{"id":245,"date":"2015-10-29T14:09:25","date_gmt":"2015-10-29T14:09:25","guid":{"rendered":"http:\/\/cybersecurity.bellevue.edu\/?p=245"},"modified":"2018-07-25T08:14:39","modified_gmt":"2018-07-25T14:14:39","slug":"breaking-into-security-2015","status":"publish","type":"post","link":"https:\/\/cybersecurity.bellevue.edu\/index.php\/2015\/10\/29\/breaking-into-security-2015\/","title":{"rendered":"Breaking into Security &#8211; 2015"},"content":{"rendered":"<p>One of the common questions I am asked is, \u201cHow do I get a job in information security?\u201d\u00a0 Infosec continues to be a hot career field with many job opportunities.\u00a0 Therefore, we continue seeing people who are interested, but don\u2019t know the steps it takes to gain employment in information security.\u00a0 This blog post answers the question, \u201cHow do I break into (the) security (career field)?\u201d<\/p>\n<p>A few years ago, I was asked a similar question of how I got started in security.\u00a0 It all started as a computer science major at Michigan State University. I was also in Air Force ROTC.\u00a0 This combination allowed me to start developing my security mindset.\u00a0 As a military intelligence officer, I learned about data classification and safeguarding sensitive information. I left the Air Force for a job as a UNIX systems administrator where I learned how to apply technical controls to protect the systems and its data. As a junior security analyst, I learned the importance of policies and awareness. The combination of technical and managerial experience led me to security management roles. (You can read more about my experiences here: <a href=\"http:\/\/www.scmagazine.com\/me-and-my-job-ron-woerner-bellevue-university\/article\/198495\/\">Me and my Job: Ron Woerner, Bellevue University<\/a>, SC Magazine, April 2011)<\/p>\n<p>To become a security professional, you need a mix of experience, knowledge, and abilities. It\u2019s not generally an entry level career field, because you need time to develop yourself as a security professional who understands the many aspects of cybersecurity. \u00a0Traits to be successful in cybersecurity include:<\/p>\n<ul>\n<li>Curiosity &#8211; A wonder on how and why things work<\/li>\n<li>Critical Thinking &#8211; goes with #1. You need to go beyond the obvious<\/li>\n<li>Communications skills &#8211; you can find the coolest things, but if you can&#8217;t effectively let others know, it&#8217;s like a tree falling in the forest<\/li>\n<li>Technical Skills &#8211; You need to know your way around a computer<\/li>\n<li>Maturity &#8211; Stuff happens. You need to be able to keep your head when all h311 is breaking lose.<\/li>\n<\/ul>\n<p>The security community has a vast number of articles on breaking into the security career field.<\/p>\n<ul>\n<li>This article from the great security blog site <a title=\"Securosis Blog\" href=\"https:\/\/securosis.com\/blog\">Securosis\u00a0<\/a>\u00a0(<a class=\"twitter-atreply pretty-link\" href=\"https:\/\/twitter.com\/securosis\"><s>@<\/s>securosis<\/a>)\u00a0contains recommendations for starting in security and potential career tracks: \u201c<a href=\"https:\/\/securosis.com\/blog\/who-to-recruit-for-security-how-to-get-started-and-career-tracks\">Who to Recruit for Security, How to Get Started, and Career Tracks<\/a>\u201d.<\/li>\n<li>\u201c<a href=\"http:\/\/www.secureconsulting.net\/2010\/04\/i-am-infosec-and-so-can-you.html\">I Am InfoSec, and So Can You<\/a>\u201d is an article by Ben Tomhave (@<a class=\"twitter-atreply pretty-link\" href=\"https:\/\/twitter.com\/falconsview\">falconsview<\/a>).\u00a0 In particular see his second paragraph explaining what we really need in security. He also has a number of tips for those who are still crazy enough to enter the field.<\/li>\n<li>George Hulme (<a class=\"twitter-atreply pretty-link\" href=\"https:\/\/twitter.com\/georgevhulme\"><s>@<\/s>georgevhulme<\/a>) wrote in March 2015, &#8220;Six entry-level cybersecurity job seeker failings,&#8221; <a href=\"http:\/\/www.csoonline.com\/article\/2894193\/infosec-staffing\/six-entry-level-cybersecurity-job-seeker-failings.html\">http:\/\/www.csoonline.com\/article\/2894193\/infosec-staffing\/six-entry-level-cybersecurity-job-seeker-failings.html<\/a><\/li>\n<li>Jenifer Noss (A Bellevue University\u00a0MS Cybersecurity graduate) has a nice piece on \u201c<a href=\"http:\/\/jenifernoss.blogspot.com\/2014\/01\/finding-work-as-it-security-specialist-6.html\">Finding work as an IT Security Specialist<\/a>.\u201d\u00a0 She is not only a student, but also a seasoned cybersecurity professional. Check out the links in her blog for where to go tshe provides for increasing your cybersecurity potential.