Introduction to US Cybersecurity Careers

Henry Dalziel

• Publisher: Syngress
• Year: 2014
• Print ISBN: 9780128027226
• eBook ISBN: 9780128027431
• Topic: Business
• Subtopic: Management
• Index: Business

Introduction to US Cybersecurity Careers is a concise introduction to the world of cybersecurity and the career opportunities therein. This book provides a basic rundown of industry sectors, roles, and places to search for job opportunities within the US cybersecurity industry. Within this book is vital information for anyone trying to get into the industry - basic knowledge for those looking to start training for a career, tips on networking and resume-building in a fast-evolving and nontraditional sector, and advice on how to get your foot in the door and become recognized in your field. This book is designed to help those who are just starting out in cybersecurity and those who have training and knowledge and want to get into the industry. Introduction to US Cybersecurity Careers is your first-stop reference for everything you need to know to start your journey. - Learn the basics of the digital security industry - Get tips on creating an effective resume and making contacts within the industry - Figure out the best certifications to pursue and what qualifications will get you your ideal career

Chapter 1

US Cybersecurity Jobs

Abstract

We start by reviewing the different “hacker” classifications, and then review the key knowledge, skills, and abilities (as determined by National Cybersecurity Workforce Framework) that specifically relate to penetration testers or ethical hackers.

Keywords

penetration tester

ethical hacker

white hat hacker

black hat hacker

gray hat hacker

blue hat hacker

blue team

red team

National Initiative for Cybersecurity Education (NICE)

National Cybersecurity Workforce Framework

NICCS

National Initiative For Cybersecurity Careers And Studies

Information security, or cybersecurity as it is often referred to, is a growing and exciting global industry. Our adversaries (which include state-sponsored “hackers”) are determined, intelligent, and increasingly resourceful at being able to disrupt our computer systems and networks. Combating the relentless cyber threat represents an enormous challenge for the US Government and private sector enterprises since the ramifications of inaction or incompetence are devastating. Consider this: 552 million identities were stolen in 2013 due to cyber breaches!¹

US cybersecurity jobs are well paid, and as we will shortly discover, they are in high demand. Central to this book is an unequivocal fact: The demand for cybersecurity professionals is outpacing supply in both the public and private sectors.

This book works on the assumption that you are, or have recently completed some form of formal further education in an IT-related subject and are keen to work in the field, that is, you want to be an active cybersecurity professional testing and patching networks and computer systems. We also assume that you are now looking to take the next step and start building your cybersecurity career. (Although we assume that you have some prior knowledge or training, we do cover further education opportunities in Chapter 8).

1.1. US cybersecurity job titles

We also assume that your first cybersecurity-related employment milestone will be to become a penetration tester or ethical hacker. Although these two job titles are probably the most popular, we should take a step back and appreciate that when you hear the term “cybersecurity professional” we could be referring to any one of the following job titles:

Cryptographer

• Source Code Auditor

• Digital Forensics Expert

• Forensic Analyst

• Incident Responder

• Security Architect

• Malware Analyst

• Network Security Engineer

• Security Analyst

• Computer Crime Investigator

• Chief Information Security Officer (CISO)

• Information Security Officer (ISO) or Director of Security

• Security Operations Center Analyst

• Prosecutor Specializing in Information Security Crime

• Technical Director and Deputy CISO

• Intrusion Analyst

• Vulnerability Researcher/Exploit Developer

• Security Auditor

• Disaster Recovery/Business Continuity Analyst/Manager

1.2. General “hacker” classifications

Let us define the main categories of security professionals that will be referred to in this book. Professional hackers (or “crackers”) will fit into one or several of the following categories:

1.2.1. White Hat Hacker

A “white hat hacker,” (that is the category that we belong to if we aim to initially become a “penetration tester”) will have permission to break security for nonmalicious reasons with the objective of patching or fixing-identified vulnerabilities.

1.2.2. Black Hat Hacker

On the complete opposite end of the scale is the “black hat cracker.” Typically, a black hat hacker will try to break into a secure network to destroy data or make the network unusable.

1.2.3. Gray Hat Hacker

A “gray hat hacker” is a combination of a black and white hat. A gray hat hacker may surf the internet and hack into a computer system for the sole purpose of notifying the administrator that their system has a security defect. They may then offer to correct the defect for a fee. Many websites such as Facebook and Ebay offer bug bounties (please refer to Chapter 3 for more information), which means that anyone who finds a vulnerability or weakness can disclose the hole and receive a reward.

1.2.4. Blue Hat Hacker

A “blue hat hacker” (similar to gray hat) is someone who bug-tests a system or application prior to its launch, looking for exploits to be closed. It is worth mentioning that Microsoft uses the term “blue hat” to represent a series of security briefing events.

...

Table of contents

• Cover
• Title page
• Table of Contents
• Copyright
• Author Biography
• Introduction
• Chapter 1: US Cybersecurity Jobs
• Chapter 2: The US Cybersecurity Industry
• Chapter 3: 17 Tips on How to Land Your First Cybersecurity Job
• Chapter 4: Networking Advice for Cybersecurity Job Seekers
• Chapter 5: How to Create a Cybersecurity Resume
• Chapter 6: Cybersecurity Job Resources
• Chapter 7: Interview Hacks and Tips
• Chapter 8: Suggested Beginner and Intermediate Cybersecurity Training and Certifications
• Chapter 9: Summary