topic Re: In TERRIBLE NEED of Mentorship in Career Discussions

In TERRIBLE NEED of Mentorship

kcf9889 — Sun, 05 Jan 2020 00:14:53 GMT

Hello Everyone!

I'm in terrible need of career mentorship. I've been trying to break out into the infosec field for over two years now. Unfortunately, I've had zero luck. If anyone is interested in mentorship, please let me know.

I live in the Youngstown, Ohio area but anyone from any area would be wonderful.

Thank you!

Re: In TERRIBLE NEED of Mentorship

dcontesti — Sun, 05 Jan 2020 01:14:34 GMT

Have you considered doing some volunteer work with local organizations, you learn while helping out.

Join a local chapter of (ISC)2 or ISSA or ISACA (I find this the best way to find mentors and sometimes even sponsors).

If there aren't any chapters that you can join, here is some reading that was provided on another channel

https://cybercanon.paloaltonetworks.com/

Good luck on your endeavours.

Diana

Re: In TERRIBLE NEED of Mentorship

Skhonig — Sun, 05 Jan 2020 21:58:41 GMT

I ran into this problem 5 1/2 years ago and I am still seeing this problem. I have heard from many who are trying to get into cybersecurity even though there are "jobs going unfilled".

Not sure what your situation is, but have you considered going abroad? I did that and know of many Americans who have found it much easier finding employment.

Cheers

Re: In TERRIBLE NEED of Mentorship

AppDefects — Mon, 06 Jan 2020 00:30:10 GMT

@kcf9889 wrote:
Hello Everyone!
I'm in terrible need of career mentorship. I've been trying to break out into the infosec field for over two years now. Unfortunately, I've had zero luck. If anyone is interested in mentorship, please let me know.
I live in the Youngstown, Ohio area but anyone from any area would be wonderful.

Thank you!

Tell us about your experience to-date and what your infosec interests are. That will everyone finding a match.

Re: In TERRIBLE NEED of Mentorship

DHerrmann — Mon, 06 Jan 2020 15:29:25 GMT

What's your LinkedIn profile URL? It'd help to take a look at that so that we know where you're currently at.

Re: In TERRIBLE NEED of Mentorship

CISOScott — Mon, 06 Jan 2020 17:32:46 GMT

When looking to breakout in the Infosec field you will need to learn this simple secret to success.

1) Be passionate about it.

2) Learn all you can. Volunteer for jobs that are going undone. When I was coming up in the IT field (IT was my passion) I found lots of security jobs going undone and I asked my bosses if I could do them. Very few of them told me no. This gave me lots of hands on experience to be able to increase my resume status. I learned a lot through trial and error. I set up lots of test networks with old equipment that was lying around. In learning how to setup IT networks I could learn how to better protect them. It also gave me insight into what my proposed security changes might effect. This helps me when dealing with the groups that will be affected by my infosec ideas and plans.

3) Be willing to do extra even if it means not getting paid for it now. I did a lot of extra stuff that was not in my job description that other people were supposed to be doing. Even though I could have denied the extra work and made others do it, I didn't. My pay was experience, not dollars. However that experience turned into lots of dollars later when I was able to apply for better jobs. I have seen too many people turn down a learning experience because they felt their employer was "Abusing them by making them do things without getting paid for it". IF it enhances your skills, take it on happily, even if it doesn't, having a supervisor/manager in your corner doesn't hurt either when applying for internal positions.

4) Pick an area of expertise and try to become very good at it.

5) If given a chance to learn managerial skills by taking on extra duties, do it. If you want to get above worker bee status, you will need to know about management and leadership qualities.

6) Soak up free information. You can search this forum for podcast recommendations. Do it and then listen to them. I like the Paul Security (security weekly) ones because you can learn a lot of the industry jargon by listening to them. Even if it is over your head, keep listening, you will get it eventually.

7) Get certified. It will help level the playing field when competing against others. I was qualified for several jobs just because I held the CISSP. One job I know it was the deciding factor. They had posted it as a job applicant requirement and I was their second choice. Their first choice said he didn't have it and WASN'T going to get it. Since I was a highly qualified second choice and I already had it, they offered me the position.

