We're #hiring someone to support the overall management and maintenance of DTMO's IT infrastructure and cyber security portfolio. If you have experience in IT project management, applications/network support, privacy, and cybersecurity, apply to join our team! https://lnkd.in/dcWYnsc4 #DoDCareers #USAJobs
Defense Travel Management Office’s Post
More Relevant Posts
-
Ira is spot on here. Entry level Infosec/Cyber is almost always journeyman level (or higher) in at least one other field. When I was a sysadmin, we said that we had to know everyone else's job (dev, dba, network, storage, ops, etc), and speak their language, because we were the glue between them. When I eventually moved into infosec, I had to learn even more jobs and languages (legal, privacy, compliance, governance, vendor and client risk, assurance, insurance, etc). There are many disciplines within infosec/cyber, some technical (what does that even mean?), some not. It is complex and it requires diverse skills, flexible thinking, and good instincts (trained by experience). There are some "entry level" positions, but to quote Inigo Montoya from The Princess Bride, "That word you keep using. I do not think it means what you think it does". Oh, and one thing about the picture, systems should come before networking.
Award winning CISO, top-rated keynote speaker, bestselling author, but really just trying to leave the world more secure than how I found it. Feel free to Connect instead of just Follow.
The most harmful gatekeepers in #cybersecurity are those who are the first to scream gatekeeping. They tell people how there should be entry level positions for all. They create faux outrage of requirements for knowledge, skills, and abilities for cybersecurity positions. Yet there are entry level cybersecurity positions widely available. Entry level cybersecurity positions include programming, project management, networking, finance, law, software testing, configuration management, auditing, etc. While there are a few entry level roles that are specific to cybersecurity, the real entry level positions are adjacent to cybersecurity. I always see people whiny about how are they going to get experience if nobody will give them a job first. The reality is that there are many jobs to provide the experience, even if not direct. Being a systems administrator for a company is gives people experience on the systems they need, and there are countless cybersecurity responsibilities in systems administration. I see many influencers proudly state how they don't know how to program, so you don't have to. Good for them, but the ignorance is willful and there countless free resources to learn programming. Likewise, programming is fundamental to countless cybersecurity roles, and feel free to lock yourselves out of a role, so you can be proud of your own willful ignorance. I see people talk about non-technical positions, which are sorely needed. Large cybersecurity programs require dozens of project managers. But if you are looking for a project manager role in a cybersecurity program, without having experience with the organization's project management process, you are not qualified. So if you want to self-gatekeep, believe that only cybersecurity specific roles are going to prepare you for cybersecurity. Yes, there are a few entry level cybersecurity specific roles out there, but they are rare. Again though, there are countless other entry level roles out there that even better prepare you for real cybersecurity careers. And frankly, you will likely be even better than those people who went straight into cybersecurity. And here's a secret that those "Security Influencers" will not tell you: They almost always started their careers how I describe. Unfortunately, that won't get them the faux outrage and sell their boot camps, will it?
-
-
Field CTO at Splunk, Cyber Strategist, Solutions Architect, and Cyber Security Evangelist
Ira Winkler you are so right with your assessment. I mentor a huge amount of people (have a passion for helping Vets and the next generation get into cybersecurity) but many of them are looking for Shortcuts to Cyber Security. I keep telling them working and understanding the foundational concepts of the Enterprise is key. To defend something you need to know how it works. Understanding the "path of the packet" is key to modern cybersecurity goals and Threat Landscape. Don't get me wrong I have met some amazing folks who have done CTFs and done well but that is still not blue team and yes they have the skills but not the understanding of the ecosystem. I think universities feed these lies to the students saying "get a cybersecurity degree and you to can make it in cybersecurity" but that is learning to learn, Cybersecurity is an evolving threat landscape so you have to "Learn to do". That means starting with the foundational and yes working in Network and IT OPs to truly understand how things work. The best blue teamers are those who have spent time in Infrastructure first. David Ginn is a great example of a CISO who started in infrastructure and tells his folks to start back on foundational concepts first then go advanced. There are no shortcuts in life and no shortcuts in cybersecurity. And you are right again those who feel they are the gatekeepers of knowledge which is total B$@#$ In the modern threat landscape we cannot afford to be the holders of knowledge but endeavor and challenge ourselves to pass on our knowledge to the next generation. EGO is the one thing that is more harmful than Ransdomeware. #DEFCON was built on the premise of passing on knowledge. Cybersecurity is the one craft that will ever evolve and will continue to challenge those in the craft for years to come. (well until Skynet comes along and kills us all but hey you will still need cyberwarriors to defend against our Evil AI overlords. LOL) Thanks for sharing brother and you are spot on. #splunk, #cybersecurity Jeff Buss #RSA #Blackhat
Award winning CISO, top-rated keynote speaker, bestselling author, but really just trying to leave the world more secure than how I found it. Feel free to Connect instead of just Follow.
