ZyyzYzzy
RIP USA
- 25,295
- 48,789
IT/Software career thread: Invert binary trees for dollars.
- Thread starter Traak
- Start date
- 7,879
- 507
Well, Linux whatever, MS ain't going anywhere and since most large places are windows focused for endpoints, you won't have a problem.
But having security as a weakpoint? C'mon man. Do one of the free online trainings for Security+ equivalency to learn it. Most of it is common sense, some of it is "oddball" that you probably won't ever need to learn ("What's the correct heigh of a fence designed to keep intruders out?" fuck that noise, I work on servers).
Big_w_powah
Trakanon Raider
- 1,887
- 750
I dunno. Everywhere that I interviewed last year was running tons of shit on RHEL/Centos for their backend. Having a firm grip on the Linux environment will open up a ton of doors for you, especially if you know Windows enough to be dangerous.
Set up a homelab and browse r/homelab on reddit for help with that.
I did that a couple months ago and you are browsing a forum now based on a lot of the things I learned and fine tuned.
Big_w_powah
Trakanon Raider
- 1,887
- 750
Big_w_powah
Trakanon Raider
- 1,887
- 750
You're speaking of Linux, or Security? Cause for the homelab to have benefit for security I've gotta have a way to test if it worked.
Both, start off with just linux and then make a VM for pen testing with that has metasploit or whatever else. Sure it is script kiddie stuff but you will learn with it.
- 2
- 7,879
- 507
Super dangerous?
He's right. Fuck around with it until you're comfortable. Then get a Security+ or CISSP. The "CISSP" experience requirements are in 'domains' that you should have experience with just from doing normal computer work (some domains, not all...).
Big_w_powah
Trakanon Raider
- 1,887
- 750
Didnt even think of VMing up a pentest box. I guess I just need to screw around with Linux first.
Big_w_powah
Trakanon Raider
- 1,887
- 750
Big_w_powah
Trakanon Raider
- 1,887
- 750
Yeah, re looking at the domains I'd consider myself to have at least 5 years experience in at least two of those.
- 7,879
- 507
Go to one of the local security meetings for a few months, and after that see if someone in there will vouch for you. Or check if other people in your company have one.
Hell, you don't even need to have a someone with a cert endorse you, you can detail it all out: https://www.isc2.org/uploadedfiles/...ant-endorsement-help-form-universal-final.pdf
Tinycoffin
Trakanon Raider
- 241
- 527
If your looking to go into management then do CISSP, It's the least hands on focused of any security cert out there. HR drones love it but most people that have come up through the ranks have little respect for it.
If your'e looking to get into red team / blue team work go with a SANs cert or OSCP
If your'e looking to get into red team / blue team work go with a SANs cert or OSCP
- 1
Big_w_powah
Trakanon Raider
- 1,887
- 750
I'm just looking to get paid a decent wage to sysadmin shit..I've got no interest in being a gray hat pen tester or anti-cyber-icecream-terrorism shit. I just wanna come into work, fuck with day to day tasks, and work on some projects, while collecting more than a piddance.
That's sort of the problem with the SysAdm title, in general. In my experience, you're expected to have at least medium level knowledge across such a broad range of subject matter (Windows, Linux, SAN/NAS, SQL, Layer2/3, Firewalls, etc, etc) and the pay is rarely compensatory for these skills.
- 2
Big_w_powah
Trakanon Raider
- 1,887
- 750
I'm using sysadmin as a very broad term, as you pointed out. I don't need the sysadmin title, however. I'd be glad to cruise along in whatever title they want to give me, doing whatever IT related (outside of what I outlined above--F that S) in whatever specialized discipline they want me in. Just right now I'm very much a generalist for the most part, with an amazing ability to troubleshoot (to toot my own horn), so maybe I'm more suited to a break/fix kinda role...Break/Fix just pays like shit.
To clarify my focus on pay: I just want to make a good, dont have to worry about shit getting paid pay. My 40k atm doesn't quite cut that, but its close. I have to budget a bit tighter than I'd like.
To clarify my focus on pay: I just want to make a good, dont have to worry about shit getting paid pay. My 40k atm doesn't quite cut that, but its close. I have to budget a bit tighter than I'd like.
