Careers in security, ethical hacking and advice on where to get started
I like Troy, but I need to put in a word here against pursuing certifications.<p>There are no employers in security that I know that anyone wants to work for that take certification seriously. The best people working in security --- not just in application security but in network security, red-teaming, exploit development, and cryptography --- don't have certificates.<p>If you want to work in startups, a hiring process that even asks if you have a certification is a big red flag. This is less true in the broader tech industry, but while it's probably not a good idea to discard a prospective Fortune 500 employer just because they <i>ask</i> if you have any certifications, it is certainly reasonable to pull the ejection lever hard if an employer <i>cares</i> about them.<p>Every minute you'd spend pursuing certification is better spent building programming skills.<p>For whatever it's worth, I still stand behind everything in here:<p><a href="https://krebsonsecurity.com/2012/06/how-to-break-into-security-ptacek-edition/" rel="nofollow">https://krebsonsecurity.com/2012/06/how-to-break-into-securi...</a>