The most harmful gatekeepers in #cybersecurity are those who are the first to scream gatekeeping. They tell people how there should be entry level positions for all. They create faux outrage of requirements for knowledge, skills, and abilities for cybersecurity positions. Yet there are entry level cybersecurity positions widely available. Entry level cybersecurity positions include programming, project management, networking, finance, law, software testing, configuration management, auditing, etc. While there are a few entry level roles that are specific to cybersecurity, the real entry level positions are adjacent to cybersecurity. I always see people whiny about how are they going to get experience if nobody will give them a job first. The reality is that there are many jobs to provide the experience, even if not direct. Being a systems administrator for a company is gives people experience on the systems they need, and there are countless cybersecurity responsibilities in systems administration. I see many influencers proudly state how they don't know how to program, so you don't have to. Good for them, but the ignorance is willful and there countless free resources to learn programming. Likewise, programming is fundamental to countless cybersecurity roles, and feel free to lock yourselves out of a role, so you can be proud of your own willful ignorance. I see people talk about non-technical positions, which are sorely needed. Large cybersecurity programs require dozens of project managers. But if you are looking for a project manager role in a cybersecurity program, without having experience with the organization's project management process, you are not qualified. So if you want to self-gatekeep, believe that only cybersecurity specific roles are going to prepare you for cybersecurity. Yes, there are a few entry level cybersecurity specific roles out there, but they are rare. Again though, there are countless other entry level roles out there that even better prepare you for real cybersecurity careers. And frankly, you will likely be even better than those people who went straight into cybersecurity. And here's a secret that those "Security Influencers" will not tell you: They almost always started their careers how I describe. Unfortunately, that won't get them the faux outrage and sell their boot camps, will it?
-
-
Orchestrating Cybersecurity Excellence with Passion and Precision | CISA | CRISC | ISO 42K LI & LA | ISO 27K LA | 🤝🏻21K+ |
Taking shortcuts in a cybersecurity career, as well as in general life, can have detrimental effects on professional advancement and personal growth. In the cybersecurity field, opting for shortcuts such as neglecting to follow established security protocols or failing to conduct thorough assessments can lead to vulnerabilities in systems, potentially resulting in data breaches or network compromises. These shortcuts not only jeopardize the security of organizations but also tarnish the reputation and credibility of cybersecurity professionals. In the long run, such practices can impede career progression and limit opportunities for skill development and advancement. Similarly, in personal life, relying on shortcuts may lead to missed opportunities for learning and self-improvement, hindering both professional and personal development. Emphasizing diligence, integrity, and adherence to best practices is crucial for success in a cybersecurity career and in life in general.
Award winning CISO, top-rated keynote speaker, bestselling author, but really just trying to leave the world more secure than how I found it. Feel free to Connect instead of just Follow.
