Degree for job in IT security

[RedString]

I'm getting an AAS at some crappy community college and planning to go to a university afterward. I know what certs I need, but what degree would be best for this sort of thing? Where would you recommend my focus?

 

[Lyfer]

Only job security now a days is being a drug dealer.

 

[kyrax12]

Only job security now a days is being a drug dealer.

Damn it dude.. I am depressed now.

 

[nonameo]

Only job security now a days is being a drug dealer.

Even security guards have no security.

HEY! there you go! security certs

 

[Dr. Zaus]

IN IT security; not that would offer job security.

Management/Computer information systems; generally in the school of business. it'll make you desirable both because you know computer IT stuff and because you can talk to the suits.

Great detree for anyone that's not interested in being an engineer/scientist.

THE degree if you want to have an IT degree.

make sure your business school is AACSB accredited.

 

[Leros]

IN IT security; not that would offer job security.

Management/Computer information systems; generally in the school of business. it'll make you desirable both because you know computer IT stuff and because you can talk to the suits.

Great detree for anyone that's not interested in being an engineer/scientist.

THE degree if you want to have an IT degree.

make sure your business school is AACSB accredited.

I have a friend who did an MIS degree (same as what you mentioned). From what he told me, he did very little pertaining to computers or IT. I feel he would have been screwed (learned no skills) if he hadn't interned for 3 years during college.

 

[Dr. Zaus]

I have a friend who did an MIS degree (same as what you mentioned). From what he told me, he did very little pertaining to computers or IT. I feel he would have been screwed (learned no skills) if he hadn't interned for 3 years during college.

Hum... I had 4 courses in programing proper; 3 the ASP/SQL web-programing environment and 2 in data-base administration... along with another 'path' of electives that allowed for 3 more courses in networking and security.


I guess it pays to check out what course's you'll take.

 

[SandEagle]

Cissp.

 

[Leros]

Hum... I had 4 courses in programing proper; 3 in 3 there client-server programing and 2 in data-base administration... along with another 'path' of electives that allowed for 3 more courses in networking and security.


I guess it pays to check out what course's you'll take.

This guy had a very basic programming course. They spent a month or so learning basic programming skills using Java. They spent a month learning basic HTML. Another month spent doing batch scripts and stuff. That was it. He must have just had a shitty program.

 

[Dr. Zaus]

This guy had a very basic programming course. They spent a month or so learning basic programming skills using Java. They spent a month learning basic HTML. Another month spent doing batch scripts and stuff. That was it. He must have just had a shitty program.

Well I've heard similar things about MIS over CIS; So yea be careful.

 

[Leros]

Well I've heard similar things about MIS over CIS; So yea be careful.

Ah, that might explain it. I didn't realize there was a difference between MIS and CIS. Most of his classes were business. He essentially got a business degree with a couple of basic computer/IT classes.

 

[Saint Nick]

I have a friend who did an MIS degree (same as what you mentioned). From what he told me, he did very little pertaining to computers or IT. I feel he would have been screwed (learned no skills) if he hadn't interned for 3 years during college.

Yes. Similarly, a friend of mine "interned" at a law firm doing help desk. Where is he now?

Still doing help desk.

IMO, if you can find any CS or MIS program with emphasis in Information Assurance, go for it. Make sure you find an internship.

 

[yllus]

Is IT security really something you can do immediately get into after school? It seems like something only seasoned pros should be doing.

 

[seepy83]

Cissp.

This is a certification, not a degree. And it requires that you already have 5 years of professional work experience.

 

[Saint Nick]

Is IT security really something you can do immediately get into after school? It seems like something only seasoned pros should be doing.

A few companies I have worked have Information Assurance groups, usually with about 6-10 employees. There are usually a couple of entry level spots available.

 

[RearAdmiral]

Go STIG Red Hat. That might as well be a degree.

 

[jbt52]

Certs. Do you have experience yet? If not, get some. Try volunteering or something even if you have to. For certs go with A+>Security+>CCNA>CISSP or CISA there are several paths, but certs are better than a degree IMO

 

[airdata]

For certs go with A+>Security+>CCNA>CISSP or CISA there are several paths, but certs are better than a degree IMO

True, but I wouldn't bother with A+ if you're going after higher level certs. A+ is good if you want to make $10 an hour somewhere like best buy.

 

[seepy83]

Since certs have been mentioned so much, and everyone (whether they know what they're talking about or not) jumps on the CISSP bandwagon when Info Sec certs are mentioned, I thought I should remind people about SANS classes and GIAC certifications. This article is dated, but still relevant, and it talks about the similarities and differences between CISSP and GIAC's GSEC - http://www.giac.org/certifications/why-certify/interviews/gsec-cissp .

 

[KaChow]

Since certs have been mentioned so much, and everyone (whether they know what they're talking about or not) jumps on the CISSP bandwagon when Info Sec certs are mentioned, I thought I should remind people about SANS classes and GIAC certifications. This article is dated, but still relevant, and it talks about the similarities and differences between CISSP and GIAC's GSEC - http://www.giac.org/certifications/why-certify/interviews/gsec-cissp .

Here in the DC area the CISSP has become something of an eye-rolling joke -- seems like everyone and his brother has one. It's probably due to the fact that the military/government civilians get sent to CISSP classes (even when they don't do anything with security) and then get the cert.

