topic Re: New CISSP for career direction in Career Discussions

New CISSP for career direction

Ashl — Wed, 06 Dec 2017 14:21:57 GMT

I just passed the exam (a pat on my shoulder! :)) as my career primarily built on application support and maintenance delivery and management, never thought I could make it without relevant experience whatsoever. As there are not many opportunities in Asia yet, where and how to get a job to start this endeavour?

Re: New CISSP for career direction

alex_vk — Thu, 07 Dec 2017 02:17:09 GMT

Hi, there and congratulations on passing the exam!
I can't speak about CISSP opportunities in Asia, however CISSP ,as a requirement, or at least a minimum requirement, is in many job descriptions for Information Security Engineer and higher up into management now these days. US DoD has approved CISSP as a baseline certification at IAT level III

Re: New CISSP for career direction

DaveTheITGuy — Wed, 13 Dec 2017 16:06:45 GMT

Well based on your own admission (quoted at the bottom of this text), I do not think you will actually be awarded the CISSP because you comment you don't have any relevant experience whatsoever. If you don't have the 5 years of experience, the best you could do is be awarded an Associate designation. I'm pretty sure though if you call yourself a CISSP or put yourself out there as one professionally before actually being awarded the designation, you would be violating the Code of Ethics and would get permanently barred from ever being actually called a CISSP.

I might be wrong in my entire interpretation here, but if I am wrong, then I'm disappointed in the ISC2.

Passing the test is but one step in the journey.

@Ashl wrote:
I just passed the exam (a pat on my shoulder! :)) as my career primarily built on application support and maintenance delivery and management, never thought I could make it without relevant experience whatsoever.

Re: New CISSP for career direction

Ashl — Thu, 14 Dec 2017 01:13:11 GMT

I’m well aware. I should labeled myself as Associate. As a new member, I was introduced to this place as trusted community where I can seek guidance or mentorship on how to go abt getting the work experience.

Re: New CISSP for career direction

nagarajan — Tue, 19 Dec 2017 13:19:49 GMT

Hi Ashl,

From your initial post, i understand that you have experience in application support. You may check for application security as it is one such area where you can start looking for jobs. I have met starts ups and found that many of them haven't realised the need for protecting their websites.

If you can build some skills in application security then you can approach startups and offer your assistance if they give you a job or you may offer your services for free so that you get some experience.

Read OWASP, CEH training/skills can boost your changes of grabbing a job.

Cheers,

Raj

Re: New CISSP for career direction

CISOScott — Thu, 28 Dec 2017 15:07:02 GMT

Also remember this: IF the place you are working does not have good security practices, part of your duty as a CISSP is to enlighten them and increase the security posture of where you are. By doing this in the right way, you may be able to create your own career path. I have done this and it has led me to rising to the CISO role, as well as CIO and deputy roles in both CIO and CISO. I looked around for security jobs that were not being done and volunteered to do them, without asking or demanding that I be compensated for doing them. I used the experience I was getting in doing them as my pay. I then had the resume qualities to get those higher paying IT jobs, which I then parlayed into those C-level positions.

A lot of my coworkers had the attitude of "If they are not going to pay me. then I am not going to do it." That attitude kept them from advancing when the new jobs came open. I gained more experience than they did and advanced faster than they did. So look for jobs you can do. Offer to take on new roles as your company allows. Build a home network and practice with free tools that are available online. You are in charge of your career, not your bosses. If you wait for them to train you, then you will advance just as slowly as the rest of your coworkers.

Re: New CISSP for career direction

Caute_cautim — Thu, 28 Dec 2017 20:22:14 GMT

HI, Have put forward a good linkedln profile and self advertised? Security opportunities are rapidly growing in Asia-Pacific. Have you approached organisations, you would like to work for or researched the type of opportunities you are looking to grow your career and experience with? Passing the CISSP is a good positive step forward, but as previous replies have stated, you need to grow your experience. Do you have any particular interests or have you looked to communicating with local security groups with peer groups?

@Ashl wrote:
I just passed the exam (a pat on my shoulder! :)) as my career primarily built on application support and maintenance delivery and management, never thought I could make it without relevant experience whatsoever. As there are not many opportunities in Asia yet, where and how to get a job to start this endeavour?

