Started By
Message

re: Any Cyber/Info Sec folks in here?

Posted on 4/17/18 at 11:20 pm to
Posted by FriscoTiger
Frisco, TX
Member since Aug 2005
3488 posts
Posted on 4/17/18 at 11:20 pm to
Lots of entry level cyber security jobs in Dallas. Most important thing is to truly understand the basics and build a really good foundation. That takes some people a year and others 3-5 years. Don't worry about $$$ the first few years just learn everything you can and then your career will take off.
Posted by jcole4lsu
The Kwisatz Haderach
Member since Nov 2007
30922 posts
Posted on 4/18/18 at 8:51 am to
quote:

Lots of entry level cyber security jobs in Dallas

Define "entry level". Because anything that ever hits my inbox wants a damn CISSP.
Posted by ell_13
Member since Apr 2013
85032 posts
Posted on 4/18/18 at 9:19 am to
I have zero certs and have been doing this for 4 years now.
Posted by Centinel
Idaho
Member since Sep 2016
43335 posts
Posted on 4/18/18 at 1:07 pm to
quote:

Define "entry level". Because anything that ever hits my inbox wants a damn CISSP.


That's a HR thing to weed out applications. It also lets me know that company doesn't know shite about cybersecurity.

If a company is wanting a CISSP for an entry level analyst job...you don't want to work at that company.

Posted by jcole4lsu
The Kwisatz Haderach
Member since Nov 2007
30922 posts
Posted on 4/18/18 at 4:34 pm to
Yeah I get that, but its sort of my point. I never see anything that I would consider to be "entry level" in the traditional sense. Its all mid career level jobs that happen to be the lowest level security position - and thus "entry level".

eta: then again I use a salary filter too, maybe entry level sec jobs just pay less than that.
This post was edited on 4/18/18 at 4:37 pm
Posted by Centinel
Idaho
Member since Sep 2016
43335 posts
Posted on 4/18/18 at 4:47 pm to
Well, the problem you run into is that you'll generally only find actual analysts (junior and senior) at very large corporations or cybersecurity service providers/MSSPs like SecureWorks, Mandiant, etc.

A good bit of the jobs you're probably finding are audit/compliance based. Ya, it's still technically cybersecurity, but the only thing they're really doing is reading a standard or regulation (PCI, HIPAA, etc), then working with IT to make sure the standard is being met. Don't get me wrong, it's very important...but not technical analyst work in terms of forensics, IR, threat hunting, etc. that most people think of when you bring up cybersecurity.

The best advice I have for you is to start attending all the cybersecurity conferences you can, and get involved in whatever local cybersecurity group that operates where you live. BSides can be found in just about every major city now, and usually costs little or nothing to attend. Networking is of supreme importance getting your foot in the door as an analyst.
This post was edited on 4/18/18 at 4:49 pm
Posted by doubletap
Prairieville, LA
Member since May 2013
609 posts
Posted on 4/19/18 at 9:02 am to
quote:

And just about every college program is straight up garbage outside of the big boys like Carnegie Mellon, Johns Hopkins, MIT, etc.

Damn...I have a son going to La Tech in the fall and he wants to major in Cyber Engineering.
Posted by gmrkr5
NC
Member since Jul 2009
14891 posts
Posted on 4/19/18 at 10:19 am to
quote:

That's a HR thing to weed out applications. It also lets me know that company doesn't know shite about cybersecurity.

If a company is wanting a CISSP for an entry level analyst job...you don't want to work at that company.


meh i wouldnt go quite that far... HR departments like to think they hold all of the hiring power and they know what certain certifications are common, etc... just becuase a place wants a CISSP doesnt mean it's a bad place to work. i also dont want entry level sec+ noobs applying for architect positions. it does help prevent some of that
Posted by gmrkr5
NC
Member since Jul 2009
14891 posts
Posted on 4/19/18 at 10:22 am to
quote:

Yeah I get that, but its sort of my point. I never see anything that I would consider to be "entry level" in the traditional sense. Its all mid career level jobs that happen to be the lowest level security position - and thus "entry level".

eta: then again I use a salary filter too, maybe entry level sec jobs just pay less than that.


what position titles are you seeing and what is your salary filter?
Posted by jcole4lsu
The Kwisatz Haderach
Member since Nov 2007
30922 posts
Posted on 4/19/18 at 10:55 am to
quote:


what position titles are you seeing and what is your salary filter?

"Cyber Security" "$50,000" is the search results. I see a ton of Security Analyst/Engineer/Specialists titles but none appear to be a Jr position. Typical requirements are either a CISSP or similar cert or 3-5 years experience in infosec (not in general IT).

I would imagine dropping the salary filter would display more results but probably a lot of trash too. Also I'm not willing to take a huge haircut just to jump to infosec.

I should also probably point out I'm VERY passively looking. Market research more than anything, will probably be first of next year before I am in position to change jobs.
Posted by Centinel
Idaho
Member since Sep 2016
43335 posts
Posted on 4/19/18 at 12:01 pm to
quote:

Damn...I have a son going to La Tech in the fall and he wants to major in Cyber Engineering.


I took a look at that program and it's actually not bad. Seems the engineering programs are finally getting their act together.

