Welcome to cissp CISSP training Certified Information Systems Security Professional
Search
Nickname Password Security Code Security Code Type Security Code  

You are certified but are your qualified?  Become qualified today.


Rated #1 Training

Surveys

Where do you find the best price for books?

Amazon.Com
Bookpool.Com
The ISC2 webstore
CISSPS.COM
Cheapbooks.com
Ecampus.com
Other (Please leave a comment with name of site)



Results
Polls

Votes: 1314
Comments: 33

Who's Online

There are currently, 133 guest(s) and 19 member(s) that are online.

You are Anonymous user. You can register for free by clicking here

Training Classes Calendar

Test of Widget

 

cissp CISSP training Certified Information Systems Security Professional: JOBS

Search on This Topic:   
[ Go to Home | Select a New Topic ]

Job Opportunity in Dubai for a Senior Incident Response Investigator
Posted by boss on Tuesday, 09 February 2010 @ 20:50:41 EST (174 reads)
Topic JOBS

cdupuis writes " Subject: Date: From:
[htcia] Job Opportunity - Dubai
Tue, 9 Feb 2010 11:34:36 -0500
sanson@forwarddiscovery.com
All,

Forward Discovery has an immediate opening in Dubai, UAE for a Senior
Incident Response Investigator. The position requires thorough
knowledge of network technology as it relates to the response and
investigation of computer network incidents.  Candidates should
possess a thorough and current knowledge of network threats and attack
vectors. Candidates should also possess current skills in computer
forensic analysis as it relates to network investigation and incident
response.

Additional skills and experience required include:

·     Malware analysis

·     CERT or Incident Response policy and procedure development

·     Excellent written and oral communication skills

·     Four-year degree, preferably in a related field

·     Experience with Windows, Unix and Linux operating systems

·     Experience in managing people and projects

·     Log analysis in the detection and investigation of intrusions

·     Experience working for telecommunications companies preferred

·     Computer programming skills are preferred

·     Certification in computer forensics is preferred


Compensation package will be dependent upon relevant experience but
will range from $100,000 to $150,000 plus housing allowance.

The POC for this position is Steve Anson at:
sanson@forwarddiscovery.com
"

(comments? | Score: 0)


10 valuable advices to land a job in 2010
Posted by boss on Friday, 15 January 2010 @ 14:56:59 EST (266 reads)
Topic JOBS

cdupuis writes "

So, here we are: 2010 is here already! Several good thoughts and hopes of a better future flooded our minds during these past couple of days, so now it’s time to kick off and make all our wishes to realize. For many of us, 2010 renovates the perspective of finding a job if unemployed, or a better job in case you strive for different horizons. Regardless of what drives you, finding a new job sounds like a daunting task if you’re not prepared. So what about having a little help to give you the edge and make the hunting a bit easier?

Below I share a bit of my personal experience (and also of my close colleagues) that should help you put together your personal strategy to land a job. So get yourself ready, leave your comfort zone and let’s make our career resolutions come true!

See the whole article at: 

http://www.myinfosecjob.com/2010/01/10-valuable-advices-to-land-a-job-in-2010/#more-438

"

(comments? | Score: 0)


2010: A Good Time to Start an Information Security Career
Posted by boss on Friday, 15 January 2010 @ 14:50:46 EST (269 reads)
Topic JOBS

cdupuis writes "

Another great article published on the BankInfoSecurity web site:

January 8, 2010 - Tom Field

 

Tom Field
With the global recession barely in the rearview mirror, you hear a lot of people saying one of two things: "I'm lucky to even have a job" or "This is a lousy time to be looking for work."

I hear that latter statement, especially, and think to myself "Man, not if you're in information security!"

This year and next year, bar none, security is the smart place to be in IT. - David Foote 
For a lot of reasons, now is a very good time to be looking for work if your talent is protecting other people's data.

First of all, from the president on down, this nation is all about cybersecurity these days. It's one of the three hottest topics in Washington, D.C., and as my colleague Eric Chabrow says, you're likely to see some major cybersecurity policy at least discussed in 2010. Government agencies are eager to hire new, skilled security professionals.

The second hot topic in D.C. is healthcare. In 2009, the federal government gave healthcare organizations a boatload of money to create electronic records, and in 2010 it's going to enforce new regulations to help protect those records. Think this initiative won't call for additional personnel skilled in risk management, privacy and incident response? Good time to be an information security professional in healthcare. And stay tuned, please, for further discussion on this subject.

And then there's banking reform - the third hot topic in D.C. And while it's hard to imagine exactly how the regulatory agencies will be reshuffled when all the dealing is done, it is clear that: 1) There will be increased regulation, especially for non-banking financial institutions; 2) There will be greater consumer advocacy and security standards; 3) All of this regulatory pressure is going to require new bodies inside the institutions to secure critical systems, as well as outside to examine them.