Re: New CISSP for career direction

Ashl — Fri, 29 Dec 2017 02:13:34 GMT

Thanks for your wise counsel. I’m a big believer of nobody whoever gave their best regretted it. 🙂

Re: New CISSP for career direction

Ashl — Fri, 29 Dec 2017 02:22:18 GMT

I got linkin profile created just a month ago, just not sure how to go abt advertising!
How do I approach organisations? Not so common in Singapore. 🙂

Re: New CISSP for career direction

Caute_cautim — Fri, 29 Dec 2017 06:38:30 GMT

Hi Ash

Suggestion, be bold: https://www.indeed.com.sg/jobs?q=ibm&l=singapore&matchtype=b&network=g&device=c&devicemodel=&creative=33346101581&keyword=&placement=&param1=&param2=&random=13956971810511358798&aceid=&adposition=1t1&gclid=EAIaIQobChMI4b_Vl82u2AIVXgYqCh32jQdfEAAYASAAEgL0YPD_BwE

There is a parameter within Linkedln to indicate to organisations that you are available for a position.

Write an interesting blog, about your experiences passing the CISSP for instance - get yourself noticed, people will soon commence knocking on the door.

Don't for them, get active, and socially aware by looking for interesting posts and show that you are interested.

Re: New CISSP for career direction

Early_Adopter — Mon, 01 Jan 2018 11:59:13 GMT

Singapore is positively infested with Cyber Security Organizations, however they can be skittish, so the best idea is to stalk them from downwind till you are about 20-30 meters away and then charge at them waving a doughnut... 😉

In seriousness there are quite a few places in Singapore to go to get started, here's a few:

https://www.csa.gov.sg/careers/job-opportunities the guys are always on the lookout for people to help with this sort of thing: http://www.straitstimes.com/singapore/cyber-security-agency-to-set-up-training-academy

https://www.isc2chapter.sg/sgp/?page_id=64 Join us!

Conferences - https://www.sans.org/event/secure-singapore-2018 This one is early this year before RSA, Blackhat etc(much smaller than their US counterparts), GovWare can be fun too but that's a way off.

And if none of those are what you are after there is a meet-up for everything:

https://www.meetup.com/DevSecOps-Singapore/

https://www.meetup.com/AWS-Singapore-Security-Meetup/

Because everywhere in Singapore is 30 minutes in a cab(apart from Tuas, which for some reason still seems to be 45 minutes away from Tuas...), meeting people is both pretty easy and important so I'd prioritize that approach above linked-in etc

Lastly @CISOScott is most correct in that you need to work out where you can help out, use that to build up islands of knowledge and then link them in useful ways. By pushing the boundaries of your current role, you can use it to provide you with experience to fuel your journey through cyber security.

Re: New CISSP for career direction

Skhonig — Tue, 02 Jan 2018 02:59:22 GMT

Have you thought about New Zealand?

https://www.wellingtonnz.com/work/looksee-wellington/

Re: New CISSP for career direction

Caute_cautim — Tue, 02 Jan 2018 07:06:24 GMT

This reply is quite amusing to myself. Since I migrated from the UK 18 years ago. to New Zealand and took up residence in Auckland on Waiheke Island. Shortcomings of Wellington, central hub for Government, prone to earthquakes and related damage - most people tend to move out of Central Wellington, if they can rather than live in the capital itself. But happy to provide advice or suggestions to people thinking of moving to New Zealand.

Re: New CISSP for career direction

Bayshob — Sat, 06 Jan 2018 15:02:11 GMT

Congrats. You will surely get a job soon

Re: New CISSP for career direction

nagarajan — Mon, 08 Jan 2018 05:13:32 GMT

Hi Ashl,

In your linkedin profile, change the status to that you are looking for job change.

Mention your skills in the order that you are strong and more confident about. See if you can find a hospital, library, school, or any small organisation where you can find some work as an intern/part time security consultant so that you can show case this in your LinkedIn profile as well as your resume.

It would be great if you can read and learn about cloud services as there is a big demand of people with such skills.

Nagarajan