Everybody come rep @The Wave for taking the time to help a Coli Breh in need :mjcry:

Gold

Veteran
Supporter
Joined
Aug 25, 2015
Messages
43,729
Reputation
19,642
Daps
292,843
Thanks man

Also Can you get a QA analyst job through certs or do you need an actual degree in Software Engineering?

You dont need a degree to anything in IT unless its management (Director, VP, CTO/CIO).

QA analyst they prefer you to have a degree because it demonstrates that you learned good coding practice, but a strong body of work will trump that.

As I've said multiple times here, what you learn in 4 years of college computer programming can be learned in less than 6 months on your own, easily.

I'm not trying to completely shyt on degrees, I have one. And some companies will hire you, but request that you get your degree (they pay for it). But in terms of getting your foot in the door, its not 100% required.
 

StretfordRed

Afro-European
Joined
Feb 9, 2014
Messages
11,283
Reputation
-2,005
Daps
32,797
I do IT security.

I actually do it for a rather large US bank, but I am based in London. The security job market across the world is still in dire need for people

We need good network security analysts, good programmers and people who can deconstruct malware. That is the "blue" side of things.

On the other side you have the "red" teaming. People who can hack and crack things. They will essentially be good programmers.

Also there are things like threat analysis, where you're almost being a spy on a computer. You lean TTP (tactics, techniques and procedures) of actors e.g. Panda groups and other eastern European hacking groups.

Then you have the governance side of things. SOX, 27001, and a whole bunch of other shyt I don't even like.

Security is a VERY wide field, and I am interviewing a lot of potential employees with years of experience and more certs than me, makes me realise certifications aren't shyt. The clue is in the name, they are meant to CERTIFY you know something. So a lot of people put the cart before the horse is the wrong thing.

If anyone wants to get into security 1st, I say to some form of networking education with hands on experience e.g. CCNA - learn what ICMP is, learn the TCP headers, know what value is in an IP header to indicate a TCP packet is coming next. Then understand how Windows and Linux works. Install the OS's on a VM and get playing. Then figure out if you want to go down the red side - then learn how the internet works e.g. HTTP headers, CGI, how Javascript works, learn SQL and how to inject code, learn XSS, CSRF, etc. Or come down to the blue side - learn how malware works, learn to deconstruct it, learn what DLL's it loads (interject with learning how Windows works)

There is no 1 certification to get. I still don't and neverevever will get a CISSP as I think the cert is worthless for my field of work. The knowledge is probably good to have in general though. I have 3 certs all from GIAC/SANS, but they were after I had around 2/3 years as a Network Security Analyst.

I also have a BSc in Computer Networking and an MSc in Information Security, which has helped me gain the position I had. But things are different in Europe

Also, one HUGE thing, no matter what type of IT you go into, LEARN PROGRAMMING!! I lost a dream job because of it :wow:

But that is all IMO
 
Last edited:

Gold

Veteran
Supporter
Joined
Aug 25, 2015
Messages
43,729
Reputation
19,642
Daps
292,843
I do IT security.

I actually do it for a rather large US bank, but I am based in London. The security job market across the world is still in dire need for people

We need good network security analysts, good programmers and people who can deconstruct malware. That is the "blue" side of things.

On the other side you have the "red" teaming. People who can hack and crack things. They will essentially be good programmers.

Also there are things like threat analysis, where you're almost being a spy on a computer. You lean TTP (tactics, techniques and procedures) of actors e.g. Panda groups and other eastern European nature.

Then you have the governance side of things. SOX, 27001, and a whole bunch of other shyt I don't even like.

Security is a VERY wide field, and I am interviewing a lot of potential employees with years of experience and more certs than me, makes me realise certifications aren't shyt. The clue is in the name, they are meant to CERTIFY you know something. So a lot of people put the cart before the horse is the wrong thing.

If anyone wants to get into security 1st, I say to some form of networking education with hands on experience e.g. CCNA - learn what ICMP is, learn the TCP headers, know what value is in an IP header to indicate a TCP packet is coming next. Then understand how Windows and Linux works. Install the OS's on a VM and get playing. Then figure out if you want to go down the red side - then learn how the internet works e.g. HTTP headers, CGI, how Javascript works, etc. Or come down to the blue side - learn how malware works, learn to deconstruct it, learn what DLL's it loads (interject with learning how Windows works)

There is no 1 certification to get. I still don't and neverevever will get a CISSP as I think the cert is worthless. The knowledge is probably good to have in general though. I have 3 certs all from GIAC/SANS, but they were after I had around 2/3 years as a Network Security Analyst.

I also have a BSc in Computer Networking and an MSc in Information Security, which has helped me gain the position I had. But things are different in Europe

But that is all IMO


This is why I love TheColi. Black knowledge and opportunities spread throughout :salute:
 

EARFQUAKE

๐Ÿฅฐ
Supporter
Joined
Nov 5, 2015
Messages
13,800
Reputation
12,959
Daps
49,844

A lot of good information. I currently work around a bunch of engineers that range from networking, artillery and satellites. I'm mostly interested in learning SATCOM because I see them working on them everyday and all the manuals and CD instructions are all there so I can easily just make copies. The staff also encourages I transition from the administration side to the direct side. They have great internship programs as well.
 

Gold

Veteran
Supporter
Joined
Aug 25, 2015
Messages
43,729
Reputation
19,642
Daps
292,843
A lot of good information. I currently work around a bunch of engineers that range from networking, artillery and satellites. I'm mostly interested in learning SATCOM because I see them working on them everyday and all the manuals and CD instructions are all there so I can easily just make copies. The staff also encourages I transition from the administration side to the direct side. They have great internship programs as well.

:ohhh:

I'm currently considering being a System Eng at AAFES (i need a change of scenery), I wonder if this is something I need to look into:jbhmm:
 

StretfordRed

Afro-European
Joined
Feb 9, 2014
Messages
11,283
Reputation
-2,005
Daps
32,797
A lot of good information. I currently work around a bunch of engineers that range from networking, artillery and satellites. I'm mostly interested in learning SATCOM because I see them working on them everyday and all the manuals and CD instructions are all there so I can easily just make copies. The staff also encourages I transition from the administration side to the direct side. They have great internship programs as well.

The more niche you go the better, but I guess the learning curve spirals.

I wanted to get into similar comms stuff after uni, but most of it was military related and it is against my morals. Additionally the UK isn't the best country for that for obvious reasons
 
Top