pay can be astronomical (seven figures) if in the right place at the right time and can make it happen).
Starting in sales, normally means starting at the bottom (Business Development AKA Cold calling to give leads to someone else) but if you are any good, you'll be owning accounts/deals in their entirety within a short period of time.
As a guide, our entry level BDR (Business Development reps) earn $45k base with $27k commission plan (Uncapped) at the start.. you could be 22 years old and your first job.
A 10 year+ experienced senior account executive could earn $500k+ easily in a good year in my company. I've known sales reps in other companies get to the $1m range, but these are rare and normally selling huge ($20m+) contracts over many years.
Sorry for the dollar figures, I am in the US. But just run these numbers through an exchange to get pounds. Either way, we pay the same across our entire company.
Cyber Security is so bloody broad. What is it that you want to do?
I work in the offensive side (pen testing) side of things. I saw CREST mentioned ^ if you have no prior it/network experience you will struggle (I teach the pen test courses).
Don't see £££££ (not all jobs are rock star wages) if it's for you go for it (I love it).
I work in the offensive side (pen testing) side of things. I saw CREST mentioned ^ if you have no prior it/network experience you will struggle (I teach the pen test courses).
Don't see £££££ (not all jobs are rock star wages) if it's for you go for it (I love it).
Gassing Station | Jobs & Employment Matters | Top of Page | What's New | My Stuff