Logically, I would agree that now is the time for security professionals. Information system are being connected over the Internet into a huge loosely coupled information federation, which exposed it to security risks. But, on the other hand, we are in recession, and security is not viewed as the core of the businesses (exception is a small number of security companies). But, IMHO, the lack of security is (and will be more) threatening the core of any business. The other reason is that the executive management (average age 45-65) does not understand the value of information security and thus do not take actions. Don't be fooled by a few very vocal companies that do understand it and promote it. But the time is on the info security site. Business over the internet will elevate the importance of security professionals. IMHO, the future will be in operational security field - security professionals running the security of enterprises. David Greenstein, CISSP, ITMCP -----Original Message----- From: Joe Judge [mailto:joeat_private] Sent: Saturday, September 22, 2001 10:55 AM To: securityjobsat_private Subject: RE: Any profitable SECURITY-ONLY companies? I agree ... except that the small 1-10 person shops are close to dying also. So whats the truth, the messages are: security jobs are posted need for security strong big articles about how IT security budgets are "soaring" ... but no one is really hiring?? There are enough strong security folks on the beach right now to form one hell of a company (infosec, compsec, security ops & engineering people). -- joe joe judge, boston, security guy, www.intrusion.org > -----Original Message----- > From: Anton Chuvakin [mailto:antonat_private] > Sent: Thursday, September 20, 2001 6:19 PM > To: securityjobsat_private > Subject: Any profitable SECURITY-ONLY companies? > Importance: High > > > Hello all, > > In the course of my current job search, I seem to have developed a strange > conclusion about the infosec companies: they are either start-ups running > on the last drops of venture capital (well, last drops might be $40 mil > received in Fall 2000, but for the sake of argument - it is still venture > money) or small 1-10 person shops that are profitable because they stay > small. Both offer little in terms of potential employment: I rule out > first group due to my recent experience and second are not hiring at all. > > Well, there are also behemoths like NAI or Symantec, which are heavily > involved in security, but it is quite impossible to get in (no matter how > many times one reads "What color is your parachute" book ;-). > > Maybe I am mistaken in restricting my job search to security companies > only, but I do that due to the fact that most fun jobs seem to be there. > Compare designing a new IDS to ensuring HIPAA compliance of a hospital and > you will understand what I am talking about. > > Am I wrong (hopefully) or what? I just came back from a local ISSA chapter > meeting and we were presented with a hyper-optimistic speech on how the > need for security will drastically grow in the next 12-24 months, but I am > unwilling to wait that long (need to eat something before that ;-)). > > Best regards, > -- > Anton A. Chuvakin > === You either succeed or learn! === > http://www.chuvakin.org > licq: 29034084 >
This archive was generated by hypermail 2b30 : Sun Sep 23 2001 - 09:49:40 PDT