I really enjoyed your column on certifications, and couldn't agree with you more. I'm struggling to find a position in the infosec industry and find myself getting smeared by the alphabet soup kids. I have 10 years in the trenches working in telecommunications, and the internet industry, and have been solidly focused on security for the past 4 years. I do not currently nor have I ever been a certification collector. I never have believed in them. Having managed too many paper CNE's and paper MCSE's in the past I've always valued experience and expertise over certifications.

But what are we supposed to do nowadays to get a job ? I've been searching for a position in Infosec for the past 6 months and have NOTHING to show for it. Aside from 2 call backs, I've had no response to the hundreds of resume's I've sent out.

Currently I'm involved with HIPAA in the healthcare sector. With a solid year of writing model policies, and procedures, studying 17799, and bs7799, working with vendors on case studies, collaborating with magazines to publish articles on security.... Still I cannot find a job.

Everyday I see more and more positions on Monster.com for "Security Professionals" positions where CISSP or GIAC is required.

Do you know of any employment resources for REAL security professionals ?

Grrrrr.




[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/118/16889#16889