The most harmful gatekeepers in #cybersecurity are those who are the first to scream gatekeeping. They tell people how there should be entry level positions for all. They create faux outrage of requirements for knowledge, skills, and abilities for cybersecurity positions. Yet there are entry level cybersecurity positions widely available. Entry level cybersecurity positions include programming, project management, networking, finance, law, software testing, configuration management, auditing, etc. While there are a few entry level roles that are specific to cybersecurity, the real entry level positions are adjacent to cybersecurity. I always see people whiny about how are they going to get experience if nobody will give them a job first. The reality is that there are many jobs to provide the experience, even if not direct. Being a systems administrator for a company is gives people experience on the systems they need, and there are countless cybersecurity responsibilities in systems administration. I see many influencers proudly state how they don't know how to program, so you don't have to. Good for them, but the ignorance is willful and there countless free resources to learn programming. Likewise, programming is fundamental to countless cybersecurity roles, and feel free to lock yourselves out of a role, so you can be proud of your own willful ignorance. I see people talk about non-technical positions, which are sorely needed. Large cybersecurity programs require dozens of project managers. But if you are looking for a project manager role in a cybersecurity program, without having experience with the organization's project management process, you are not qualified. So if you want to self-gatekeep, believe that only cybersecurity specific roles are going to prepare you for cybersecurity. Yes, there are a few entry level cybersecurity specific roles out there, but they are rare. Again though, there are countless other entry level roles out there that even better prepare you for real cybersecurity careers. And frankly, you will likely be even better than those people who went straight into cybersecurity. And here's a secret that those "Security Influencers" will not tell you: They almost always started their careers how I describe. Unfortunately, that won't get them the faux outrage and sell their boot camps, will it?
-
-
Helping telcos save over 60% of the burden on their #TelecomsSecurityAct journey - the expert guide you need to minimise the pain!
The reality is that #Cyber is rapidly becoming viewed as a get rich quick career, but there is a great deal of benefit to coming from another part of the business. The most important thing is to have a Hacker mindset, and to understand the nuance of what that term means.
Award winning CISO, top-rated keynote speaker, bestselling author, but really just trying to leave the world more secure than how I found it. Feel free to Connect instead of just Follow.
The most harmful gatekeepers in #cybersecurity are those who are the first to scream gatekeeping. They tell people how there should be entry level positions for all. They create faux outrage of requirements for knowledge, skills, and abilities for cybersecurity positions. Yet there are entry level cybersecurity positions widely available. Entry level cybersecurity positions include programming, project management, networking, finance, law, software testing, configuration management, auditing, etc. While there are a few entry level roles that are specific to cybersecurity, the real entry level positions are adjacent to cybersecurity. I always see people whiny about how are they going to get experience if nobody will give them a job first. The reality is that there are many jobs to provide the experience, even if not direct. Being a systems administrator for a company is gives people experience on the systems they need, and there are countless cybersecurity responsibilities in systems administration. I see many influencers proudly state how they don't know how to program, so you don't have to. Good for them, but the ignorance is willful and there countless free resources to learn programming. Likewise, programming is fundamental to countless cybersecurity roles, and feel free to lock yourselves out of a role, so you can be proud of your own willful ignorance. I see people talk about non-technical positions, which are sorely needed. Large cybersecurity programs require dozens of project managers. But if you are looking for a project manager role in a cybersecurity program, without having experience with the organization's project management process, you are not qualified. So if you want to self-gatekeep, believe that only cybersecurity specific roles are going to prepare you for cybersecurity. Yes, there are a few entry level cybersecurity specific roles out there, but they are rare. Again though, there are countless other entry level roles out there that even better prepare you for real cybersecurity careers. And frankly, you will likely be even better than those people who went straight into cybersecurity. And here's a secret that those "Security Influencers" will not tell you: They almost always started their careers how I describe. Unfortunately, that won't get them the faux outrage and sell their boot camps, will it?
-
-
There is a lot of truth in what Ira is saying. While it is certainly possible to succeed in cybersecurity with only the most basic of computer skills it is highly unlikely and very limiting. As I talk about in my blog https://lnkd.in/etFkTxwS the cybersecurity field is very vast and different areas requires different level of technical expertise. Set yourself up for success get a solid foundation before trying to break into cybersecurity field. The first step in that is figuring out which part of cybersecurity interest you, more on this in the blog I mentioned above. There is no single path into cybersecurity, so find the and the destination that works best for you.
Award winning CISO, top-rated keynote speaker, bestselling author, but really just trying to leave the world more secure than how I found it. Feel free to Connect instead of just Follow.
