Career Development

This section of the web site provides security career development resources for infosec professionals in or around the Northern Virginia (NoVA) area. If there are any mistakes or information we should add, please let us know through our Contact Us form. For recent posts regarding this information, see the Recent Posts area below. Look for a complete list of all related posts on the Career Development category page.

This article is a starting point for developing a career framework/path for the Infosec person.

There are many defined career paths however the main ones are either choosing a Technical path or a Management path. There are also many formal programs, career paths, and training for management however these lack for the technical tracks. Ones exist for popular areas such as systems engineering but there doesn’t seem to be something for infosec. The goal of this article is to develop a framework to help you guide your career in the Infosec area.

Principal Infosec Analyst

The goal here is to obtain leadership positions for an Infosec team on major platforms.

Professional Experiences

  • Gain 7 more years of experience as a Senior Staff Infosec Analyst for a total professional experience of 24 years.

Training

  • Actively participate in Infosec conferences (submit papers to present) and association meetings (volunteer for a position to help run). See our Infosec Conferences and NoVA Meetups sections for ideas of local events to become involved with.

Certification Work

TBD

Development Tasks

  • Focus on doing an excellent job for whatever tasks you are doing; go above and beyond what is asked.
  • Work with mangement to obtain an Infosec lead position on a large program or major platform. Receive appropriate experiences and be successful at this InfoSec lead position.
  • Work with mangement to obtain an Infosec lead position on a major platform. Receive appropriate experiences and be successful at this Infosec lead position.
  • Work on publishing new research.

Senior Staff Infosec Analyst

The goal here is to obtain an leadership position for an Infosec team on a small program and work toward gaining lead positions on larger and larger programs.

Professional Experiences

  • Gain 7 years of experience as a Staff Infosec Engineer for a total professional experience of 17 years.

Training

  • Program/Project Management Training
    • Submit for and attend program/project management training.
  • Actively participate in Infosec conferences (submit papers to present) and association meetings (volunteer for a position to help run). See our Infosec Conferences and NoVA Meetups sections for ideas of local events to become involved with.

Certification Work

  • PMP Progress
    • Document current project management experiences, identify experiences/skills needed, and plan to obtain them.
    • Work on obtaining experiences/skills necessary to become a PMP.
    • Complete a PMP test preparation course.
    • Complete the PMP test.

Development Tasks

  • Focus on doing an excellent job for whatever tasks you are doing; go above and beyond what is asked.
  • Help current lead out by taking responsibility for completing his some of his management tasks.
  • Work with mangement to obtain an Infosec lead position on a small program. Receive appropriate experiences and be successful at this Infosec lead position. (perhaps start out being the security team of a proposal then doing another one being the lead)
  • Work with mangement to obtain an Infosec lead position on a moderately-sized program. Receive appropriate experiences and be successful at this Infosec lead position.
  • Work on publishing new research.

Staff Infosec Analyst

Professional Experiences

  • Gain 5 years of experience as a Senior Infosec Engineer for a total professional experience of 10 years.

Training

  • SANS
    • Take one or two SANS technical security classes.
  • Actively participate in InfoSec conferences (submit papers to present) and association meetings (volunteer for a position to help run). See our Infosec Conferences and NoVA Meetups sections for ideas of local events to become involved with.

Certification Work

  • CISSP Progress
    • Finish obtaining experiences/skills necessary to become a CISSP.
    • Complete a CISSP test preparation course.
    • Complete the CISSP test.
  • GIAC
    • Obtain one or two SANS technical security certifications (associated with training above).

Development Tasks

  • Focus on doing an excellent job for whatever tasks you are doing; go above and beyond what is asked.
  • Work on publishing new research.

Senior Infosec Analyst

Professional Experiences

  • Gain 3 years of experience as a Engineer for a total professional experience of 5 years
  • Obtain experiences in two or three disciplines from the CBK.

Training

  • Graduate Degree
    • Finish masters degree.
  • SANS Courses
    • Take one or two SANS technical security classes.
  • Attend InfoSec conferences and association meetings. See our Infosec Conferences and NoVA Meetups sections for ideas of local events to become involved with.

Certification Work

  • CISSP Progress
    • Prepare for and obtain the Associate CISSP certification.
    • Work on obtaining experiences/skills necessary to become a CISSP.
  • GIAC
    • Obtain one or two SANS technical security certifications (associated with training above).

Other certifications to consider include any of the technical ones offered by SANS.

Development Tasks

  • Focus on doing an excellent job for whatever tasks you are doing; go above and beyond what is asked.

Analyst

Professional Experiences

  • Gain 2 years of experience for a total professional experience of 2 years.
  • Obtain experiences in two or three disciplines from the CBK.

Training

  • Graduate Degree
    • Start working towards a masters related to some area of InfoSec.
  • Attend InfoSec conferences and association meetings. See our Infosec Conferences and NoVA Meetups sections for ideas of local events to become involved with.

Certification Work

  • TBD

Development Tasks

  • Focus on doing an excellent job for whatever tasks you are doing; go above and beyond what is asked.

Associate Analyst

This is the starting point for most; probably right out of school or starting out in a new career.

Recent Posts

[catlist=25]

For a complete list of all related posts see the Career Development category page.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.