Basically a good program will do what they seem to be doing...focusing on computer science, computer/electrical engineering, etc.

The important thing is to get a solid understanding of networking and computer systems. Coding ability is a huge plus as well.

Just like I recommended for the other poster, your son needs to start hitting what conferences he's able to. New Orleans, Houston, Austin, Dallas, Little Rock all have yearly BSides conferences that cost little to nothing to attend and usually are on Saturdays. The talks can be great with major industry leaders, but there's also great networking opportunities. Participating in the various Cyber Challenges out there are also a great way to learn and get noticed by sponsoring companies.
Posted by Centinel
Idaho
Member since Sep 2016
43335 posts
Posted on 4/19/18 at 12:03 pm to
quote:

meh i wouldnt go quite that far... HR departments like to think they hold all of the hiring power and they know what certain certifications are common, etc... just becuase a place wants a CISSP doesnt mean it's a bad place to work. i also dont want entry level sec+ noobs applying for architect positions. it does help prevent some of that


Maybe it's just my location then I interviewed for a couple jobs and it became immediately clear they had zero clue what they were looking for. Or had realistic expectations on salary levels for the experience they were wanting.

$50k for someone with 3-5 years experience and a CISSP? C'mon
Posted by jcole4lsu
The Kwisatz Haderach
Member since Nov 2007
30922 posts
Posted on 4/19/18 at 12:59 pm to
quote:

$50k for someone with 3-5 years experience and a CISSP?

r/choosingbeggars
r/recruitinghell
Posted by TigerstuckinMS
Member since Nov 2005
33687 posts
Posted on 4/19/18 at 3:52 pm to
quote:

Cyber security would be an interesting field to dabble in

I have a friend who does security, computer forensics, expert witness, pentesting, hardening, etc.

That dude's been doing this his entire life and some of the things he and his team are capable of are fricking hair-raising just from the level of knowledge they have from playing around with this stuff almost 24/7 for decades.

It's not a "dabble" sort of field.
This post was edited on 4/19/18 at 3:55 pm
Posted by gmrkr5
NC
Member since Jul 2009
14891 posts
Posted on 4/20/18 at 7:55 am to
quote:

"Cyber Security" "$50,000" is the search results. I see a ton of Security Analyst/Engineer/Specialists titles but none appear to be a Jr position. Typical requirements are either a CISSP or similar cert or 3-5 years experience in infosec (not in general IT).


$50k salary in cybersec is LOW...
Posted by gmrkr5
NC
Member since Jul 2009
14891 posts
Posted on 4/20/18 at 7:57 am to
quote:

Maybe it's just my location then I interviewed for a couple jobs and it became immediately clear they had zero clue what they were looking for. Or had realistic expectations on salary levels for the experience they were wanting.



you have to realize that alot of corporations are still building their cybersec departments. in a large amount of cases they dont know exactly what they are looking for. it's your job to get them to pay you and show them
Posted by Centinel
Idaho
Member since Sep 2016
43335 posts
Posted on 4/20/18 at 8:27 am to
quote:

you have to realize that alot of corporations are still building their cybersec departments. in a large amount of cases they dont know exactly what they are looking for. it's your job to get them to pay you and show them


I did

To be honest though, I lucked up and found an organization with a CIO who understood the importance of cybersecurity. Ya, I could probably get paid a bit more if I shopped around more, but the culture here drew me in more than anything. That and the almost complete freedom I have to run things the way I want.
Posted by Centinel
Idaho
Member since Sep 2016
43335 posts
Posted on 4/20/18 at 8:29 am to
quote:

$50k salary in cybersec is LOW...


It's pretty much what most places are offering around here as well. You have to go down to Charleston, over to Augusta, or up to Charlotte to see more reasonable offers.

Which is of course why there's very little talent here and they can't fill positions.

Posted by ell_13
Member since Apr 2013
85032 posts
Posted on 4/20/18 at 8:50 am to
Starting around south LA is 70k. Lots of energy companies (mostly power). However, most graduates we pull from aren't specialized. Companies will hire anyone with a computer engineering type degree with the skills to maintain and admin systems already in place. And with constantly changing regs, they learn on the fly pretty quickly.
Posted by jcole4lsu
The Kwisatz Haderach
Member since Nov 2007
30922 posts
Posted on 4/20/18 at 4:37 pm to
This is the kind of bullshite I'm talking about

Security Operations Analyst -SOC Analyst I
Compensation $15 to $20 Hourly

Description (basically what I'd expect out of a T1 SOC role)

Requirements
5+ years of experience in a Technical Support role
Working knowledge of security fundamentals, such as vulnerability scanning, intrusion detection, and SIEM concepts
Knowledge of compliances such as PCI and HIPAA
Bachelor’s degree in Computer Science, MIS, CIS, or related field
One of the following certifications: Certified Ethical hacker, CISSP, CISA, CISM or other industry accepted program (preferred)

5 years experience + direct knowledge of compliance + a god damn fricking CISSP? For $20/hr?


eta: apparently straight hourly - no 401k or healthcare, either.

This post was edited on 4/20/18 at 4:39 pm
first pageprev pagePage 2 of 3Next pagelast page

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on Twitter, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookTwitterInstagram