RE: Sr. Security Consultants

From: Bob Radvanovsky (rsradvanat_private)
Date: Mon Aug 19 2002 - 15:08:09 PDT

  • Next message: Michael Henry: "Re: Sr. Security Consultants"

    Charles --
    
    I am finding out that the pendulum has swung the other way 
    completely.  Companies want people who are working for them, at a fraction 
    of the cost from a few years ago.  Within the INFOSEC community (and it's a 
    very small and close-knit group), money really isn't (or shouldn't be) the 
    main focus and objective.  Companies want to know that the person who's 
    going to do the job is trustworthy, and cheap.  Cost has always been a 
    factor in everything, but if the person is exceptionally good at what they 
    do, the cost won't matter.
    
    What I have found from companies in the "workplace desert" we have right 
    now, are the following criteria:
    
     >> Ph.D in field of study or skillset
     >> 4.5 (out of 4.0) GPA from local college or university
     >> multiple degrees (if possible)
     >> 21-23 years of age
     >> know every known language on the face of this planet
     >> know every known operating system on the fact of this planet
     >> have worked in transportation, energy, research, financial industries
        over the past 12 years (combined or separately)
     >> CISSP, MCSE, MCSA, CNE, CNA, CCIE, CCNP, CCNA, CCDP, CCDA, SSCP, SCCP,
        SCSA, CCSE, CCSA, GCIA, GCFA, GCSP, LINUX+, LDI, SECURITY+, NETWORK+, A+
     >> no prior criminal conviction or prosecution
     >> no tie-ins with any Communist organizations
     >> ... and work for $14,000 per year.
    
    Those are the requirements.
    
    This has been what I've found out working at various places.  Again, just 
    my $0.02 worth (and in today's economy, this wouldn't even get you a stick 
    of bubblegum)
    
    -r
    
    At 03:59 PM 8/19/2002, you wrote:
    >Just a question for the group, how is employment as a security engineer 
    >with a consulting company today?  Is it as good, better or worse than 
    >working directly for a company?  I know consulting was the way to go a few 
    >years ago, but is it the same today?
    >
    >Just curious,
    >
    >Charles
    >
    >-----Original Message-----
    >From: Max Fortuna [mailto:mjfortunaat_private]
    >Sent: Friday, August 16, 2002 9:42 PM
    >To: securityjobsat_private
    >Subject: Sr. Security Consultants
    >
    >
    >
    >
    >Avaya Security Consulting Services is looking for candidates in the
    >NYC,and Washington DC Area.
    >
    >Business Group:    Avaya Security Consulting Services
    >
    >Job Category:    Security Consulting
    >
    >State/City (US):    NYC, Washington DC
    >
    >Country:    United States
    >
    >Job Description:
    >NCS (Network Consulting Services) supports a portfolio of consulting and
    >engineering offers addressing the planning and design phases of a
    >converged network lifecycle and network security.  Candidates must have
    >experience with intrusion methods and assessment tools using ISS, Satan,
    >Nessus, Nmap, Snort, Axent, and sniffers. Experience with IP based
    >firewalls, routing filters, and host level access controls and
    >authentication systems to include SSL, PGP, IPsec, SSH, Radius, Kerberos,
    >SecureID, and TCPWrappers. Additional qualifications include experience
    >with intrusion detection systems (IDS), virtual private networks (VPN),
    >public key infrastructures (PKI), and Smart Cards.  Senior Security
    >Consultants will be responsible for security policy assessments, network
    >security assessments, and network security design for Avaya clients.
    >
    >Qualifications:
    >In addition to the above skills, candidate must have a minimum of 7+
    >years of security experience in multiple operating systems to include
    >Linux, Windows, Solaris, and BSD.  Experience with security architecture
    >and design principles, solid written/verbal skills, and the ability to
    >present to large audiences.  Minimum BA/BS preffered.  Must be willing to
    >travel up to 50%.
    >
    >
    >________________________________________________________________
    >The information contained in this message is intended only for the 
    >recipient, may be privileged and confidential and protected from 
    >disclosure. If the reader of this message is not the intended recipient, 
    >or an employee or agent responsible for delivering this message to the 
    >intended recipient, please be aware that any dissemination or copying of 
    >this communication is strictly prohibited. If you have received this 
    >communication in error, please immediately notify us by replying to the 
    >message and deleting it from your computer.
    >
    >Thank you,
    >Standard & Poor's
    >
    >-------------------------------------------------------------------------
    >This email server is running an evaluation copy of the MailShield anti-
    >spam software. Please contact your email administrator if you have any
    >questions about this message. MailShield product info: www.mailshield.com
    
    
    -------------------------------------------------------------------------
    This email server is running an evaluation copy of the MailShield anti-
    spam software. Please contact your email administrator if you have any
    questions about this message. MailShield product info: www.mailshield.com
    



    This archive was generated by hypermail 2b30 : Mon Aug 19 2002 - 16:09:25 PDT