TBO.com - TBO is Tampa Bay Online

Breaking into the security industry

ADVERTISEMENT

By BOB WEINSTEIN, Special Sections correspondent

Published: December 30, 2007

"Security" is the power career word for 2008. It translates into dozens of career opportunities offering growth and excitement. It also crosses all industry and organizational barriers. If you've never considered this exciting field, there is no better time to investigate its niche specialties.

In the past, many organizations gave short shrift to securing and safeguarding the workplace, according to Norman Rankis, executive director of the Pennsylvania School of Business in Allentown, Pa., and security adviser to federal and state agencies. That's no longer true. It's become a priority and companies, nonprofit organizations and government agencies are investing more in security technology every year.

Looking for ground-floor opportunities? The security industry offers multiple entry points. It's just a question of finding one that fires your imagination. Here are a few important ones to consider, according to Rankis:

- Information security management: The ISM professional specializes in risk analysis and assessment, security policy development and controls, education of users and incident response.

- Security architecture and models: Encompasses the entire security system, paying close attention to application programs, utilities, operating systems and computer hardware and network administration.

- Access control systems: Involves system security options that control access to the (military or business) organization's information. An example of a facet of ACS is an ATM card to access bank accounts. ACS is a complex security area that requires an understanding of authentication protocols.

- Applications and systems development: This is the application of security concepts to the software development and maintenance processes. You don't have to be a crackerjack programmer, but you do have to understand the basics of code and software design and development.

- Operations security: Identifies, reviews and applies security access privileges to selected users. The goal of operations security is safeguarding system data and resources.

- Cryptography: A method of disguising confidential information so that it is not recognized. If you enjoy doing crossword puzzles, cryptography may offer the challenge you're seeking.

- Telecommunication, networks, and Internet security: It covers data transmission methods, private and public communications networks, firewalls, gateways and protocols.

Myths and realities

If you've watched too many hunt-and-chase and terrorist films, it's very easy to get the wrong idea about the security field. Even many of the so-called glamour investigative security jobs are not the way they're depicted in big-budget Hollywood films.

"If you're looking for a cloak-and-dagger, hunt-the-bad-guys kind of job, you're going to be disappointed," Rankis warns. "There are plenty of exciting security jobs, but most of the entry-level jobs involve sitting in a cubicle staring at a computer monitor most of the day. You could be studying software for anomalies — irregularities which point to hacking attempts, for example; or you might be poring over data or reports to uncover security breaches."

The more you know about the niche security fields that make up the security industry, the better you'll be able to find an area that fascinates you and offers solid career potential. Also consider that the field is changing rapidly. Every year there are breakthroughs and accompanying technology. That translates into new jobs. "There aren't many fields where there are ground-floor opportunities at every career level," Rankis says. "The security industry is one of them."

Like any field, knowledge and experience translate into fatter paychecks and better job titles. Entry-level job salaries, for example, are $27,000 to $35,000, depending upon the industry and organization. Financial services, insurance and health care companies pay higher starting salaries than other industries, according to Rankis.

A security certification from the SANS Institute, Linux, Microsoft or the Systems Security Certification Consortium can boost your salary significantly. A certified network security project manager potentially could earn a six-figure salary.

For information, contact the Systems Security Certification Consortium (www.isc2.org) in Palm Harbor and the SANS Institute (www.sans.org) in Bethesda, Md.

Share this:

Email Print

ADVERTISEMENT