Questions posed to me about information security careers

Questions posed to me about information security careers

21 Aug 2008

This is something I’m going to start doing more of on my blog…That is, posting questions regarding security careers that people email to me along with my responses back to them. I think this is something that many of you might benefit from.

Here’s a recent one from a software engineer with three years experience:
“…I work creating Web sites. I want to be an expert in information security for Web-based systems. I would appreciate your guidance.”

My response was the following:
“…Being a software engineer puts you in a good position to do Web security work. For starters, you should check out my book Hacking For Dummies as well as the books Hack Notes: Web Security Portable Reference and Hacking Web Applications Exposed. All three cover ethical hacking and Web apps. Then you could look into getting a certification such as Certfied Ethical Hacker, one of the SANS GIAC certs, etc. and eventually maybe the CISSP. Also, be sure to check out my blog at securityonwheels.com/blog, my past articles, etc. at www.principlelogic.com/resources.html, and my audio programs at securityonwheels.com/audio.html.”

Resources

Client Testimonials

“A business associate referred our company to Principle Logic when we were seeking a resource to perform vulnerability /penetration testing for our external and internal networks. We found Kevin Beaver to be professional, well informed, and easy to work with. His testing did not disrupt our networks, and his progress updates were timely.

His final report was very thorough and included security recommendations for our network environment. The executive leadership was so impressed with Kevin’s security expertise, they have extended their agreement to continue to perform periodic testing. We highly recommend Kevin Beaver and Principle Logic as a resource for network security testing.”

Kevin Beaver's Security Blog