Like I said, a good time to either start or re-start a career in information security.

I caught up recently with David Foote of Foote Partners LLC, a leading IT staffing research firm. He's been tracking technology-related job trends literally for decades now, and his assertion flat-out is: There's never been a better time to be an information security professional. "This year and next year, bar none, security is the smart place to be in IT," says Foote, who in his conversation with me discusses the wave that has driven the surge in security jobs, as well as his predictions for 2010-2012.

I'd be remiss if I didn't mention our recent Information Security Today Career Trends Survey, which looks academic, business and industry objectives for 2010, pointing to risk management, cybersecurity and fraud/forensics as the hottest topics for training in growth.

But what's the career outlook from your perspective? Where do you see the best information security jobs in 2010, and what are you doing to grow your own career?

Indeed, we are all lucky to have jobs these days. But we're even luckier to be in a field that's growing as quickly as information security.

Here's to a prosperous - and secure - 2010.

"

(comments? | Score: 0)


Job Offer Consultant - ISO27001 Implementation & Certification
Posted by boss on Thursday, 14 January 2010 @ 19:15:05 EST (247 reads)
Topic JOBS

cdupuis writes "

Job Title:             Consultant - ISO 27001 Implementation & Certification

Closing Date:     28th Feb, 2009

Location:             Doha, Qatar

Contact:              Balwant Rathore at balwant_rathore@oissg.org

 

Profile:

The consultant should provide a structured programme to assist clients in ISO 27001 implementation for accreditation.

Required competencies:

  • 2-5 yrs of experience in implementation and maintenance of ISO 27001 in medium / large size organizations.
  • In depth knowledge of ISO 27001 standard requirements and end-to-end (from beginning to the end) involved in at least one cycle of ISO 27001 certification process.
  • Good knowledge in policy/procedure development
  • Trained ISO 27001 Internal Auditor and extensive experience in conducting audits

Preferred competencies:

  • Certified ISO 27001Lead Auditor
  • ISO 27001 Training Experience
  • CISSP Training Experience
  • Knowledge / Experience in standards like ISO 20000, ISO 9001 and CMMI

Others:

  • Excellent oral and written communication skills is must
  • Candidate from big 4 consulting firms are preferred

Interview Process:

  • Short listing of profiles
  • Telephonic Interview
  • Schedule a personal interview

 

"

(comments? | Score: 0)


Job Opening Penetration Tester "Hacker"
Posted by boss on Wednesday, 13 January 2010 @ 10:31:55 EST (216 reads)
Topic JOBS

Anonymous writes "

Title: Security Engineer (“Penetration Tester & Hacker”)

 

Located in Charlotte, NC for large global leading co. with advancement opportunity. Will relocate the right individual(s).  Multiple openings $75-105k. This client performs a background investigation on all new hires- checking credit history, possible drug screen, etc.

 

The Security Engineer’s role is to ensure the confidentiality, availability and integrity of in-house information systems. Will perform penetration testing and create own “hacking”  resources (proposing new models and innovative strategies),  not just use pre-packaged standard tools.  Ideal candidate will have 3-10 years exp. performing Systems administration, Network administration, Shell scripting and automation, Security testing. Will design and perform audits, recoveries, monitor security performance. Strong hands-on technical knowledge of Firewalls, IDS/IPS, Windows, UNIX, TCP/IP. Support of McAffee and/or PGP products.  Must have strong customer-focused skills, good communication and documentation abilities.

 

 

 

 Cindy Miceli

Recruiter

Alta Associates

8 Bartles Corner Road

Flemington, NJ 08822

908-806-8442

cindy@altaassociates.com

http://www.linkedin.com/in/cindymiceli

www.altaassociates.com

www.ewf-usa.com

"

(comments? | Score: 0)


Certification Magazine’s 2009 Salary Survey By Certification Magazine Editorial
Posted by boss on Wednesday, 02 December 2009 @ 08:54:48 EST (954 reads)
Topic JOBS

cdupuis writes "

NOTE FROM CLEMENT:

I saw a great posting on http://www.myinfosecjob.com/ blog today. 

It is a salary survey that demonstrate the well being of the ISC2 certifications.  Out of the top five performers there was two that were Concentrations offered by ISC2.  To get there you must complete your CISSP first and then complete one of the advanced certifications referred to as Concentrations by ISC2.

See details below from the www.myinfosecjob.com:

Certifications Magazine Salary Survey: CISSP-Concentrations most well-paid professional

December 1st, 2009

Infosec professionals always question themselves: should I go down the road of certifications?

Answers vary, but one thing is for sure: A certificate is not the end, it’s the mean. The real added value is the knowledge accumulated during your preparation for any given certification.

