Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

Career in cyber security (UK) - advice needed please

Jul 1, 2015 1:17PM PDT

Hello,

Thanks for taking the time to read this. I am looking to make a career change into the cyber security industry and would greatly appreciate some advice.

I am a police officer in the UK and have been in the police for 6 years. I have a degree (not I.T related unfortunately), and I am taking courses and relevant qualifications in my spare time. I recently completed an introduction to cyber security course through the Open University and my next step is the IS027001 Certified Foundation course. This seems to be the industry standard and a general requirement for all job vacancies I have seen.

Through my time in the police I have worked on primary and secondary investigation, always focusing on risk management and vulnerability assessment.

My questions to people currently in the industry (security consultants, analysts, etc)- do I stand a chance of at least getting interviews when I apply for similar jobs? Is there anything else you'd recommend I do to increase my chances? Although I lack experience in the technical industry I hope that a lot of my skills and training are transferable. Are their any ex-police in the industry who have successfully made the transition?

Thanks again for your time and help.

Discussion is locked

- Collapse -
thanks
Jul 1, 2015 2:15PM PDT

Thanks for the swift reply. I guess I'm looking for an entry level consultancy role - risk assessments, vulnerability analysis, strategy/policy writing, etc. My concern is that a lot of these vacancies are asking for industry experience, which sadly I don't have yet. However I'm willing to work hard to keep my knowledge up to date and earn more qualifications. Do you think there will be companies out there who would give me an opportunity with the skills I can bring to the table?

- Collapse -
I can't speak for companies.
Jul 1, 2015 2:26PM PDT

But you must start someone. The thing is that the more a security person knows the less they tell you they know.

Here's an example about how far flung this area is. http://krebsonsecurity.com/

So is that PC security, server, procedure, or other? It's a big world and only your newest folk think you can install an antivirus and be protected.

- Collapse -
corporate cyber security
Jul 1, 2015 2:48PM PDT

I'm looking at corporate cyber security - so network security, client data protection, that sort of thing. The roles I am looking at would have me working as part of a team to identify weaknesses in these systems and find solutions to prevent breaches.

- Collapse -
A fine example of why companies leak
Jul 1, 2015 2:59PM PDT

Is they can't change or respond fast enough. What you learn today is not what the attacker will use next week.

The leak noted at https://www.google.com/#q=federal+employee+leak was a fine example where they can't move fast enough. The leak was found long before it made the news or the leak began but the bureaucracy meant it would be months before a change could be implemented.

So imagine a corporate cyber security person that is coming up with changes every week to stop this weeks threats. Pretty soon the management will think they are crying "Wolf, Wolf!"

I don't have a cure for that but here's the basic security lesson. Don't put everything out there on the internet. That's a tough lesson for most.

-> So I just gave up the biggest lesson or trick to security?

- Collapse -
Thanks
Jul 1, 2015 3:08PM PDT

Thanks for the replies R.Proffitt. Does anybody have further input on my original post? Thanks

- Collapse -
PS. To get a job in Cyber Security, you don't get that job.
Jul 1, 2015 3:17PM PDT
- Collapse -
Answer
stay with the police
Jul 1, 2015 3:31PM PDT

I say you would have a better chance of getting into the cybercrimes unit of the police department than in the industry. get some time there and then you could move on.

- Collapse -
he could move into an govt
Jul 1, 2015 4:48PM PDT

intelligence field, especially with his law enforcement background.

- Collapse -
possibilities
Jul 2, 2015 2:16AM PDT

Thanks for the advice guys, I have been considering both possibilities. I don't particularly want to stay within the police, but I might have to if that gives me the experience I need to move on. I will start looking at the job requirements for intelligence in Government agencies as well.

- Collapse -
Answer
Certainly a big field
Jul 4, 2015 3:36AM PDT

HI,
certainly this is a big field and isn't likely to go away any time soon. As others have said, the goal posts are constantly moving, so if you aren't comfortable with constant change, this isn't the field for you.

The ISO27001 certification will certainly help your chances and may well be mandatory for many, if not most positions. The fact that you have attained these certifications will demonstrate that this really is a field that you want to join and committed people can be recognised by the companies providing or using these techniques.

You say you are looking towards a consultancy role. There are commonly two classes of consultants, the "Talking Heads" and those with the experience to know what they are actually talking about. From my experience, I've found that the kind of people working in end user companies in the security field are pretty sharp and committed people and so they will spot and discount a Talking Head in about two nanoseconds! What I'm saying is that I think you will need to get some field experience and in many respects, if you can gain that experience in the police IT forensics group, that would stand you in good stead.

I am aware that the police force does have some close ties with certain government departments that might offer openings for you. Also, there are the security forces, particularly you might think of South Gloucestershire!

Good luck with your search!

- Collapse -
Thanks
Jul 5, 2015 10:15AM PDT

Thanks for the advice Zouch, this was useful information