This document provides an overview of options for breaking into an information security career. It outlines common information security jobs, traditional education paths through universities and certification programs, and low-cost training options through networking, podcasts, open-source tools, programming tutorials, conferences, and documentation sites. The key advice is to stay curious, ask questions, and get involved in the information security community.

1. Breaking into InfoSec?
Where do I Start?
BACK TO BASICS
DEBRA TAYLOR SECRETARY@RALEIGHISSA.ORG @CYBERSPADE

2. Imagineer Your InfoSec Career

3. Ocean of Information

4. Jobs
• Computer Crime Investigator / Forensics Expert
• System, Network, and/or Web Penetration Tester
• Forensic Analyst
• Incident Responder
• Security Analyst, Engineer, or Architect
• Malware Analyst
• Network Security Engineer
• CISO/ISO or Director of Security
• Security Operations Center Analyst
Source: SANS: The 20 Coolest Jobs in Information Security

5. Traditional Approach
•Universities and Community
Colleges
• Campbell University
• Duke University
• ECPI
• ITT Tech
• NC Community College System
• NC State
• UNC

6. Certification Centered
•Classroom Based
•Global Knowledge
•New Horizons
•TechSkills
•Certification Search
www.dice.com
www.monster.com

7. Career Imagineering
• Start at Job Description
• Gaps?
• What are the No Cost or Low Cost Training Options?

8. Networking
• Start Here… at the Raleigh ISSA Meetings
• Connect with People in the Field
• Mentors
• Warm
• LinkedIn
• Soft
• Twitter
• Tylerslab.com

9. PodCasts
• SANS Internet Storm Center
• SecurityNow
• Tenable (Nessus)
• Chet Chat: Sophos
• Paul’s Security Weekly
• The Southern Fried Security Podcast

10. Find OpenSource & Commercial Tools
• Wireshark
• Snort
• Splunk
• Security Onion
• Suricata IDS/IPS

11. Programming
• YouTube – Free
• Coursera - Free
• Code Academy – Free
• Code - Free
• Udemy – Low Cost
• Python (Google), Ruby on Rails (Metasploit), Perl Scripting
(Windows)
• Java – oh Java, http://java-0day.com/

12. Other Options
• InfoSec Conferences
• SecDocs.org
• Hackathons

13. Most Importantly
• Stay Curious
• Ask Questions
• Be Involved