This week I’ve come across a factual article on earnings x certification.  A snippet follows below:

” Rounding out the top five highest-paying certs in 2009 were: (ISC)2 Information Systems Security Architecture Professional (CISSP-ISSAP) with $136,060; Brocade Certified SAN Manager (BCSM) with $136,020; Brocade Certified Fabric Designer (BCFD or BCSD) with $135,600; and the (ISC)2 Information Systems Security Management Professional (CISSP-ISSMP) with $134,100.”

Wow, 2 CISSP-Concentration certifications among the top 5 most well paid. Does it tell you something?

 

BELOW YOU HAVE THE ARTICLE FROM THE MAGAZINE:

Certification Magazine’s 2009 Salary Survey By Certification Magazine Editorial Staff
11-30-2009 08:50 PM

Fifteen months ago, the world watched in horror as stock markets plummeted, debt skyrocketed, banks collapsed and the credit industry imploded, plunging the global economy into the worst recession since the Great Depression. No one knew what the next day, week or month — let alone year — had in store.

Suffice it to say, not much has changed. Though economists have pointed to early signs of recovery, we’re all still waiting with bated breath for some kind of certainty to emerge. This year’s CertMag Salary Survey received more than 40,000 responses from IT professionals in over 150 countries around the world — from Pakistan to the Philippines, from Bulgaria to Bangladesh. The good news is, despite the continued economic ambiguity, the results of our survey pointed to a few stable trends within the IT industry that could provide professionals with some direction for the coming year.

First, IT has been widely recognized as a growth industry — even in this climate — and our numbers reflected that. In 2009, the average U.S. total salary, including benefits and incentives, was a generous $96,677. That is a 9 percent gain over last year’s average of $88,640. However, this growth represents a slowdown from that of the previous year, when average total salaries jumped a dramatic 15 percent.

Also reflective of the times was the number of IT professionals who are experiencing pay cuts. About a quarter of you said you’ve either had your pay cut in the last year or expect to have your pay cut in the coming year. Fewer people reported getting incentives or bonuses this year, too — dropping from 41 percent of respondents in 2008 to 34 percent in 2009.

However, again proving the value of certification, many respondents reported receiving a raise after earning their most recent certification, with 30 percent of you saying that raise was between 10 and 20 percent. Then again, most of you (52 percent) said that raise was 5 percent or less, whereas last year the most common raise amount was 5 to 10 percent.

Also indicating the power of certification was the number of respondents who added more than two certifications to their portfolios this year. This figure jumped from 11.4 percent of respondents in 2008 to more than 30 percent in 2009, while the total number of people who earned at least one cert this year was more than 67 percent. Tellingly, a full 96 percent of respondents from the top five countries with the highest salaries said they were certified.

In the U.S., the top five highest-paying certs varied a bit this year from last year, although the general content areas stayed pretty much the same. The cert that commanded the highest salary this year was the Brocade Certified Network Engineer (BCNE, formerly FNCNE) with a whopping average total salary of $146,250. This bumped last year’s top cert, the Brocade Certified Fabric Designer (BCFD or BCSD), which had an average salary of $120,770 last year, to No. 4 this year.

Rounding out the top five highest-paying certs in 2009 were: (ISC)2 Information Systems Security Architecture Professional (CISSP-ISSAP) with $136,060; Brocade Certified SAN Manager (BCSM) with $136,020; Brocade Certified Fabric Designer (BCFD or BCSD) with $135,600; and the (ISC)2 Information Systems Security Management Professional (CISSP-ISSMP) with $134,100.

As evidenced by these results, a general focus on network and security issues continues to be a growing trend — and lucrative career choice — within the IT industry.

The cert that connoted the lowest salary was the CIW – Certified Internet Web Professional, with an average salary of $59,290. This was followed by the Microsoft Certified Desktop Support Technician (MCDST) with $62,030; the Cisco Certified Entry Networking Technician (CCENT) with $63,420; the HP: Accredited Platform Specialist (APS) with $64,180; and Dell certification with $67,190.

This is not too surprising given that many of these certs correspond with entry-level jobs or jobs that are not particularly “hot” right now.


No doubt about it: The past year has had its ups and downs. But as the results of the 2009 CertMag Salary Survey show, there are rays of light to be seen in the IT field. And while a certain level of uncertainty remains, IT professionals can use it as an opportunity to explore the new specializations or career paths that continue to emerge as the industry develops.

– Agatha Gilmore

Click on Read More... below this article to read the FULL story

"

(Read More... | 35881 bytes more | 2 comments | Score: 0)


Security Job Offer
Posted by boss on Friday, 18 September 2009 @ 19:04:06 EDT (989 reads)
Topic JOBS

cdupuis writes "

Acxiom Corporation is looking for a motivated self-starter with strong security background. The candidate must possess a strong attention to detail, thorough understanding of networking, and be a logical thinker. The position would be focused on protecting the network integrity of Acxiom and its outsourcing client environments. 

