CEH

[nahbehism]

pardon my noob question.... if i m a helpdesk now.. and i attend the CEH course and get certified.. does it means i have a chance to be working on IT security related jobs?

 

[FreDeRicK]

Many IT security related jobs require real industry experience. Unless you can find a company who is willing to let you learn on the job, but very few companies would, because security is important and a mistake usually means impact to the business and/or reputation.

As with many things in life, the CEH certification may open doors for you, but it is not a sure-fire way to get into IT security field.

 

[seawyk]

i agree... just becoz one attended a course and got certified may not mean that person knows what to do. It does put you at a slight advantage though

 

[SomethingWrongHere]

CEH is just a cert and does nothing unless u go further with pen-test, else take CEH is just waste $$$.

As FreDeRicK says, u need real life exp but companies willing to take you in is like finding a needle in a haystack.....unless u join "STRAT - e-Cop (IT Security)"

 

[nahbehism]

CEH is just a cert and does nothing unless u go further with pen-test, else take CEH is just waste $$$.

As FreDeRicK says, u need real life exp but companies willing to take you in is like finding a needle in a haystack.....unless u join "STRAT - e-Cop (IT Security)"

thanks for your ur valuable insight.. sometimes I find IT really sucks.. u can take a lot of certs but it proves no value.. and those cert cost u a bomb..

 

[nuilnuil]

If you really interested in IT security, get yourself handon either infra / system trained. As these will be your foundation to get into security.

But why you want to get into security? Now the SI working on government projects kenna left right center liao.

 

[seowbin]

e cock will accept u if you have at least ccna i guess ? if not, just try your luck... you might get in..

i still remember doing their test.. some network related questions.

that's a good starting point if u die die wanna get into security and easiest way but it's those rotational 12 hours shift... boring sh*t

surf net and surf net till u peng...

 

[Semimaru]

CISSP would be more useful in this case, but the prerequisites are quite high, like need exp in 2 domains then can take.

CEH just teaches you methodologies, not really a good overview in security.

 

[Kage82]

Are there other recognized certifications for Penetration Testing in Singapore?

 

[dwan]

Are there other recognized certifications for Penetration Testing in Singapore?

GPEN: GIAC Certified Penetration Tester
http://www.giac.org/certification/gpen

 

[Trendnet18]

better to take GCIH before GPEN

for CISSP you can be CISSP associate if u dun have experiance

 

[HDumpTY]

pardon my noob question.... if i m a helpdesk now.. and i attend the CEH course and get certified.. does it means i have a chance to be working on IT security related jobs?

you should try taking server courses instead.

 

[natasha_saw]

Are there other recognized certifications for Penetration Testing in Singapore?

LPT?

 

[lesley82]

CEH+ECSA this shld be the least credible course in IT security

CISSP is more recognized, but not easy to pass

Sans GIAC Courses also not bad but they like split up CISSP into different course, so more concentrate into each domain

For start, I would recommend you take the specialist diploma of IT security in NYP, this will give you a rough idea of IT security and makes you half-prepared for CISSP

 

[tarui04]

Bookmarked

 

[Hellooo]

anyone works in e-cop before?

how is the working environment and turnover rate?

 

[lancified]

If you want to get into IT sec, dont bother with certs first. Change your mindset and be security-centric. Many IT guys from infra/systems/networks/apps go for certs and fail terribly at the interview sessions.

Im in the security field for 5 years now, and have interviewed many guys wanting to join, so maybe these tips will be able to help you.

- Practice. Security exists in all IT related pillars. If you are a network engineer now, blocking unused ports is a security action. Analyzing traffic packet is a investigation. You are doing it daily, without you knowing it. For systems, if you can harden your machine, you can do security. Designing an app and running the code against known vulnerabilities, that's security too. By informing your interviewer that you are capable of doing these, you will definitely net a entry job in security.

- Stepping stone. Watch the job market. sometimes when a new tender is awarded, the vendor will be in a rush to hire entry level guys. Take the chance and join them, even though the pay is crap and hours are erratic. The job will probably suck too, as you will be basically picking up calls and doing very low level operator tasks. However, if you can tough it out, the weak will leave and you will assume more roles, and hence learn the more "advanced" roles in security, such as malware analyzing, traffic investigation and ruleset crafting.

You need to understand how security works. It's not like military where you shoot me, I shoot you back. In most cases, you only defend and mitigate. It's like someone slapping you, but you can only block or dodge. It takes a strong minded person to do that.

Good luck

 

[seesiang]

If you want to get into IT sec, dont bother with certs first. Change your mindset and be security-centric. Many IT guys from infra/systems/networks/apps go for certs and fail terribly at the interview sessions.

Im in the security field for 5 years now, and have interviewed many guys wanting to join, so maybe these tips will be able to help you.

- Practice. Security exists in all IT related pillars. If you are a network engineer now, blocking unused ports is a security action. Analyzing traffic packet is a investigation. You are doing it daily, without you knowing it. For systems, if you can harden your machine, you can do security. Designing an app and running the code against known vulnerabilities, that's security too. By informing your interviewer that you are capable of doing these, you will definitely net a entry job in security.

- Stepping stone. Watch the job market. sometimes when a new tender is awarded, the vendor will be in a rush to hire entry level guys. Take the chance and join them, even though the pay is crap and hours are erratic. The job will probably suck too, as you will be basically picking up calls and doing very low level operator tasks. However, if you can tough it out, the weak will leave and you will assume more roles, and hence learn the more "advanced" roles in security, such as malware analyzing, traffic investigation and ruleset crafting.

You need to understand how security works. It's not like military where you shoot me, I shoot you back. In most cases, you only defend and mitigate. It's like someone slapping you, but you can only block or dodge. It takes a strong minded person to do that.

Good luck

i believe you are trying to express as "knowledge".

Without qualifications and certifications, we could not open the door towards interview. These two are the key elements to open up the door towards interview. Working is lifelong learning. This is also a key element for employer too.

I shared similar background to thread starter. I came from a humble IT helpdesk background. What does the thread starter want, is to obtain a door for interview to express himself/herself. I believe also that the thread starter wish to market himself/herself in the best position so that their future employer will hire them.

Knowledge is wealth. We should not be doing paper chasing but we must constantly upgrade our knowledge.