IT support looking for Cyber Security course

[ongzai]

I am the IT support and have few years experience.
I am finding the cyber security course to study but no idea which course is suitable for me.

Any recommendations that i should study a foundation or a specific certificate?
Thanks

 

[Lastexile]

need more information to give you better advice..

What kind of IT support are you doing and what are the technologies you are working with?

Also interest for any specific cyber security domain - Security Operations, Security Testing, Compliance, Incident Response and Forensic etc.

 

[ongzai]

need more information to give you better advice..

What kind of IT support are you doing and what are the technologies you are working with?

Also interest for any specific cyber security domain - Security Operations, Security Testing, Compliance, Incident Response and Forensic etc.

Hi
Something like Desktop support/hardware support.
My first job is IT helpdesk and now is Service delivery engineer
I had read and watch free intro of cyber security, so i have confused that should I study foundation of cyber security or certain part of cyber security I interested?
I hope i can change it career to security engineer etc.

Thanks

 

[Cryophoenix]

What’s your highest qualification? Can consider doing part time degree in information security or even security certs like CISSP, GSEC, etc.

 

[Lastexile]

Hi
Something like Desktop support/hardware support.
My first job is IT helpdesk and now is Service delivery engineer
I had read and watch free intro of cyber security, so i have confused that should I study foundation of cyber security or certain part of cyber security I interested?
I hope i can change it career to security engineer etc.

Thanks

Security Engineer is pretty broad ranging from people write code and develop security tools and products to people just deploying firewall and security solutions.

I suppose the latter will fit you better. From how I see, you need to have proper understanding of networking since a lot of security solutions and products have to be integrated into the network. Then you need to understand what are the security solutions out there like Firewall, Proxy Server, IPS, VPN, WAF, SIEM, EDR, AV, Patch Management systems etc.

I would recommend going for generic security certification such as Security+, SSCP or CISSP to give you some theoretical knowledge of security and where those products sit. Hopefully you can your foot into the door.

I won't recommend taking product based certs since if you are working for a company, the company would normally send you go training because you will be working with whatever products the company is working.

 

[seesiang]

I am the IT support and have few years experience.
I am finding the cyber security course to study but no idea which course is suitable for me.

Any recommendations that i should study a foundation or a specific certificate?
Thanks

Security is getting wider.

Previously it was only pen test. audit, implementation, management, forensics.

I think now it getting broader such as reverse engineering, threat hunting etc.

Back to your question, what is the recommendation? It depend on your goal. Will you be a happy man if I throw you to face C-level and interview them as auditor? Or will you be a happier man by facing tons of words that will churn out into application etc.

SSCP is similar to CISSP. The questions are pretty direct. But compare to Security+, it is tougher. And this build your foundation better if you are heading towards CISSP.

 

[ongzai]

What’s your highest qualification? Can consider doing part time degree in information security or even security certs like CISSP, GSEC, etc.

Hi there
My highest qualification is just an IT diploma...
Yea, i need decide whether study part time full course or security certificates.

 

[ongzai]

Security Engineer is pretty broad ranging from people write code and develop security tools and products to people just deploying firewall and security solutions.

I suppose the latter will fit you better. From how I see, you need to have proper understanding of networking since a lot of security solutions and products have to be integrated into the network. Then you need to understand what are the security solutions out there like Firewall, Proxy Server, IPS, VPN, WAF, SIEM, EDR, AV, Patch Management systems etc.

I would recommend going for generic security certification such as Security+, SSCP or CISSP to give you some theoretical knowledge of security and where those products sit. Hopefully you can your foot into the door.

I won't recommend taking product based certs since if you are working for a company, the company would normally send you go training because you will be working with whatever products the company is working.

Hi there

Many thanks for your recommend.
Kaplan, horizon or NTUC also can get the certificate eg SSCP or CISSP to study right?

 

[ongzai]

Security is getting wider.

Previously it was only pen test. audit, implementation, management, forensics.

I think now it getting broader such as reverse engineering, threat hunting etc.

Back to your question, what is the recommendation? It depend on your goal. Will you be a happy man if I throw you to face C-level and interview them as auditor? Or will you be a happier man by facing tons of words that will churn out into application etc.

SSCP is similar to CISSP. The questions are pretty direct. But compare to Security+, it is tougher. And this build your foundation better if you are heading towards CISSP.

