There is no question that now is a great time to break into cybersecurity as a career. (ISC)² research shows the shortage of skilled security resources is approaching 3 million globally.
Getting into this line of work can be approached from many different angles. Whether you are an experienced professional looking to make a pivot into security or a college student exploring the field, the right preparation, network and credentials can make all the difference.
We asked three cyber professionals about their journey into security and the advice they would give to up-and-comers in the field. Here’s what they shared.
Certification helps direct your security focus
Michael Banks, a cybersecurity engineer with Amazon Web Services, first got a taste of IT and security in the Army as a reservist.
Banks wanted to continue to pursue a career in security, so he became an Associate of (ISC)² through his journey to become a certified CISSP. Through the Associate designation, aspiring security pros can take any (ISC)² certification exam without the required work experience. Upon passing, they become an Associate of (ISC)² as they work to gain the necessary experience to achieve full certification.
“Going through that process made me more well-rounded in areas I may not have hit before,” Banks said.
Banks also notes the social connections and contacts he’s gained through (ISC)² membership have been invaluable to career development and to helping him navigate some of the tougher aspects of working in security.
“At DefCon there were some activities for (ISC)² members and it was great networking there,” he said. “Over the years you meet other CISSPs and it’s always great to have a conversation. They understand aspects of working in security that others might not.”
Banks says he advises others considering a security career to look at the opportunities through (ISC)² as a chance to explore the right fit for your focus.
“Come at it from a perspective of learning,” he said. “Because security is so broad in nature, it gives you the ability to see a lot of domains of infosec. It helps a lot of people determine what they want to do in infosec.”
Certification is a career accelerator
Rachel Phillips, a cybersecurity analyst based in Seattle, originally started her career in technology management, working on data-driven campaigns in the marketing industry. During that time, she was pursuing a master’s degree in IT and a mentor suggested she consider security for her focus. It turned out to be a great choice.
Phillips then decided to go for her CISSP certification, because she considered it the “gold standard” in security certifications and through that became an Associate of (ISC)² in the process. Another wise choice, as she said it opened many new doors in security.
“With that on my resume, it showed my commitment to the profession and gave me a vocabulary to speak intelligently to others in the field,” Phillips said. “Before I had even graduated, I had my first job offer.”
Now a CISSP, Phillips says she continues to enjoy the benefits of (ISC)² membership. She feels the work she put in to earn the CISSP has advanced her career at a faster pace.
“It helped me earn credibility with peers, colleagues and executives,” she said. “By becoming an Associate, I easily shaved three years or more off in terms of where I am in my career, how I am viewed, how I am paid, and what I have available to me to do next. It is definitely a career accelerator.”
Phillips advises anyone considering a career in information security to consider (ISC)² because membership also offers valuable information about compensation when navigating job offers.
“It’s important to be knowledgeable about what you are worth, and (ISC)² resources helped me realize my market value,” she said.
Certification gives you a global network
Sanchita Tiwari, an information security analyst based in Des Moines, was fascinated by how risk and system vulnerabilities posed a threat to technological advancement. A career in security seemed like the right opportunity to delve deeper and explore that area.
Tiwari decided to pursue the CISSP because it is “one of the coveted certifications in information security, gauging your overall understanding of the domain.”
For Tiwari, becoming an Associate of (ISC)² gave her the ability to critically analyze and understand security-related pain points and challenges in the real world. It also helped her get a foot in the door with employers.
“If you apply for any security job, they all recognize the CISSP,” she said.
One of the most valuable benefits of (ISC)² membership, according to Tiwari, is the access she has to a network of certified professionals all over the globe.
“You can talk to a lot of people in different countries, so your network isn’t just limited to your own city. You can share experiences on (ISC)² forums and get feedback,” she said.
“Or if you’re trying to do something in your organization, you can talk to people who have already done that. It offers networking in an extended fashion and I am learning peers from all over the world. It’s very valuable.”
For more advice from experts in the field, download the (ISC)² Breaking into Cybersecurity eBook.