This is an exciting, fast paced environment with numerous opportunities to take part in a variety of security designs.  Working on Acxiom internal and external customer firewalls will challenge your engineering and design skills – are you up to the challenge?  

This position is responsible for the following:

*Design/ Implementation of security architectures.
*Installation and configuration of Checkpoint and Cisco firewall solutions.
*Installation, management, and planning software and hardware upgrades.
*Troubleshooting of IP network communications.
*Monitoring firewall and proxy logs.
*Interfacing with vendors, clients, and users to design security solutions.

Required Skills:

*Knowledge of IP (TCP/UDP/ICMP) protocols.
*Candidate should possess relevant experience with key network vendor solutions (e.g., Checkpoint, etc).
*Strong communication skills.
*Must be comfortable in presenting both details to technical teams as well as business impact/risk analysis to management.

Nice to have skills:

*Experience with Nokia or Checkpoint Secure Platform.
*UNIX shell scripting and PERL experience.
*Clustering and/or High Availability experience.
*Security/Network Disaster Recovery experience.
*Database administration, backup, and recovery.
*Contingency planning.
*Good documentation and process diagramming skills.
*UNIX administration skills.
*Network/Security forensic experience.

Education:

*Requires BS/BA or equivalent; CCSA and CCSE certification desired.

Who are we?
A global leader in interactive marketing services, Acxiom connects clients with their customers through deep consumer insight, powering effective and profitable marketing initiatives and business decisions. Our consultative approach spans multiple industries and incorporates decades of experience in consumer data and analytics, information technology, data integration and consulting solutions for effective marketing across digital, Internet, email, mobile and direct mail channels. Founded in 1969, Acxiom is headquartered in Little Rock, Ark., and serves clients around the world from locations in the United States, Europe and Asia-Pacific. For more information about Acxiom, visit www.acxiom.com.

 

Resumes can be forwarded to methor@acxiom.com

Megan Thornton | Corporate Recruiter

Acxiom Recruiting Department   

501-342-5759 office | 501-342-3724 fax
301 East Dave Ward Drive | Conway, AR, 72032 | USA | www.acxiom.com

"

(comments? | Score: 0)


Security Incident Response Team (SIRT) job opening in Dubai
Posted by boss on Monday, 31 August 2009 @ 08:52:14 EDT (1198 reads)
Topic JOBS

cdupuis writes "

From: jameel@itpeoplegulf.com
To: jameel@itpeoplegulf.com
Subject: URGENT: SIRT Candidate for Wipro - CISSP-CEH-GCIH-GCFA-CFIA-CHFI
Date: Sun, 30 Aug 2009 16:37:32 +0400

Dear All,

Please find the JD of the senior Security Incident Response & Forensics profile we had discussed about earlier. The location is Dubai.

We need at least a couple of good CVs by tomorrow. The need is urgent.

The Security Incident Response Team members should have at least 5+ years of experience in handling Security Incidents and preferably an overall experience of 6+ years.

 

Should be an expert on : (at least 80% of these)

·         Using ENCASE and FTK forensic-analysis tools  for analysis of Security Incidents

·         Security Incident (hacks, illegal network penetration, website defacements, etc) forensic analysis

·         Malware Analysis

·         Threat & Vulnerability Management

·         Network & Systems Security;

·         Business Impact Analysis;

·         Data Integrity/Recovery;

·         System Audit & Correlation,

·         Contingency Planning;

·         Risk Assessment

·         Shell scripting

 

Certifications

·         GIAC Certified Incident Handler (GCIH)

·         GIAC Certified Forensics Analyst (GCFA)

·         CFIA - Certified Forensic Investigation Analyst

·         Certified Computer Hacking and Forensic Investigator (CHFI),

·         CISSP

·         Certified Ethical Hacker (CEH)

They would also form part of the problem management team as well, which would be focused at arriving at Root-Causes and suggest corrective actions for high impact incidents and potential failures in the system. While being part of the Wipro service delivery team, they will have a reporting directly to the Du business leads. This would make these profiles really high-visibility profiles within the overall delivery setup.

TOTAL : 8-10 Yrs experience.

