3 ms·

I'm currently doing a PhD in electrical engineering. I've just finished my first year, and I'm starting to realize that the work I'm putting in to research proj

by Cyph0n 9y ago

I'm currently doing a PhD in electrical engineering. I've just finished my first year, and I'm starting to realize that the work I'm putting in to research projects isn't being appreciated monetarily. In other words, I feel like my time is worth more. I like to think of myself as a decent programmer, but I'm not well versed in software security (more of a hardware person). I've also never had a full-time job as I jumped straight from my BS to a PhD. I'm considering taking some security-related courses next year and getting my MS. I have two options after that: 1) look for summer internships in the field of software security and see if I like it, or 2) look for full-time positions and withdraw from the program temporarily to test out the waters. The issue with 1) is that there are less intern positions available, at least based on what I've seen. Am I approaching this correctly, or is there something else I could do? Any advice is appreciated!

tptacek 9y ago
If you were going to get an internship position anyways, getting an internship at a security company isn't a bad plan. I wouldn't take an internship rather than a starting-level full-time position though, if internships weren't already your plan.
- Cyph0n 9y ago
  Yeah, assuming I stick to the PhD, the default plan would be to do an internship every summer. I guess I'll start looking for potential companies before searching for something full-time. Thanks for the advice :)
goldenkey 9y ago
You don't get into security by taking courses. You do crackmes, you write shellcode, you hack games, you write keygens, crack licensed software/ patch it, write loaders..you packet sniff and figure out unknown binary protocols...you do things..because you want to. You don't get into security because you think its worth the money. You'll just get fleeced. Sorry, just being honest. If you can't even program, security is the last thing you can get into. Stick to legos mindstorm, kid.
joegosse 9y ago
>I've also never had a full-time job as I jumped straight from my BS to a PhD. Not having any work experience means you'll go through "University Recruiting" (vs experienced hire) recruiting channels at any large company. This gives you tremendous freedom to explore a variety of careers as employers will only be able to judge you by your academic credentials and you won't be pigeon-holed by your professional experience. Use this to your advantage and explore as many careers & companies as possible. Your internship will be your first professional anchor point so choose wisely - you may consider starting with a broader, more general software engineering experience before specializing to keep your options open.

by Cyph0n 9y ago

tptacek 9y ago

If you were going to get an internship position anyways, getting an internship at a security company isn't a bad plan. I wouldn't take an internship rather than a starting-level full-time position though, if internships weren't already your plan.

Cyph0n 9y ago
Yeah, assuming I stick to the PhD, the default plan would be to do an internship every summer. I guess I'll start looking for potential companies before searching for something full-time. Thanks for the advice :)

goldenkey 9y ago

You don't get into security by taking courses. You do crackmes, you write shellcode, you hack games, you write keygens, crack licensed software/ patch it, write loaders..you packet sniff and figure out unknown binary protocols...you do things..because you want to. You don't get into security because you think its worth the money. You'll just get fleeced. Sorry, just being honest. If you can't even program, security is the last thing you can get into. Stick to legos mindstorm, kid.

joegosse 9y ago

>I've also never had a full-time job as I jumped straight from my BS to a PhD. Not having any work experience means you'll go through "University Recruiting" (vs experienced hire) recruiting channels at any large company. This gives you tremendous freedom to explore a variety of careers as employers will only be able to judge you by your academic credentials and you won't be pigeon-holed by your professional experience. Use this to your advantage and explore as many careers & companies as possible. Your internship will be your first professional anchor point so choose wisely - you may consider starting with a broader, more general software engineering experience before specializing to keep your options open.