The most harmful gatekeepers in #cybersecurity are those who are the first to scream gatekeeping. They tell people how there should be entry level positions for all. They create faux outrage of requirements for knowledge, skills, and abilities for cybersecurity positions. Yet there are entry level cybersecurity positions widely available. Entry level cybersecurity positions include programming, project management, networking, finance, law, software testing, configuration management, auditing, etc. While there are a few entry level roles that are specific to cybersecurity, the real entry level positions are adjacent to cybersecurity. I always see people whiny about how are they going to get experience if nobody will give them a job first. The reality is that there are many jobs to provide the experience, even if not direct. Being a systems administrator for a company is gives people experience on the systems they need, and there are countless cybersecurity responsibilities in systems administration. I see many influencers proudly state how they don't know how to program, so you don't have to. Good for them, but the ignorance is willful and there countless free resources to learn programming. Likewise, programming is fundamental to countless cybersecurity roles, and feel free to lock yourselves out of a role, so you can be proud of your own willful ignorance. I see people talk about non-technical positions, which are sorely needed. Large cybersecurity programs require dozens of project managers. But if you are looking for a project manager role in a cybersecurity program, without having experience with the organization's project management process, you are not qualified. So if you want to self-gatekeep, believe that only cybersecurity specific roles are going to prepare you for cybersecurity. Yes, there are a few entry level cybersecurity specific roles out there, but they are rare. Again though, there are countless other entry level roles out there that even better prepare you for real cybersecurity careers. And frankly, you will likely be even better than those people who went straight into cybersecurity. And here's a secret that those "Security Influencers" will not tell you: They almost always started their careers how I describe. Unfortunately, that won't get them the faux outrage and sell their boot camps, will it?
-
-
Technology Solutions Consultant | Cybersecurity Professional | SANS Security Awareness Practitioner | AWS Cloud Certified | Azure Cloud Certified | LSSWB
Always good to start from the basics.
Award winning CISO, top-rated keynote speaker, bestselling author, but really just trying to leave the world more secure than how I found it. Feel free to Connect instead of just Follow.
The most harmful gatekeepers in #cybersecurity are those who are the first to scream gatekeeping. They tell people how there should be entry level positions for all. They create faux outrage of requirements for knowledge, skills, and abilities for cybersecurity positions. Yet there are entry level cybersecurity positions widely available. Entry level cybersecurity positions include programming, project management, networking, finance, law, software testing, configuration management, auditing, etc. While there are a few entry level roles that are specific to cybersecurity, the real entry level positions are adjacent to cybersecurity. I always see people whiny about how are they going to get experience if nobody will give them a job first. The reality is that there are many jobs to provide the experience, even if not direct. Being a systems administrator for a company is gives people experience on the systems they need, and there are countless cybersecurity responsibilities in systems administration. I see many influencers proudly state how they don't know how to program, so you don't have to. Good for them, but the ignorance is willful and there countless free resources to learn programming. Likewise, programming is fundamental to countless cybersecurity roles, and feel free to lock yourselves out of a role, so you can be proud of your own willful ignorance. I see people talk about non-technical positions, which are sorely needed. Large cybersecurity programs require dozens of project managers. But if you are looking for a project manager role in a cybersecurity program, without having experience with the organization's project management process, you are not qualified. So if you want to self-gatekeep, believe that only cybersecurity specific roles are going to prepare you for cybersecurity. Yes, there are a few entry level cybersecurity specific roles out there, but they are rare. Again though, there are countless other entry level roles out there that even better prepare you for real cybersecurity careers. And frankly, you will likely be even better than those people who went straight into cybersecurity. And here's a secret that those "Security Influencers" will not tell you: They almost always started their careers how I describe. Unfortunately, that won't get them the faux outrage and sell their boot camps, will it?
-
-
Award winning CISO, top-rated keynote speaker, bestselling author, but really just trying to leave the world more secure than how I found it. Feel free to Connect instead of just Follow.