Md.Jameel Haji

IT People FZ LLC

 

Suite G06, Building # 1, Dubai Internet City

Dubai , U.A.E. PO Box 500123

(O) : + 9714 3911741 (F) : + 9714 3911745

(M) : + 971-50-8807599

Jameel@it-people.com

www.itpeoplegulf.com

"

(Read More... | 1 comment | Score: 0)


Highly Paid top 6 certifications in year 2008
Posted by boss on Sunday, 12 July 2009 @ 14:56:30 EDT (1350 reads)
Topic JOBS

cdupuis writes "

 

As posted on the CISA Study mailing list:

Highly Paid top 6 certifications in year 2008 :

1. PMI Project Management Professional (PMP) - $102,000 average salary in 2008
2. PMI Certified Associate in Project Management
3. ITIL v. 2 - Foundation
4. (ISC)2’s Certified Information Systems Security Professional (CISSP)
5. Cisco CCIE - $93,500 average Salary in 2008
6. Cisco Certified Voice Professional - $88,600 average Salary in 2008

Just for comparison purposes, the highest paying Microsoft certification is the Microsoft Certified Solution Developer ($84,522).

and

While the top 6 hot certs list is compiled of up-and-coming certifications, many hiring managers' top choices are still "oldies but goodies." Here are the top 10 certs they told us they look for:

1. Microsoft Certified Professional (MCP)
2. Microsoft Certified Systems Engineer (MCSE): Windows 2003
3. Microsoft Certified Systems Administrator (MCSA): Windows 2003
4. Cisco Certified Network Associate (CCNA)
5. CompTIA A+
6. Microsoft Certified Desktop Support Technician (MCDST)
7. MCSE: Security
8. Microsoft Certified Database Administrator (MCDBA): SQL 2000
9. CompTIA Network+
10. MCSE: Messaging

And for 2009:

1. CCIE
The CCIE always ends up on lists like these, and with good reason. With a pass rate of only 26% it is certainly the most difficult of all IT certifications. Once you place this on your resume, you know you have a truly impressive credential and can expect to earn an average salary of $93,000.

2. CISA
With the economic climate these days, big business needs auditors more than ever. The CISA is designed to certify audit skills, both technical and ethical. According to GoCertify.com, the average CISA can earn as much as $115,000.

3. CCSE
The CCSE is another high level security certification that created for individuals who work with Checkpoint products and must maintain secure VPNs. The demand for this certification is evident in the pay as shown on PayScale.

4. MCSD
The Microsoft Certified Solution Developer certification is designed for people who like to problem-solve. You are expected to know about enterprise solutions and Microsoft products. You will be expected to use business analysis skills to decide which solution is best for a particular environment or business. Here is the PayScale for the MCSD.

5. PMP
The Project Management Professional certification is here because it is another that requires an extensive amount of skill and experience to obtain. Once you have passed the exam and fulfilled the requirements you can pull in around $101,000 (based on a ZDNET Salary Survey).

6. CISSP
Notice a theme on this list? Security certifications are very hot right now. The Certified Information Systems Security Professional demands a good salary (around $94,000) and can be obtained with just a few years of experience or equivalent education. Only one exam is required.

7. RHCE
If you can configure networking and security on a Red Hat OS then the Red Hat Certified Engineer is a great certification for you. The exam is not actually an exam, it's a five-hour hands-on test of your Linux skills. You certainly can't braindump your way through this one. Although it is not exactly entry level, Red Hat has several training programs for all levels of experience. Once you get through the testing process your salary could jump to $83,000.

8. SCJP 6.0
Ideal for all web developers, the SCJP is a start on the path to many other development certifications. You can build on the SCJP to get the SCJD (Sun Certified Developer for the Java 2 Platform), SCWCD (Sun Certified Web Component Developer for the J2EE Platform), SCMAD (Sun Certified Mobile Application Developer), or the SCBCD (Sun Certified Business Component Developer).
You can also use your SCJP 6.0 Certification toward the Oracle Certified Solution Developer and Oracle Certified Enterprise Developer programs, and the Master CIW Enterprise Developer certifications.
SCJP 6.0 covers a few new topics including Console, NavigableSet, and NavigableMap. Salaries for SCJP certified professionals range from $75,000 to 100,000.

9. CAPM

The CAPM (Certified Associate in Project Management) certification is a great choice for project managers who can verify 1,500 hours of project management experience (versus the more demanding 3-5 years of experience for a PMP). The CAPM is for team members who support projects.

The group that offers the CAPM and PMP is the Project Management Institute (PMI). The PMI is highly respected in the industry and the demand for good project managers is steadily growing. These two facts put together are the reason why the CAPM is on the list. Once you are certified you can earn up to $75,000.

10. MCSD
Earning the MCSD (Microsoft Certified Solution Developer) certification shows that you are not just a developer. You also have the skills to analyze and design leading-edge Microsoft enterprise solutions. This is a certification for software engineers and software architects. Salaries for MCSD's range from $70,000 to over $100,000.
 

Kind regards

M. Adeel Sadi

"

(Read More... | 3 comments | Score: 5)


FBI -- Senior Level Technical Forensic Advisor
Posted by boss on Thursday, 14 May 2009 @ 08:51:59 EDT (1330 reads)
Topic JOBS

cdupuis writes "

To All,

The FBI has just posted a truly unique employment opportunity, applications for which must be received on-line no later than May 25, 2009. 

