What Is The Mentor Network?

Where can I find a mentor in the IT Security field?

• I have a Bachelor's in Information Systems, but only a Network+ certification. Job experience is as a technical support agent (3 years) and also as a consultant for in-house software (1.5 years). Could someone mentor me on the best path, or at least point me in the right direction to find a mentor?

• Answer:

  Sign up for free blogs / short classes - if you can afford more; go for it. Learn good solid basics about operating systems and routing. The companies make this pretty easy if you put in the time..or you can take the commercial classes & certifications. ( Microsoft, RedHat, SuSe/Novell, Cisco) Once you have a strong foundation in low-level OS and routing.. specific security concepts are taught and discussed in many places: Sans.org / GIAC security certifications ** top notch** Schneier.com **top notch - blogging and original writings** Slashdot.org **top notch reporting of other stories- sometimes other users are elitist and snide also, WhiteHatWorld.com.. 2600 magazine/online.. others. SANS will provide you with classes where you can actually experiment with "live-fire" security and hacking exercises. They offer live and online /self-paced classes. Mentors for each class are available for help & advice, and when you finish, you get a piece of paper to show to employers / customers. If you really excel at these courses, you can work at getting certifications, upgrade to "gold" certification by doing some research papers, and even get a Master's Degree in security. There are lots of 'hacking / security information' sites out there. There are only a few that I trust not to hack me while I try to learn. Sans is one - there are probably others. If you don't like the class-type model, you can still read the free blogs from the SANS incident handlers. Look around your area for entry-level IT security jobs, or take a different job where you could work up into a security job ( Federal jobs.. military contractors.. insurance companies.. stock & financial orgs.. ) . check for jobs at security solution companies - Sophos, Symantec, SonicWall.. other companies that offer firewalls, antivirus, etc. Even work on open-source projects of the same type. You can create some credibility if you contribute to the community, and others will be inclined to help when they see you are serious about putting in the work. Security is a popular - and sometimes very paranoid- field, so you won't be able to just walk in and volunteer at most decent companies. If they do let you in too easily - they probably just want to use you for what they can - then get rid of you.