These are some basic ideas to get you started. Keep returning to these forums to learn more.

Re: In TERRIBLE NEED of Mentorship

DHerrmann — Mon, 06 Jan 2020 18:18:23 GMT

One thing I remind people is that we all need to know exactly how our employer makes a profit (for-profit sector, of course). Once you really understand the business, you can start to determine your employer's risk appetite and start your strategy from there.

For example, what are your employer's biggest perceived risks. From there, see if you can provide services or get an "in" into the teams that address those high priority risks. And - network with people on that team. Also ask them for advice.

Re: In TERRIBLE NEED of Mentorship

kcf9889 — Mon, 06 Jan 2020 20:16:58 GMT

Re: In TERRIBLE NEED of Mentorship

kcf9889 — Mon, 06 Jan 2020 20:09:48 GMT

I've thought about going abroad, but I'm not sure where to even begin with that? I've pretty much given up on this country.

Re: In TERRIBLE NEED of Mentorship

kcf9889 — Mon, 06 Jan 2020 20:11:41 GMT

My experience has been a couple of graduate classes and some random freelance work. My primary interest is actually in digital forensics.

Re: In TERRIBLE NEED of Mentorship

kcf9889 — Mon, 06 Jan 2020 20:15:15 GMT

LinkedIn: https://www.linkedin.com/in/kiley-w-a4ab94b4/

Re: In TERRIBLE NEED of Mentorship

DHerrmann — Tue, 07 Jan 2020 14:14:26 GMT

Kiley - You have a Masters in Communications. I'm guessing you don't want to go for another Masters in something like Information Security, so that leaves us in a place where you probably need a lot of individual training.

InfoSec has many different functions. I'd ask myself what area I want to go into and then train yourself (or pay for training) for the foundational skills needed for that type of job.

Brainstorming here - many InfoSec/Risk Management functions have challenges communicating their goals/issues/problems/successes to leadership or their clients. Perhaps you could blend your communication skills and InfoSec/Risk Management passion into an in-demand service: Helping InfoSec/Risk Management teams/businesses communicate better.

Re: In TERRIBLE NEED of Mentorship

rslade — Tue, 07 Jan 2020 17:53:20 GMT

> Skhonig (Newcomer II) posted a new reply in Career on 01-05-2020 04:58 PM in the

> I ran into this problem 5 1/2 years ago and I am still seeing this problem. I
> have heard from many who are trying to get into cybersecurity even though there
> are "jobs going unfilled".

The "jobs going unfilled" schtick is a lie that we've been seeing reiterated in
security for over 20 years and in other areas of tech for at least 40.

Getting into security takes hard work, and you're going to have to do *extra*
work, beyond what you get paid for, in order to do it. There is no magic bullet.

Volunteer. Go to BSides confs. (If there isn't one in your area, *start* a BSides
conf.) Join local groups. Do research. Study.

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
The whole is more than the sum of its parts.
- Aristotle (384-322 B.C.), Metaphysics
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

Re: In TERRIBLE NEED of Mentorship

rslade — Tue, 07 Jan 2020 19:27:35 GMT

Also check out the CISSPforum ...

Re: In TERRIBLE NEED of Mentorship

CISOScott — Tue, 07 Jan 2020 20:40:41 GMT

@kcf9889 wrote:
My experience has been a couple of graduate classes and some random freelance work. My primary interest is actually in digital forensics.

If you lack a lot of experience in IT then you have picked the hardest specialty to go into with no/little IT experience. Have you done any digital forensics? Is it something you tried and thought it might be something you want to do? It is not as exciting as NCIS and the ilk would make it out to be. To succeed and really enjoy forensics you MUST be detail oriented and enjoy doing mundane, repetitive work with occasional flashes of excitement. In order to be good at forensics you need to know how computers/networks,digital equipment works. It can be exciting if you are trying to track down a criminal or prove their "evil deeds" but it involves a lot of disk copies, evidence tracking, reviewing logs, etc. without making mistakes. Usually the ones with the most experience in forensics tend to be in the law enforcement field. Some ideas for you.