The position is that of a Senior Level Technical Forensic Advisor whose primary duty it is to advise and assist FBI executives  on all issues affecting the acquisition, preservation, examination, processing, presentation and storage of digital evidence in support of both the FBI’s criminal and national security investigations. 

The individual filling this position serve as a key architect responsible for mapping the future course of the exploding field of digital evidence forensics, including traditional computer hard drive forensics, network forensics, remote forensics, mobile forensics (e.g., cellular telephones), device forensics (e.g. GPS devices) and more. 

The selected candidate would report directly only to Senior Executives of the FBI.  The salary range for the position is $117.787 to $162,900 per year.

The FBI currently manages a network of over 400 certified digital evidence forensic examiners located across the country in FBI Field Offices, Laboratories and at FBI Headquarters in the Metro-Washington, DC area. 

The FBI also operates and administers the FBI Digital Evidence Laboratory in Quantico, VA and Linthicum, MD as well as 14 existing Regional Computer Forensic Laboratories (RCFLs) across the country in collaboration with other Federal, State and local law enforcement agencies, all of which have either been accredited by the American Society of Criminal Laboratory Directors – Laboratory Accreditation Board (ASCLD-LAB) or are in the process of applying for the same. 

Combined, these elements represent the world’s largest contingent of digital evidence forensic examiners operating under one central, validated, quality assurance system. 

Details on the vacancy can be found at www.usajobs.gov as Job Announcement Number 18-2009-006, under the category “Senior Executive.”

"

(Read More... | 1 comment | Score: 0)


Security Certification Rules Could Shake Up IT Management
Posted by boss on Tuesday, 05 May 2009 @ 15:00:29 EDT (1419 reads)
Topic JOBS

cdupuis writes "

Security Certification Rules Could Shake Up IT Management

6/25/2008 -- Requirements for professional security certification for IT workers in civilian agencies, now being readied by the Office of Management and Budget (OMB), would have a major impact on how government and industry recruit, train and manage their IT staffs, a security expert said Wednesday.

"They are going to affect every one of us in the field," contractors and government employees, said George Datesman, a senior manager at Noblis Inc., a nonprofit high-tech consultant.

Datesman -- who holds a master's degree in criminology and has 30 years experience in law enforcement, including a stint with the Justice Department -- said at a Digital Government Institute conference on cybersecurity that OMB is finalizing minimum requirements for professional certification. He had no time frame for their release.

As IT security has become professionalized, a number of certifications have achieved general recognition industrywide, including a suite from the International Information Systems Security Certification Consortium (ISC2). ISC2 maintains and administers examinations for:

  • CISSP: Certified Information Systems Security Professional
  • ISSEP: Information Systems Security Engineering Professional
  • ISSAP: Information Systems Security Architecture Professional
  • SSCP: Systems Security Certified Practitioner

Organizations awarding certifications would have to be accredited to meet a federal mandate. Datesman likened the situation to the law-enforcement field, which still is sorting out how to fully implement requirements for increased professional training and education 30 years after the movement began. Not only would there be new hiring requirements, there also could be increased responsibility and legal liability for workers and their employers.

"This is a change we have not faced in the IT security industry before," he added.

The closest parallel has been in the Defense Department, which anticipated OMB's reaction in this area. The DOD's Directive 8570 on information assurance, approved in December 2005, requires all of the department's information assurance workers to obtain an accredited commercial certification in computer security. The DOD has approved 13 certifications for the directive.

The DOD requirement already has thrown what one conference attendee called a giant monkey wrench into the IT security manpower market.

"If OMB issues a similar requirement, it's going to throw the supply-and-demand curve even more out of balance," he said.

Datesman agreed, saying it probably would take years for the supply of certified workers to catch up with demand. A CISSP certification, for example, requires five years' experience. "You don't mint them out of college," he said.

The requirement is likely to drive up the cost of recruiting professionals, not only in government but among government contractors, who also would have to meet the requirements in staffing government contracts. Government contract language also would have to change to reflect the requirements.

Other practical considerations would be the need to formally define IT security roles and jobs and spell out the knowledge, skills and abilities needed for each. Certification and training also would have to be verified by employers, possibly creating a backlog much like that for background checks in issuing personal-identity verification cards to government workers and contactors under Homeland Security Presidential Directive 12.

No amount of education and certification will completely fulfill the need for IT security professionalism, Datesman said.