The most harmful gatekeepers in #cybersecurity are those who are the first to scream gatekeeping. They tell people how there should be entry level positions for all. They create faux outrage of requirements for knowledge, skills, and abilities for cybersecurity positions. Yet there are entry level cybersecurity positions widely available. Entry level cybersecurity positions include programming, project management, networking, finance, law, software testing, configuration management, auditing, etc. While there are a few entry level roles that are specific to cybersecurity, the real entry level positions are adjacent to cybersecurity. I always see people whiny about how are they going to get experience if nobody will give them a job first. The reality is that there are many jobs to provide the experience, even if not direct. Being a systems administrator for a company is gives people experience on the systems they need, and there are countless cybersecurity responsibilities in systems administration. I see many influencers proudly state how they don't know how to program, so you don't have to. Good for them, but the ignorance is willful and there countless free resources to learn programming. Likewise, programming is fundamental to countless cybersecurity roles, and feel free to lock yourselves out of a role, so you can be proud of your own willful ignorance. I see people talk about non-technical positions, which are sorely needed. Large cybersecurity programs require dozens of project managers. But if you are looking for a project manager role in a cybersecurity program, without having experience with the organization's project management process, you are not qualified. So if you want to self-gatekeep, believe that only cybersecurity specific roles are going to prepare you for cybersecurity. Yes, there are a few entry level cybersecurity specific roles out there, but they are rare. Again though, there are countless other entry level roles out there that even better prepare you for real cybersecurity careers. And frankly, you will likely be even better than those people who went straight into cybersecurity. And here's a secret that those "Security Influencers" will not tell you: They almost always started their careers how I describe. Unfortunately, that won't get them the faux outrage and sell their boot camps, will it?
-
-
What an insightful analogy, Ira Winkler! While technical skills are crucial, strong project management is the backbone of any successful cybersecurity program. But here's the catch: landing a project manager role requires specific industry knowledge alongside project management expertise. That's where our partnership with DVMS Institute, comes in. Our cybersecurity courses equip you with the technical understanding needed to excel in a cybersecurity project management role. IIL and DVMS Institute can help you fill the gap and position yourself for a successful career in cybersecurity project management. Check out our website to learn more about our Cybersecurity course offerings today! https://lnkd.in/e_TP28_a #cybersecurity #cybersecurityawareness
Award winning CISO, top-rated keynote speaker, bestselling author, but really just trying to leave the world more secure than how I found it. Feel free to Connect instead of just Follow.
The most harmful gatekeepers in #cybersecurity are those who are the first to scream gatekeeping. They tell people how there should be entry level positions for all. They create faux outrage of requirements for knowledge, skills, and abilities for cybersecurity positions. Yet there are entry level cybersecurity positions widely available. Entry level cybersecurity positions include programming, project management, networking, finance, law, software testing, configuration management, auditing, etc. While there are a few entry level roles that are specific to cybersecurity, the real entry level positions are adjacent to cybersecurity. I always see people whiny about how are they going to get experience if nobody will give them a job first. The reality is that there are many jobs to provide the experience, even if not direct. Being a systems administrator for a company is gives people experience on the systems they need, and there are countless cybersecurity responsibilities in systems administration. I see many influencers proudly state how they don't know how to program, so you don't have to. Good for them, but the ignorance is willful and there countless free resources to learn programming. Likewise, programming is fundamental to countless cybersecurity roles, and feel free to lock yourselves out of a role, so you can be proud of your own willful ignorance. I see people talk about non-technical positions, which are sorely needed. Large cybersecurity programs require dozens of project managers. But if you are looking for a project manager role in a cybersecurity program, without having experience with the organization's project management process, you are not qualified. So if you want to self-gatekeep, believe that only cybersecurity specific roles are going to prepare you for cybersecurity. Yes, there are a few entry level cybersecurity specific roles out there, but they are rare. Again though, there are countless other entry level roles out there that even better prepare you for real cybersecurity careers. And frankly, you will likely be even better than those people who went straight into cybersecurity. And here's a secret that those "Security Influencers" will not tell you: They almost always started their careers how I describe. Unfortunately, that won't get them the faux outrage and sell their boot camps, will it?
