So far from what I can see HoH has a wide range of people within its community, ranging from young to the not so young. From hobbyists to paid professionals.
There is a question I have, an sure some of the overs (not already in a security related job) would like to ask the people of HoH. That question is.
How did you get into the job? What certs did you get/need? What would you say where a basic need before even looking for such jobs? (I know these question will be answered different from the different type of jobs people have)
the path as best I can describe it is as follows...
go get a job in computers anywhere you can even help desk or retail
study for test and earn an A+ certification
start learning all you can about networks
get a better computer job in support
get either a basic network cert CNA or Network + or even perhaps a basic security cert Sec+
get a job in networking and certify in a more advances way, CCIE or something similar
get a basic security cert like some of the Sans GIAC courses GSEC or a Cisco CCSE
get a first job in information security, take as many Sans courses as you can
get certified as a CISSP, SSCP or CISA
go get your dream job in security.
All that said there are two things I look for when hiring security staffers.
1) The kind of paranoid person who looks for the cameras, back exits and "what's wrong with this picture" when they enter a room. children of cops or career military kids often have this skill, call it an inate paranoia.
2) a computer generalist who has had experience in workstaion support, server admin, network and programming skills, I'll take someone who has worked in all these areas over a pure expert in any one area. they seem to make better security wonks in the long run.
learn what you can about Linux, Unix, Windows, VMS, OS X, and every system and OS you can get your hands on because you will end up touching them all. You can not afford to be too leet on any one or to vocal about your personal prefrences. Get over it, and learn to work with as many as you can.
lastly certifications do matter when you are changing or upgrading jobs, but not so much in the field doing the job every day.
Age: 23
Job Title: Security Specialist
Main Function: IDS Monitoring
One of my teachers in school was contacted, requesting resumes for my now employer, and he gave my resume to my now (sort-of)boss
When I was hired, I had my Security+ a few years of school, and a job in IT for 6 months. The Sec+ really didn't make much of a difference, what mattered was that i had a good understanding of IP and security concepts
I am a freelancer because I can't work in groups, nor live in them. I basically loath a company structure, and I like my freedom to move, eat, code, hack when ever I feel like it. Drawback is a low income, but since I don't care about owning material it doesn't bother me. I did have jobs of course, that I mainly got through CV fraud, since they would never hire nor believed me that I don't have any diploma's, none whatsoever.
Kinda interesting that people trust pieces of paper and never do a background check on them. I basically made it all up. Which in terms defines me as a hacker I guess, but still got any job I wanted. I guess it's okay to cheat a little on your resume, but only if you know you have the skills.
Wow, seczealot, I fit under both of those categories! :D ...And I use all three OS types, daily. ;)
Age: 25
Job TItle: Systems Analyst; This is basically one step down from being a System Administrator, though I do a lot more than my title suggests. I handle everything from break fix to network support.
I was pretty lucky finding my job and it is my first technical position. I got the job as a contractor back in Sept. and got hired on permanent in Feb. of this year, even though I have only finished tech school in Dec. The trick is to never sell yourself short. If you are confident enough in your skills and know your stuff, then you should not have a very hard time landing a job that is better than you may have otherwise thought you could get. When I interviewed for my current job, I had no (documented) practical experience with computers outside of school and what I put on my resume. I was lucky that the interviewer (my boss) had been a security professional and saw the potential in my answer to the 'Where do you see yourself in 5 years?' question. Tip: If you are asked about something that you do not know, say so... lying about it will hurt you worse than the truth ever could.
I landed my job because I was honest and showed an enthusiasm to learn all that I could about things I did not know and sharpen my knowledge of things I did. My boss does not mind me wanting to be a hacker, in fact he brought in all of his CISSP and GSEC material and books for me to read! IMHO, if you do your best and show good ethics and the desire and ability to learn, then you've got it made for whatever path you choose. Plus, you may end up with a company that will pay for all or most of your certifications! :D
Age: 26
Job title: System Administrator
Your answer: I have no certs. I administrate databases, networks and services. And because I like it I do some webdev when I have some spare time.
The way i get sysadmin job? I started working at a helpdesk of a biggest it provider in my country :)
Then i got promotion and i moved into BackOffice. Worked there over an year and started to look for a new job. I've visited three companies and I got my job.
I am 23 years old
Job title: Systems Network Administrator
I currently run the Network for a department of the united states government.
I hold my MCP, MCSA , and 2 MCTS Certifications
I am finishing up my MCITP on server 08 and my CCNA
I started 2.5 years ago on a help desk for about 8 months then was moved to the network team.
I have an associates degree in computer science but more experience and certs then that degree is even worth. My recommendation would be get the beginning certs like A+ or MCP
or now a MCTS on vista (even though vista is garbage)
That will get your foot in the door then you can work on the career level from there
I was reading a comment earlier that some one made and it is 100 percent true.
If you go on a interview and your asked a question and you do not know just say you dont know and express interest in learning. Ive hired several desktop techs and then replaced them shortly after since they told me that they knew things that didnt. There is nothing worse then somone that lies in IT. Just Be HONEST
Good Luck and let me know if you have any questions