Good example -
SA gig - Pays 80k - Requirements
DBA - Pays up to 125k - Requirements
SA gig - Pays 80k - Requirements
Responsibilities:
* Manages and maintains all corporate servers running AD, DNS, DHCP with little or no supervision
* Reviews and architects Active Directory design improvements
* Maintains/updates: Exchange 2010, Lync 2010 and SharePoint 2010
* Configures and maintains SAN solution
* Manages Patch management processes
REQUIREMENTS:
* Must have Bachelor's degree
* Understands networking technologies and infrastructure
* Understands Windows infrastructure (AD, DNS, GPO, etc)
* Microsoft technical design and implementation experience
* Exchange 2003/2010
* Lync 2010
* SharePoint 2007/2010
* MS HyperV
* Excellent fundamental problem solving and analytical skills
* Able to maintain a high level of confidentiality
* Excellent oral and written communication skills
* PowerShell Scripting
* Experience with clustering
* Manages and maintains all corporate servers running AD, DNS, DHCP with little or no supervision
* Reviews and architects Active Directory design improvements
* Maintains/updates: Exchange 2010, Lync 2010 and SharePoint 2010
* Configures and maintains SAN solution
* Manages Patch management processes
REQUIREMENTS:
* Must have Bachelor's degree
* Understands networking technologies and infrastructure
* Understands Windows infrastructure (AD, DNS, GPO, etc)
* Microsoft technical design and implementation experience
* Exchange 2003/2010
* Lync 2010
* SharePoint 2007/2010
* MS HyperV
* Excellent fundamental problem solving and analytical skills
* Able to maintain a high level of confidentiality
* Excellent oral and written communication skills
* PowerShell Scripting
* Experience with clustering
DBA - Pays up to 125k - Requirements
*Provide technical support for warehouse management systems (WMS) including user support and IT system software configuration/maintenance.
*Administration of Microsoft SQL database structure
*Develop and maintain WMS software functionality
*Facilitate problem/issue resolution and business process analysis/ improvements.
*Security and user maintenance for SQL software.
*Highjump software experience is a plus, but not mandatory.
*Education/Certification requirements
BS in MIS, Computer Science or equivalent is required
Core Competencies
*Microsoft SQL database architecture and support
*Knowledge of Warehouse Management Systems
*Understanding of systems development life cycle (SDLC)
*Microsoft office proficient (Work, Excel, etc.)
*Administration of Microsoft SQL database structure
*Develop and maintain WMS software functionality
*Facilitate problem/issue resolution and business process analysis/ improvements.
*Security and user maintenance for SQL software.
*Highjump software experience is a plus, but not mandatory.
*Education/Certification requirements
BS in MIS, Computer Science or equivalent is required
Core Competencies
*Microsoft SQL database architecture and support
*Knowledge of Warehouse Management Systems
*Understanding of systems development life cycle (SDLC)
*Microsoft office proficient (Work, Excel, etc.)
Big_w_powah
Trakanon Raider
- 1,887
- 750
Daelos
Guarding the guardians
- 219
- 58
Starting a new job on Monday.
I lucked into infosec some 13 years ago when I started my career: I have a degree in CompSci that was very much a Software Engineering-degree, but graduated together with the bubble bursting and there were no coding jobs to be found for months. So I got desperate, and applied for a job in something they called a sock. Which turned out to be a SOC, and started my career on what turned out to be a very useful trajectory.
Some years as IDS/firewall admin, security architecture design, governance/risk/compliance and later security monitoring consultancy later, I'm about to make the next jump.
Since I started my career I've been with small consultancies (30-100 employees), and on Monday I start as an Expert InfoSec Advisor for the biggest bank in Norway. So, it's time to navigate the political side of business as well as just making do with my technical/subject matter knowledge. And I'm more than a bit apprehensive - this is one area where I'll probably discover that I suck. So; learning curve is going to be steep and interesting.
I can't wait, though. Never looked this much forward to starting a new job.
I lucked into infosec some 13 years ago when I started my career: I have a degree in CompSci that was very much a Software Engineering-degree, but graduated together with the bubble bursting and there were no coding jobs to be found for months. So I got desperate, and applied for a job in something they called a sock. Which turned out to be a SOC, and started my career on what turned out to be a very useful trajectory.
Some years as IDS/firewall admin, security architecture design, governance/risk/compliance and later security monitoring consultancy later, I'm about to make the next jump.
Since I started my career I've been with small consultancies (30-100 employees), and on Monday I start as an Expert InfoSec Advisor for the biggest bank in Norway. So, it's time to navigate the political side of business as well as just making do with my technical/subject matter knowledge. And I'm more than a bit apprehensive - this is one area where I'll probably discover that I suck. So; learning curve is going to be steep and interesting.
I can't wait, though. Never looked this much forward to starting a new job.
- 3