-
-
Too often I hear about people asking how to get into cyber security. Get into IT first. I was just happy to get a help desk job and then I was able to learn and pivot to security. There are still so many knowledge gaps because these fields are so broad. Learning fundamentals will give you the foundation needed to get into security and thrive. But without those, you’ll be playing catch up perennially. That’s not fun.
Award winning CISO, top-rated keynote speaker, bestselling author, but really just trying to leave the world more secure than how I found it. Feel free to Connect instead of just Follow.
The most harmful gatekeepers in #cybersecurity are those who are the first to scream gatekeeping. They tell people how there should be entry level positions for all. They create faux outrage of requirements for knowledge, skills, and abilities for cybersecurity positions. Yet there are entry level cybersecurity positions widely available. Entry level cybersecurity positions include programming, project management, networking, finance, law, software testing, configuration management, auditing, etc. While there are a few entry level roles that are specific to cybersecurity, the real entry level positions are adjacent to cybersecurity. I always see people whiny about how are they going to get experience if nobody will give them a job first. The reality is that there are many jobs to provide the experience, even if not direct. Being a systems administrator for a company is gives people experience on the systems they need, and there are countless cybersecurity responsibilities in systems administration. I see many influencers proudly state how they don't know how to program, so you don't have to. Good for them, but the ignorance is willful and there countless free resources to learn programming. Likewise, programming is fundamental to countless cybersecurity roles, and feel free to lock yourselves out of a role, so you can be proud of your own willful ignorance. I see people talk about non-technical positions, which are sorely needed. Large cybersecurity programs require dozens of project managers. But if you are looking for a project manager role in a cybersecurity program, without having experience with the organization's project management process, you are not qualified. So if you want to self-gatekeep, believe that only cybersecurity specific roles are going to prepare you for cybersecurity. Yes, there are a few entry level cybersecurity specific roles out there, but they are rare. Again though, there are countless other entry level roles out there that even better prepare you for real cybersecurity careers. And frankly, you will likely be even better than those people who went straight into cybersecurity. And here's a secret that those "Security Influencers" will not tell you: They almost always started their careers how I describe. Unfortunately, that won't get them the faux outrage and sell their boot camps, will it?
-
-
this is what no one wants to hear when signing up to start a cyber security degree but it’s so important to understand the fundamentals to become a good engineer!
Award winning CISO, top-rated keynote speaker, bestselling author, but really just trying to leave the world more secure than how I found it. Feel free to Connect instead of just Follow.
The most harmful gatekeepers in #cybersecurity are those who are the first to scream gatekeeping. They tell people how there should be entry level positions for all. They create faux outrage of requirements for knowledge, skills, and abilities for cybersecurity positions. Yet there are entry level cybersecurity positions widely available. Entry level cybersecurity positions include programming, project management, networking, finance, law, software testing, configuration management, auditing, etc. While there are a few entry level roles that are specific to cybersecurity, the real entry level positions are adjacent to cybersecurity. I always see people whiny about how are they going to get experience if nobody will give them a job first. The reality is that there are many jobs to provide the experience, even if not direct. Being a systems administrator for a company is gives people experience on the systems they need, and there are countless cybersecurity responsibilities in systems administration. I see many influencers proudly state how they don't know how to program, so you don't have to. Good for them, but the ignorance is willful and there countless free resources to learn programming. Likewise, programming is fundamental to countless cybersecurity roles, and feel free to lock yourselves out of a role, so you can be proud of your own willful ignorance. I see people talk about non-technical positions, which are sorely needed. Large cybersecurity programs require dozens of project managers. But if you are looking for a project manager role in a cybersecurity program, without having experience with the organization's project management process, you are not qualified. So if you want to self-gatekeep, believe that only cybersecurity specific roles are going to prepare you for cybersecurity. Yes, there are a few entry level cybersecurity specific roles out there, but they are rare. Again though, there are countless other entry level roles out there that even better prepare you for real cybersecurity careers. And frankly, you will likely be even better than those people who went straight into cybersecurity. And here's a secret that those "Security Influencers" will not tell you: They almost always started their careers how I describe. Unfortunately, that won't get them the faux outrage and sell their boot camps, will it?
-