Hi there

Now I am always faced C-level and would be choose the latter...
I had do some free question of security+ on ComptTIA
And i feel i can pass the exam if i study the security course.

 

[paper82]

Hi there

Many thanks for your recommend.
Kaplan, horizon or NTUC also can get the certificate eg SSCP or CISSP to study right?

Dont waste money go for SSCP / CISSP training class cause you can self learn.

SSCP & CISSP both is theory . Just self study 2-3 month and practice will get you to pass .

i have a few friends work as sales and get CISSP within half year .

 

[paper82]

Hi there

Now I am always faced C-level and would be choose the latter...
I had do some free question of security+ on ComptTIA
And i feel i can pass the exam if i study the security course.

CompTia Security + is good for build foundation .

Better dont dump and pass by yourself .

 

[MBoI1986]

Dont waste money go for SSCP / CISSP training class cause you can self learn.

SSCP & CISSP both is theory . Just self study 2-3 month and practice will get you to pass .

i have a few friends work as sales and get CISSP within half year .

Your sales friends quite power.

 

[paper82]

Your sales friends quite power.

Just a Management based certificate and is theory base .

if u ask my sales do technical he sure cmi ..

 

[nahbehism]

Hi.. i surfed the skillfuture website and found alot of advanced course in cybersecurity. I wish to improve on my technical portion. Is there any recommended course to go to?

 

[bioanarchism]

If you are looking for generic broad-sweeping understanding, perhaps you can consider trying out CompTIA Security+, which is a vendor-neutral certification and that is a good launching pad to start from.

 

[Ks1991]

I have a diploma in IT with a degree in cybersecurity and forensic from Murdoch University.
Been working in the military till now and looking to switch my career towards the IT sector.

As of now, my eyes are on the Penetration Tester/Ethical Hacker path.
I am recommended to go CompTIA Security+ --> CEH --> OSCP.
What do experts here think or will like to recommend?

 

[andee]

Hi there

Now I am always faced C-level and would be choose the latter...
I had do some free question of security+ on ComptTIA
And i feel i can pass the exam if i study the security course.

Usually, a security related job would require CISA, CISSP or CISM. Of the 3, CISA is easiest to study and pass. Don't waste too much time going for other certs and just concentrate on either of the 3. That should open a way into companies. From now till you get your cert and then applying for security related job, talk to your manager and ask for opportunities to work on anything IT Security related projects, even deploying/managing anti-malware also ok. That would be a supporting bullet in the interview with the future company.

 

[andee]

I have a diploma in IT with a degree in cybersecurity and forensic from Murdoch University.
Been working in the military till now and looking to switch my career towards the IT sector.

As of now, my eyes are on the Penetration Tester/Ethical Hacker path.
I am recommended to go CompTIA Security+ --> CEH --> OSCP.
What do experts here think or will like to recommend?

You are already quite well equipped for a security role. All you need is either of the trinity of "door opening" certs which are CISA, CISSP or CISM. Once you have either one, get into a job or get the CEH, OSCP. Either way should be fine.

 

[iamnotlame]

I have a diploma in IT with a degree in cybersecurity and forensic from Murdoch University.
Been working in the military till now and looking to switch my career towards the IT sector.

As of now, my eyes are on the Penetration Tester/Ethical Hacker path.
I am recommended to go CompTIA Security+ --> CEH --> OSCP.
What do experts here think or will like to recommend?

Certifications are good for you to have but actual experience is more powerful than any certificate. Having said that, what are you working on in the military? Perhaps you can leverage that in your quest to become a penetration tester? Your military mindset can be use for cyber defense, think about SIEM (Security Incidents and Events Monitoring) or SOC (Security Operations Center) analyst and/or specialist role.

Try looking at some SANS courses, they are quite pricey but worth the money if you put them in practice. All the best.

 

[Trader11]

Certifications are good for you to have but actual experience is more powerful than any certificate. Having said that, what are you working on in the military? Perhaps you can leverage that in your quest to become a penetration tester? Your military mindset can be use for cyber defense, think about SIEM (Security Incidents and Events Monitoring) or SOC (Security Operations Center) analyst and/or specialist role.

Try looking at some SANS courses, they are quite pricey but worth the money if you put them in practice. All the best.

Now days you need to be a bug bounty hunters in order to get hired as pentester. The bar is raised.