Looking at getting into IT security

Forums › IT Pro and developers › Looking at getting into IT security

theitman

189 posts

Master Geek
+1 received by user: 16

#201701 30-Aug-2016 13:49

Hi All,

I am looking at getting into a different role and moving into IT Security. Currently on service desk.

Is anyone here recently become certified etc?

I was looking at studying towards Comptia Security+ or the Microsoft exam - Security Fundamentals?

Any ideas on where i should start? or anyone have any books for sale?

TIA

timmmay

20858 posts

Uber Geek
+1 received by user: 5349

Trusted

Lifetime subscriber

#1619671 30-Aug-2016 13:51

Security can be a difficult field to get into. To get a really good qualification or a specialist job you often need years of experience. I suspect the best way in is with a company that can mentor and train you.

theitman

189 posts

Master Geek
+1 received by user: 16

#1619677 30-Aug-2016 13:56

I've always been at a crossroads as to what sector to move into. I've touched on most: networking, databases, servers etc when i studied but never got fully engrossed in anything to get certified and then move into a new job.

Any thoughts?

Sounddude

I fix stuff!
1935 posts

Uber Geek
+1 received by user: 640

Trusted

2degrees

Lifetime subscriber

#1619681 30-Aug-2016 14:00

I would look into CISSP. Very valuable cert but quite challenging to get.

Noodles

487 posts

Ultimate Geek
+1 received by user: 95

#1620262 31-Aug-2016 14:42

As a free intro try https://www.openlearning.com/courses/sec more info on the risky business podcast (security podcast, you should subscribe): http://media.risky.biz/RB393.mp3 at about 31:00 minutes into the
podcast.

geekiegeek

2513 posts

Uber Geek
+1 received by user: 625
Inactive user

#1620328 31-Aug-2016 16:51

Also, depends on what you mean by security. Networks security? application security? access management? rights management? the list goes on. I would pick one area and focus on that so if for instance, you wanted to do network security you could start with firewalls etc. That doesn't mean you have to stay in that area but I think you will have a hard time moving straight to a general security architecture type role.

Personally, I now work in Identity and Access Management as an Architect but getting here I worked service desk then networks and firewalls, Windows server and AD and then Infrastructure Architect before moving into what I'm doing now. Timeline - 15 years.

So pick an area you like and approach it with a security focus and just keep looking for opportunities to grow and learn. You can't beat time in the trenches for experience.

vulcannz

436 posts

Ultimate Geek
+1 received by user: 136
Inactive user

#1620378 31-Aug-2016 19:20

^ what geekiegeek said.

Comptia qualifications mean very little, having a Microsoft security qualification might actually drop you back (Microsoft creates security jobs by insecurity :) ).

Figure what field you want to do within security, get some vendor certifications and find an entry level position. If you are good then you will climb the ranks relatively quickly. Some of the vendor certs are hard to hit without a bit of $$$. If you can self teach it will save you a lot.

CISSP is OK but not considered a technical qualification. Knowing some people who have it killed my aspirations to get it.