6 ms·
I've enjoyed Troy's posts explaining past high-profile hacks, so I assume the content he created for Pluralsight is pretty good, too. I'm glad he didn't direct
by mi100hael 10y ago
I've enjoyed Troy's posts explaining past high-profile hacks, so I assume the content he created for Pluralsight is pretty good, too. I'm glad he didn't directly tailor them to the CEH, because from what I've seen it's not the most esteemed certification. Most managers I've talked to on the security side of things have said something like Security+ is a good starting point for newbie hires, and CISSP or OSCP are a decent indicator for mid-to-senior hires.
In general though, the prevailing sentiment has been that demonstrated experience is the #1 factor. Infosec isn't a career path that begins as a totally oblivious hire after floating around in college. It begins in your bedroom in the evenings poking around bug bounties or playing on hackthissite.org and its forums and that sort of thing. A professional setting isn't required to gain some good real-world experience, so there's no reason you should be inexperienced by the time you're sitting for your first professional interview.
- phaus 10y agoA CISSP is only a good indicator that someone wants a free ride past HR. As a technical certification, or a measure of technical ability, it is worthless.
- toss1941 10y agoI wouldn't say worthless, a lot of CISSP's are in management where actual technical ability gets delegated to non-CISSP's. I'm pretty confident that most CISSPs could pick up almost any security-related technical skill if they were motivated to do so.
- phaus 10y agoThe context of this thread is that we're talking about technical positions. If you see my other comment, I already mentioned that it's a management cert. Also, if a person with a CISSP is capable of picking up technical skills, that's simply coincidental. The CISSP didn't teach them to learn technical skills, it's completely unrelated. In my experience, motivation is the largest factor in learning anything, so of course a person motivated to spend time learning a specific subject is capable of picking it up.
- fencepost 10y ago> A CISSP is only a good indicator that someone wants a free ride past HR. If you consider HR as a first firewall to get past, that may make CISSP certification not such a terrible option. If you can get past the outermost protection layers, you can start poking at the inner layers that may be more soft and squishy.
- mr_overalls 10y agoSeconding the value of the OSCP. It's on the very few certs that offensive professionals actually respect, due to its intensive hands-on demands.