full-disclosure - Re: Path to IT Security

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <8A8454A0-4088-4ACE-B4BA-E93E5B4FA6A7@gmail.com>
Date: Tue, 18 Jan 2011 17:26:07 -0800
From: bk <chort0@...il.com>
To: Emmanuel Apreko <eapreko@...il.com>
Cc: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Path to IT Security

On Jan 18, 2011, at 8:10 AM, Emmanuel Apreko wrote:

> After researching i found out that the most prestigious security certification is the CISSP and it seems like a very long journey to it since i have no experience in it at all but need to get my foot in.

Any certificate that is a based on a multiple-choice test is basically testing your ability to memorize and recall, not your actual competence in a field.

> Could anyone please advise me on the best path to being a security professional? ie from beginner to pro? 
> 
> All advise will be well appreciated.

Go to conferences (small local ones, not the big expensive ones), start following InfoSec people on Twitter, read InfoSec blogs.  You'll learn more doing those than from all the certificates combine.

Once you have a knowledge, then study for a cert if you think you need it to get a job.  It should be pretty easy, since you'll be familiar with most of the ideas already.

I got a certificate to get past HR and because it looks pretentious on a business card.  It wasn't worth the hassle of submitting paperwork and paying dues to continue having it, so I let it lapse.  I haven't had any problem getting a job since then.

--
bk
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/