<\/li>\n<li>Trey Ford (@treyford) currently at Rapid7 has two posts that may help cybersecurity career hunters:\n<ul>\n<li>Networking- <a class=\"twitter-timeline-link\" dir=\"ltr\" title=\"https:\/\/community.rapid7.com\/community\/infosec\/blog\/2015\/07\/20\/the-black-hat-attendee-guide-part-3--networking-at-black-hat\" href=\"https:\/\/t.co\/ylsL7lAtOY\" target=\"_blank\" rel=\"nofollow\" data-expanded-url=\"https:\/\/community.rapid7.com\/community\/infosec\/blog\/2015\/07\/20\/the-black-hat-attendee-guide-part-3--networking-at-black-hat\"><span class=\"invisible\">https:\/\/<\/span><span class=\"js-display-url\">community.rapid7.com\/community\/info<\/span><span class=\"invisible\">sec\/blog\/2015\/07\/20\/the-black-hat-attendee-guide-part-3&#8211;networking-at-black-hat<\/span><span class=\"tco-ellipsis\"><span class=\"invisible\">\u00a0<\/span>\u2026<\/span><\/a> &amp;<\/li>\n<li>Job Hunting <a class=\"twitter-timeline-link\" dir=\"ltr\" title=\"https:\/\/community.rapid7.com\/community\/infosec\/blog\/2015\/07\/29\/the-black-hat-attendee-guide-part-6a-on-job-hunting-recruiting\" href=\"https:\/\/t.co\/NvO47QXXT2\" target=\"_blank\" rel=\"nofollow\" data-expanded-url=\"https:\/\/community.rapid7.com\/community\/infosec\/blog\/2015\/07\/29\/the-black-hat-attendee-guide-part-6a-on-job-hunting-recruiting\"><span class=\"invisible\">https:\/\/<\/span><span class=\"js-display-url\">community.rapid7.com\/community\/info<\/span><span class=\"invisible\">sec\/blog\/2015\/07\/29\/the-black-hat-attendee-guide-part-6a-on-job-hunting-recruiting<\/span><span class=\"tco-ellipsis\"><span class=\"invisible\">\u00a0<\/span>\u2026<\/span><\/a><\/li>\n<\/ul>\n<\/li>\n<li>@J4vvD has numerous videos answering this question\n<ul>\n<li>&#8220;How I started in Infosec,&#8221; <a href=\"https:\/\/www.youtube.com\/watch?v=ouO2cdnGFK4\">https:\/\/www.youtube.com\/watch?v=ouO2cdnGFK4<\/a><\/li>\n<li>&#8220;How do I learn more about infosec?,&#8221;\u00a0<a href=\"https:\/\/www.youtube.com\/watch?v=FdDFUSchMuM\">https:\/\/www.youtube.com\/watch?v=FdDFUSchMuM<\/a><\/li>\n<li>&#8220;Sharing your knowledge,&#8221;\u00a0<a href=\"https:\/\/www.youtube.com\/watch?v=RCS-DKfmj38\">https:\/\/www.youtube.com\/watch?v=RCS-DKfmj38<\/a><\/li>\n<li>&#8220;Finding your niche,&#8221;\u00a0<a href=\"https:\/\/www.youtube.com\/watch?v=sAnj4ZcM3wk\">https:\/\/www.youtube.com\/watch?v=sAnj4ZcM3wk<\/a><\/li>\n<\/ul>\n<\/li>\n<li>The National Initiative for Cybersecurity Careers and Studies has a website (<a href=\"https:\/\/niccs.us-cert.gov\/education\/promoting-education\" rel=\"nofollow\">https:\/\/niccs.us-cert.gov\/education\/promoting-education<\/a>) focused on Promoting Education, Engaging Students, and Fostering Communities.<\/li>\n<\/ul>\n<p>This reminds me that everything old is new again. Many of the articles I mention above were written a few years ago. Things really haven\u2019t changed over the years.\u00a0 The career path still requires education, training, experience, and persistence.<\/p>\n<p>As an extra, added bonus, here\u2019s a 3 \u00bd minute Ted talk from Richard St. John: <i>8 secrets of success <\/i>&#8211; <a href=\"http:\/\/www.ted.com\/talks\/richard_st_john_s_8_secrets_of_success.html\">http:\/\/www.ted.com\/talks\/richard_st_john_s_8_secrets_of_success.html<\/a> (Watch for his explanation of CRAP).\u00a0 It\u2019s great, general information on how to succeed in any career.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>One of the common questions I am asked is, \u201cHow do I get a job in information security?\u201d\u00a0 Infosec continues to be a hot career field with many job opportunities.\u00a0 Therefore, we continue seeing people who are interested, but don\u2019t know the steps it takes to gain employment in information security.\u00a0 This blog post answers [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[11,8,3],"tags":[],"class_list":["post-245","post","type-post","status-publish","format-standard","hentry","category-human-aspects","category-security-education","category-security-management"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cybersecurity.bellevue.edu\/index.php\/wp-json\/wp\/v2\/posts\/245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybersecurity.bellevue.edu\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecurity.bellevue.edu\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersecurity.bellevue.edu\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecurity.bellevue.edu\/index.php\/wp-json\/wp\/v2\/comments?post=245"}],"version-history":[{"count":5,"href":"https:\/\/cybersecurity.bellevue.edu\/index.php\/wp-json\/wp\/v2\/posts\/245\/revisions"}],"predecessor-version":[{"id":250,"href":"https:\/\/cybersecurity.bellevue.edu\/index.php\/wp-json\/wp\/v2\/posts\/245\/revisions\/250"}],"wp:attachment":[{"href":"https:\/\/cybersecurity.bellevue.edu\/index.php\/wp-json\/wp\/v2\/media?parent=245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecurity.bellevue.edu\/index.php\/wp-json\/wp\/v2\/categories?post=245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecurity.bellevue.edu\/index.php\/wp-json\/wp\/v2\/tags?post=245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}