"When we did this in law enforcement 30 years ago, what we learned was that 60 percent of what they needed to know is learned on the job," he said.  William Jackson, courtesy of GCN.com

"

(Read More... | 1 comment | Score: 0)


IA career development: Need for IA professionals will grow
Posted by boss on Tuesday, 05 May 2009 @ 14:31:56 EDT (1242 reads)
Topic JOBS

cdupuis writes "

From Network World:

This story appeared on Network World at
http://www.networkworld.com/newsletters/sec/2009/050409sec1.html

IA career development: Need for IA professionals will grow Information assurance careers in a struggling economy

Security Strategies Alert
By
M. E. Kabay
Network World
05/05/2009

Recently I was asked by a journalist for comments on careers in information assurance. Little of what I wrote fit into the article, so I'm publishing my remarks here.

In response to a similar question some years ago, I published a paper for the American Association for the Advancement of Science which is still available as baseline information. A short piece entitled “Careers in Information Security” is available from my Web site and a longer piece is “Information Security Resources for Professional Development”.

We will see increasing integration of information assurance into the strategic thinking of organizations as managers realize that the economic downturn increases pressures for illegality. Employees and managers who are desperate for continued employment may find their ethical standards weakening; we already have documented cases from past years of employees and managers who have broken into competitors' systems to acquire competitive intelligence or to steal intellectual property that will yield an immediate economic advantage to their current employers. How many more will we see as they contemplate the specter of job loss?

The other factor I foresee is that the economic downturn will increase the demands of the market for better integration of security in commercial off-the-shelf software. Companies and other organizations which are counting pennies will become increasingly intolerant of the shoddy programming that has been typical of much of the software that passes for professional products in the current marketplace. Well-known errors that lead to common vulnerabilities as defined in the CVE (Common Vulnerabilities and Exposures) database will, in my view, become grounds for individual breach-of-contract lawsuits and possibly for class-action lawsuits. Readers may want to refer to Chapter 38, "Writing Secure Code" by Lester E. Nichols, Timothy Braithwaite and me from the recently released Computer Security Handbook, Fifth Edition (Wiley, 2009) (CSH5) for some useful background reading on these issues.

Another problem rooted in the poor economy is personnel management. As employees become more stressed, employee management for sound information security becomes increasingly important. Chapter 45 on “Employment Policies and practices” by Bridgitt Roberson and myself in the CSH5 presents practical advice.

IA professionals must understand that assuring the six fundamental attributes of information security is absolutely integral to meeting the strategic needs of every organization. Confidentiality, control or possession, integrity, authenticity, availability and utility (the Parkerian Hexad) are at the heart of IA (narrated PowerPoint file available). See Chapter 3, “Towards a New Framework for Information Security” by Donn B Parker in the CSH5.

At the same time, IA professionals must learn to apply rational risk management to all of our decisions; we cannot swagger around the organization barking orders at our colleagues as if we were zealots enforcing a mystical doctrine. IA serves the interests of the organization in a context of risk assessment and rational allocation of resources. IA personnel must use every managerial and psychological skill available to convince colleagues to collaborate in protecting information assets – coercion does not work. Thus in addition to technical understanding and skills, IA practitioners need to be able to listen, learn, analyze and respond to the needs of their colleagues and to recognize the strategic goals of the organization so that they can put their efforts where they will count.

Being able to communicate well is a tremendous asset for IA professionals, and that's why the Master of Science in Information Assurance (MSIA) at Norwich University includes so much analysis and writing as part of its curriculum. Many of our graduates have written back to us over the years to thank us for the honing of their communications skills.

Another side of career development is visibility. Practitioners will do well for their profession and for their careers by sharing knowledge with others through presentations at professional user group meetings and larger conferences. Young people, in particular, benefit in all ways by writing thoughtful, factual, insightful articles on information assurance issues; not only do they legitimately feel a glow of achievement in helping others, they also expose themselves to new challenges that encourage additional thought and they add credibility to their résumés.

A White Paper on “IA Education in a {Rec,Depr}ession” is available with an extended discussion of these topics.

I hope that readers who know young people (including high-school students) who have expressed interest in IA careers will pass this article on to them and to their guidance counselors. M. E. Kabay, PhD, CISSP-ISSMP, specializes in security and operations management consulting services. CV online.

All contents copyright 1995-2009 Network World, Inc. http://www.networkworld.com
"

(comments? | Score: 0)


Penetration Tester opening in Doha, Qatar
Posted by boss on Monday, 04 May 2009 @ 15:58:31 EDT (1463 reads)
Topic JOBS

cdupuis writes "

Job Title

Penetration Testing Consultant

Closing Date:

25th May, 2009

Location:

Doha, Qatar

Contact:

Balwant Rathore at balwant_rathore@oissg.org

Penetration Tester

Profile:

The consultant should provide a structured programme of penetration testing and delivery of a management report providing recommendations to improve security posture of the organization.