Back to the OP's question -- I don't know. It may depend on which industry you work in. My wife has been fruitfully employed for the last several years doing security for defense contractors with nothing more than a Poli Sci degree (which is actually an arts degree), a GIAC GSLC cert, and experience as a sys admin/architect.

 

[RedString]

IN IT security; not that would offer job security.

Management/Computer information systems; generally in the school of business. it'll make you desirable both because you know computer IT stuff and because you can talk to the suits.

Great detree for anyone that's not interested in being an engineer/scientist.

THE degree if you want to have an IT degree.

make sure your business school is AACSB accredited.

I've heard of that cert, CCNP er... that's not it, I think there was another character somewhere. It's the guy who knows IT security but you have skills in business and communication (to talk to the suits), pretty much middle man between them and the IT department. I'm not sure how much of an exaggeration it is but my teacher mentioned that it has extremely good job security - he said pretty much you can quit a job and be guaranteed another one before the day is over. Plus 6 figures.


Ty for advice, sounds like my place. I'm not really looking to get into engineering.
I'm not sure if UT in Austin is AACSB credited, but they were in the top 10 computer universities (#9, only 5.1k a semester) last time I googled them.

Cissp.

I think this might be that cert I was trying to remember. I'd love to have the money and job security but I'd probably hate my job. Having to explain things to douchebag suits all day.

IMO, if you can find any CS or MIS program with emphasis in Information Assurance, go for it. Make sure you find an internship.

I'll definitely keep this in mind.


For anyone working in the IT field, would it be very pertinent to focus much in CS? Are there many common courses between CIS and CS degree?
Of course it can't hurt to have a broader understanding while trying to secure a network, I'm just worried about taking any wasteful courses which I won't use and just end up forgetting from lack of use.

Is IT security really something you can do immediately get into after school? It seems like something only seasoned pros should be doing.

Well, to be a professional at it - sure, like if I wanted to work with Facebook or some big name company. But with my AAS degree I could get a local job. It's astonishing how little people around my area know about the necessity of securing their networks. Ofc, I'm far where I want to be. As for now all I'll be doing is access controls, setting up firewalls, pretty much basic networking stuff with focus in security controls. Eventually I would like to be far enough along to secure my own network and able to decently pen. test it myself.

Certs. Do you have experience yet? If not, get some. Try volunteering or something even if you have to. For certs go with A+>Security+>CCNA>CISSP or CISA there are several paths, but certs are better than a degree IMO

Well, that's the problem - no experience yet. Between school and this unemployment thing, it's pretty difficult. Everyone wants a cert, or experience before I can begin to get the experience. Honestly, I'll probably go for some entry certs and try to get a job with dang Geek Squad or whatever is available. Preferably just intern with a half decent company, or get a entry level job in IT at my school.



Thanks a lot for all the replies. Definitely helps, with all these different certs and branches to major in, it can get pretty confusing to know where you should go.

 

[BHeemsoth]

I currently work as an IT Security Engineer, having graduated in 2008 with a degree in Computer Information Systems. I agree with the above advice that you should heavily review the curriculum before entering one of those programs, as I did a large amount of recruiting for my company in the past and noticed a big discrepancy amongst MIS/CIS programs in terms of depth of IT learning.

 

[rudder]

Certs. Do you have experience yet? If not, get some. Try volunteering or something even if you have to. For certs go with A+>Security+>CCNA>CISSP or CISA there are several paths, but certs are better than a degree IMO

Experience and certs that reflect that experience (A+ stuff is worthless... Cisco stuff is gold).

A 4 year degree can be worthless (I work in IT my degree is in a totally different field)... but many HR departments will can the resume if it does not meet the basic criteria... i.e., 4 year degree. So I say get the degree first.

 

[RedString]

Experience and certs that reflect that experience (A+ stuff is worthless... Cisco stuff is gold).

A 4 year degree can be worthless (I work in IT my degree is in a totally different field)... but many HR departments will can the resume if it does not meet the basic criteria... i.e., 4 year degree. So I say get the degree first.

The courses I'm taking now are from Cisco (my teacher is Cisco accredited), so it really focuses on me being able to pass Cisco certs after I graduated. If they really are "gold" then I guess that's a good thing!

Looks like I'll be going for a 4 year CIS degree afterward. Keeping an eye on the curriculum ofc.


Anyone here ever worked for Geek Squad? I need a job regardless, but is there any chance that I'll learn something useful? I guess during troubleshooting you usually do.

 

[brad310]

Here's my take on degrees in regards to the IT world.

1-They're only use is to fulfill a job qualification on paper to make you a candidate. It opens doors. Thats about it.

2-The curriculum (for me at least) was heavily based on programming and math. There wasnt much "IT" involved in my CIS degree. I had a couple of classes of web dev, a class on web admin, couple of SQL, and a number of programming courses.

3-The SQL work was valuable, but it depends on what kind of job you look for, and what you get.

95% of what i know and do was learned outside of college. We learned nothing of server admin, nothing practical of networking. Certifications can get you there moreso than college, but nothing beats what you learn on the job. Experience is always the best.

All of the programming in Java and calculus i suffered through was absolutely useless...and i graduated 5 years ago.

HTH.