1

Hello All,

What is the best route to take to try and start a career in Network Security. I have worked for almost 20 years in support roles and am now looking for a change. I have always been interested in the networking side of IT but have never pursued it.

What would be a good starting point. I was thinking about doing the CCNA and CompTIA Security+. If I enjoyed them I could then look at more advanced qualifications.

Has anyone here moved into Network / Cyber Security from other areas of IT - if so what path did you follow.

Many Thanks

11 Spice ups
2

So much of the answers to your questions depends on you. I have been transitioning from IT management to security for some time. I would say the best path is to get in the weeds of something and pursue it. Example: if you enjoy networking and network support then jump into network security and try to move into those types of roles as a security analyst or a firewall admin. Then if that goes well you can add to your experience. With 20 years in support I am sure you have seen it all and just need to get a foot in the door in a security role. Good Luck.

3

I am CCNA, CISSP, CISM. The CCNA will do not do a whole lot for a security career. If you want to get started on just understanding networking then the CCNE will get you there. I would skip Comptia, nobody really respects them.

What to get depends on what job you want to go after. The CISSP is more of a conceptual exam. It tests that you know the terms and concepts of security and how they relate to each other. It does not test how to do anything. Certs from places like GIAC are more to prove that you know how to use specific tools. There is no perfect but the CCNE, followed by either the CISSP or a GIAC cert is a good start.

4

Thanks for the responses folks… very much appreciated. @SeanW. My thinking for doing the CCNA and Sec+ is that I have no great knowledge of network systems, routing, switching etc… and was thinking that both would give me a good (if basic) knowledge to start from

5

Hey Tech,

If you were considering @CompTIA for Network+ I wanted to pass along a few (and free) resources along!

We also have the recently launched CompTIA Cybersecurity Career Pathway you can take a look at as well as our Cybersecurity Hub with quizzes, more info on certs and jobs in the field!

6

The best advice is to go and talk to people who do what you think you want to do and pick their brain about how they got there, why they went into it, what they do, how they continue to learn and advance, and how they like it. Go learn about the different companies that do security as a service and learn about their products. Start looking at the job descriptions now for what you want to do some time in the future, and look for relatable experiences in what you do now. Have the stories ready to tell. Figure out how to reinvent yourself. Then you can systematically begin making yourself better and reaching toward your goal. And start listening to podcasts in that security space. I’d also recommend The Geek Whisperers to help think about career in general, and listen to the stories of people who have done the thing you want to do (change a career).

User groups like SpiceCorps and others are great for talking with people about what they do. Good luck, and if you find this to be what you really want, don’t stop trying until you make it happen.

1 Spice up
7

I’m looking to make this move myself. I’m currently a one man show, so I’m doing most of my study time on my free time. I’m mostly interested in Pen Testing.

1 Spice up
8

Same situation here.

I have been in support for 3 years and now I want to turn into Security. Before that I did networking but passive equipments like building networks from scratch.

I have basic knowledge of networking and I studied by myself Security+ and Network+ but without practice, in a few months, what goes in goes out. I am more in practice than theory.

I have taken 2 interviews for two different security roles (beginner).

At the first one I was rejected after the 2nd interview (I was given a test with 30 questions from networking and security concepts and best practices)

At the 2nd job I took a 30 question test (more specific and harder than the first one) about security principles and networking (mostly CompTia N+ and Security+). An this one I am waiting for the answer. It is possible I pass this test as I verified the answers (the ones I was not sure about) and seems like I did good. Now comes my question: beeing a 3 months training academy (paid) with 2 certs to give and take, what should I do if the payment is under my actual wage like 66-70% of what I get now?

I am 39 and I have 2 kids to support. I like and want to get into security. Everything that I have learned ever was by myself. At my actual job I don’t have many options to promote as we are 2 guys in the team: me and my manager (who happens to be a friend of mine from high school).