Breaking into InfoSec? Where do I Start?BACK TO BASICS

DEBRA TAYLOR SECRETARY@RALEIGHISSA.ORG @CYBERSPADE

Imagineer Your InfoSec Career

Ocean of Information

Jobs

• Computer Crime Investigator / Forensics Expert• System, Network, and/or Web Penetration Tester• Forensic Analyst• Incident Responder• Security Analyst, Engineer, or Architect• Malware Analyst• Network Security Engineer• CISO/ISO or Director of Security• Security Operations Center AnalystSource: SANS: The 20 Coolest Jobs in Information Security

Traditional Approach•Universities and Community Colleges• Campbell University•Duke University• ECPI• ITT Tech•NC Community College System•NC State•UNC

Certification Centered •Classroom Based•Global Knowledge

•New Horizons

•TechSkills

•Certification Searchwww.dice.com

www.monster.com

Career Imagineering

• Start at Job Description• Gaps?• What are the No Cost or Low Cost Training Options?

Networking

• Start Here… at the Raleigh ISSA Meetings• Connect with People in the Field• Mentors

• Warm• LinkedIn

• Soft• Twitter

• Tylerslab.com

PodCasts

• SANS Internet Storm Center• SecurityNow• Tenable (Nessus)• Chet Chat: Sophos• Paul’s Security Weekly• The Southern Fried Security Podcast

Find OpenSource & Commercial Tools

• Wireshark• Snort• Splunk• Security Onion• Suricata IDS/IPS

Programming

• YouTube – Free• Coursera - Free• Code Academy – Free• Code - Free• Udemy – Low Cost • Python (Google), Ruby on Rails (Metasploit), Perl Scripting

(Windows)• Java – oh Java, http://java-0day.com/

Other Options

• InfoSec Conferences• SecDocs.org• Hackathons

Most Importantly

• Stay Curious• Ask Questions• Be Involved