Required competencies:

  • Deep knowledge of application and network penetration testing tools and exploits to identify vulnerabilities and recommend effective corrective actions.
  • Excellent report-writing skills.
  • Ability to communicate technical impact and business risk to a non-technical audience after the project
  • Outstanding customer relationship management skills
  • Deep knowledge of databases and popular web applications
  • Familiarity with more than one main stream operating system (Windows/Linux/*nix)
  • Good training skills
  • Must be prepared to travel
  • Self motivating and punctual
  • Passion for learning information security

Required experience:

  • Minimum 2 years experience in application and network penetration testing

Desired competencies:

  • Security testing tool development
  • Exploit development
  • Network design and review experience
  • Source code review experience
  • SCADA testing experience
  • Bluetooth testing experience
  • Blackberry testing experience
  • Wireless testing experience
  • VOIP testing experience
  • Virtualisation experience (VMWare, XEN, UML)

Interview Process:

  • Short listing of profiles
  • Telephonic Interview
  • Schedule a personal interview in a preferred location for candidates
"

(comments? | Score: 0)


Booz Allen Hamilton has 52 open positions for CISSPs
Posted by boss on Friday, 03 October 2008 @ 18:49:14 EDT (1409 reads)
Topic JOBS

Booz Allen Hamilton has 52 open positions for CISSPs in CA, VA, MD, IL, MI, TX, DC, PA, SC.

Check details at: http://www.boozallen.com/careers


(comments? | Score: 0)


New Job Site: https://www.security-jobs.info/
Posted by boss on Tuesday, 09 September 2008 @ 11:17:02 EDT (1188 reads)
Topic JOBS

andrewcardwell writes "

NOTE FROM CLEMENT:

Andrew used to be the maintainer of the www.cisspworld.com web site.  He just came out with a new site posting job offer.  Andrew has always been a great community player and this is why I am posting the announcement about his new site.  See below:

Since 2001 we have worked with security professionals and security recruiters to bring them together through something called security-jobs.info.  We started originally with a mailing list, moved on to a very successfull linkedin.com group and three weeks ago we launched the website and I'd like to invite you all to visit us at  https://www.security-jobs.info/

The new website already has over 700 security professionals who are able to upload or create their online resumes, browse and apply for jobs all around the world.

The site has over 100 security recruiters and agencies on there primarily from the UK, America and Australia advertising over 100 new roles.

For employers our aim is to provid a candidate rich environment.  For job seekers we aim to show you interesting possibilities of what could be.

Our focus is to expand the recruiter base over the coming months to cover all of the USA, Most of Europe and India as a priority but we are always happy to speak to individuals and companies who have specific needs and we will do what we can to find individuals or companies in locations not currently on our plan, just ask.

All the details we hold come under the protection of the UK Data Protection Act.

Should you require any help we have a dedicated support team and details on how to log a support ticket are on the front page of the site.

We hope you will come and visit us soon and sign up at https://www.security-jobs.info/

Kind regards

Andrew Cardwell CISSP-ISSMP, CISM, CISA, SC

"

(comments? | Score: 0)


Login here

Nickname

Password

Security Code:
Security Code
Type Security Code

Don't have an account yet? You can create one. As a registered user you have some advantages like theme manager, comments configuration and post comments with your name.

Our Sponsors

CCCure Partners

USA


Security University

Security University


MIDDLE EAST


Dubai, Qatar, Kuwait, Oman

THE OISSG GROUP
The OISSG serving the Middle East security needs


EUROPEAN UNION


Dublin, Ireland
ESPION

Best security training you can get in Ireland


AFRICA


Yaounde-Cameroun
GetSec

The best training one can get in Cameroon

Lagos, Nigeria
Digital Encode


The best security training in Lagos and Nigeria

Most Active Members

· 1: side_winder
Total points: 11912
· 2: Lopezco
Total points: 8506
· 3: cissp_newbie
Total points: 7593
· 4: cdupuis
Total points: 6440
· 5: mikeyoung_fla
Total points: 5440
· 6: Vladimir
Total points: 4611
· 7: MMM
Total points: 2969
· 8: damoose
Total points: 2269
· 9: educk
Total points: 2171
· 10: vijayu
Total points: 1931

Today's Big Story

There isn't a Biggest Story for Today, yet.

All logos and trademarks in this site are property of their respective owner.
The comments are property of their posters, all the rest © 2007 by CCCure.Org, and the site maintainers Clement Dupuis and Nathalie Lambert. Reuse is strictly prohibited without written permission of CCCure.Org or it's maintainers.

This web site is not associated directly or indirectly with ISC2, the SANS Institute, ISACA, or other certification authority. The GCFW, CISSP, SSCP, ISSEP, ISSMP, CISA, and CISM are all the property of their respecful owners. The content of this site is provided to you freely due to the generosity of our sponsors.


  • Career
  • Magazines
  • Conferences
  • Study Books
  • Certifications
  • Training
  • Tutorials
  • Quizzes
  • Forums

  • Page Generation: 0.64 Seconds