4 ms·
I worked in this company where we had a dedicated security team, the pentesters were either outsourced or underpaid goons with an excel cheatsheet of things to
by mpeg 13y ago
I worked in this company where we had a dedicated security team, the pentesters were either outsourced or underpaid goons with an excel cheatsheet of things to try. The managers were MBAs with CompTIA certs.
Now, this is only my experience, but I've never really seen all-rounded security people being valued in companies, apart from maybe small consultancies where getting a job is probably mostly governed by luck and being in the right place, at the right time :)
- FreakLegion 13y agoIt depends both on the company and on the role. Certs can be important for contract/services work, so if you're looking at a company that bills people out to clients, and that would be your role, you'll probably needs certs, as some clients (e.g. government) require them. If you're looking at joining an internal security team at a company -- even a big one like Visa or Intel -- the certs tend to be less important. Plenty of people, as you move up the management chain, have certs, but usually because the employer footed the bill. My evidence is anecdotal, obviously, but everyone I know who's joined an internal security team got the gig based on skills and experience. None of them had certs. (And the offers I've received myself weren't based on certs, since I don't have any!)
- wglb 13y agoFrom everything that I can see, there is pretty much negative unemployment for seriously good, uncertified, high-talent penetration testers. I directly know of a few places that are very seriously trying to staff up with non-goons. I expect some to show up on HN tomorrow, in fact.