Getting back into freelance IT consulting

[User name]

I've been doing a lot of in-house contracting work of late (last 8 years) and am now looking to go back towards a freelence role where I can be based from home.
My skillset covers SMB Infrastructure, Penetration testing, Desktop Support, Hosting and Servering, Telecoms etc.

Primary services to offer:
- Network & Infrastructure design/supply/build/support for Startups and SMBs. (Primary aim)
- Maintenance contracts
- ad-hoc support

I am not a cold-caller, I hate being cold-called (I will usually immediately black-list any company that cold calls me), I hate the process, and I hate the "hard sell" - So how should I go about drumming up some interest? How are people searching for IT consultants these days? Google Businesses?

[Robbidoo]

If you're a qualified pen tester surely you should be contracting just doing that and earning the stloads commensurate with that role?

[User name]

Robbidoo said:

If you're a qualified pen tester surely you should be contracting just doing that and earning the stloads commensurate with that role?

I'm not "Qualified" - although I have looked into it.
lets just say "Basic" pen-testing.

[Australiam]

We periodically use freelance staff, and would be happy to look over your CV to see if it fits. I've sent you a PM.

[User name]

Australiam said:

We periodically use freelance staff, and would be happy to look over your CV to see if it fits. I've sent you a PM.

Thanks :-) - Where are you based? What sector etc?

[Australiam]

User name said:

Thanks :-) - Where are you based? What sector etc?

I believe our head office is relatively local to you (Nottingham), though our customers are widely spread. We work across sectors, primarily SMB, though there are exceptions. You can read more about us on our website (listed within my profile).

If you have more questions, or want to chat, PM me, as I would prefer not to hijack the thread with self promotion.

[Dan_M5]

unless youre qualified pen tester i wouldnt even bother mentioning it

[Bikerjon]

Do you mean you want to swap the relatively safe option of 3 or 6 month IT contracts to getting your own customers and becoming a "proper" business?

[Taita]

Pen Testing covers a VERY large skill range.

Are you any good or is it a bit of 'nmap -T4' which complements your other offerings whilst you are on site. (not a dig, just asking).

[HiAsAKite]

User name said:

I'm not "Qualified" - although I have looked into it.
lets just say "Basic" pen-testing.

I guess thats nessus/nmap/nipper/CIS tools plus basic metasploit?

Could you do and pass OSCP, or sit and pass CREST CRT?

Worth thinking about - there's money there even without full CREST Certified Tester/CSAM/CSAS

[User name]

HiAsAKite said:

User name said:

I'm not "Qualified" - although I have looked into it.
lets just say "Basic" pen-testing.

I guess thats nessus/nmap/nipper/CIS tools plus basic metasploit?

Could you do and pass OSCP, or sit and pass CREST CRT?

Worth thinking about - there's money there even without full CREST Certified Tester/CSAM/CSAS

Correct yes, as I said, Basic :-), I shouldnt have mentioned it, and rarely do, its not on my CV.

OSCP is actually the one I've been seriously looking at doing - but its been a while, must re-investigate.

[Taita]

OSCP is becoming the defacto entry cert. They've just introduced proctored exams after many Eastern 'IT Friends' cheated by getting other people to do exam. Same as MCSE etc in the old days.

OSCP is pretty irrelevant for modern Windows pentesting though, but it's fairly enjoyable.