Re: [funsec] "Skills gap"?

2012-11-30 Thread Rich Kulawiec
On Thu, Nov 29, 2012 at 12:59:12PM -0600, John Bambenek wrote: > FWIW, I was trolling my employer Ernst & Young about a decade ago > about certifications so I took the CCNA one day after cramming a > book. Prior to the exam, I had never laid eyes on a cisco device, > much less interacted with one.

Re: [funsec] "Skills gap"?

2012-11-29 Thread John Bambenek
But isn't security whatever the auditors tell us to do? *ducks* On 11/29/12 1:24 PM, Jeffrey Walton wrote: On Thu, Nov 29, 2012 at 2:10 PM, John Bambenek wrote: I'm convinced that certifications have given us an army of IT workers that have letters but are utterly unqualified. And they get e

Re: [funsec] "Skills gap"?

2012-11-29 Thread Jeffrey Walton
On Thu, Nov 29, 2012 at 2:10 PM, John Bambenek wrote: > I'm convinced that certifications have given us an army of IT workers that > have letters but are utterly unqualified. And they get employed by the > thousands. > > Exhibit A: Web developers. > > On the upside, unlimited job security for tho

Re: [funsec] "Skills gap"?

2012-11-29 Thread John Bambenek
On Behalf Of John Bambenek Sent: Thursday, November 29, 2012 1:59 PM To: funsec@linuxbox.org Subject: Re: [funsec] "Skills gap"? FWIW, I was trolling my employer Ernst & Young about a decade ago about certifications so I took the CCNA one day after cramming a book. Prior to the exa

Re: [funsec] "Skills gap"?

2012-11-29 Thread John Bambenek
2012 1:21 PM To: Rich Kulawiec Cc: funsec@linuxbox.org Subject: Re: [funsec] "Skills gap"? On Thu, Nov 29, 2012 at 5:31 AM, Rich Kulawiec wrote: Certifications are, in practice, crap. Amen. Short story: As an early Cisco engineer, I (and may other very talented people) helped develop th

Re: [funsec] "Skills gap"?

2012-11-29 Thread Paul Ferguson
I agree with you, to certain point. :-) But I've also witnessed way too many instances of people with "Cisco certifications" who had no idea how to build networks. Sure, they could configure a router but... - ferg On Thu, Nov 29, 2012 at 10:32 AM, Gary Buhrmaster wrote: > On Thu, Nov 29,

Re: [funsec] "Skills gap"?

2012-11-29 Thread Paul Ferguson
; Behalf Of Paul Ferguson > Sent: Thursday, November 29, 2012 1:21 PM > To: Rich Kulawiec > Cc: funsec@linuxbox.org > Subject: Re: [funsec] "Skills gap"? > > On Thu, Nov 29, 2012 at 5:31 AM, Rich Kulawiec wrote: > >> Certifications are, in practice, crap. >&

Re: [funsec] "Skills gap"?

2012-11-29 Thread Blanchard, Michael (InfoSec)
essage- From: funsec-boun...@linuxbox.org [mailto:funsec-boun...@linuxbox.org] On Behalf Of Paul Ferguson Sent: Thursday, November 29, 2012 1:21 PM To: Rich Kulawiec Cc: funsec@linuxbox.org Subject: Re: [funsec] "Skills gap"? On Thu, Nov 29, 2012 at 5:31 AM, Rich Kulawiec wrote:

Re: [funsec] "Skills gap"?

2012-11-29 Thread Paul Ferguson
On Thu, Nov 29, 2012 at 5:31 AM, Rich Kulawiec wrote: > Certifications are, in practice, crap. > Amen. Short story: As an early Cisco engineer, I (and may other very talented people) helped develop the original CCIE program. I wince now when I hear people reference Cisco "certifications" becaus

Re: [funsec] "Skills gap"?

2012-11-29 Thread John Bambenek
ve Southboro, MA 01772 -Original Message- From: funsec-boun...@linuxbox.org [mailto:funsec-boun...@linuxbox.org] On Behalf Of John Bambenek Sent: Thursday, November 29, 2012 10:39 AM To: funsec@linuxbox.org Subject: Re: [funsec] "Skills gap"? Oh, some people try to write a good test an

Re: [funsec] "Skills gap"?

2012-11-29 Thread Blanchard, Michael (InfoSec)
..@linuxbox.org] On Behalf Of John Bambenek Sent: Thursday, November 29, 2012 10:39 AM To: funsec@linuxbox.org Subject: Re: [funsec] "Skills gap"? Oh, some people try to write a good test and we can have a nice discussion about psychometrics and the lot, but at the end, we haven&#x

Re: [funsec] "Skills gap"?

2012-11-29 Thread John Bambenek
Oh, some people try to write a good test and we can have a nice discussion about psychometrics and the lot, but at the end, we haven't even figured out K-12 testing. It's a hard problem with no solution. In our field, we need to be able to DO things, not be able to recite knowledge. And testi

Re: [funsec] "Skills gap"?

2012-11-29 Thread Rich Kulawiec
On Sat, Nov 24, 2012 at 09:24:29PM -0600, John Bambenek wrote: > That said, I've been helping write/audit SANS certifications for > awhile. I'm simply ineligible to take them (for what should be > obvious reasons). I got real tired of submitting resumes and being > told I need a GSEC/GCIH/et al.

Re: [funsec] "Skills gap"?

2012-11-24 Thread John Bambenek
Define "skills". There are plenty of jobs out there, but I live in Central IL and don't want to relocate. That pretty much takes most all of them off the table for me. That said, I've been helping write/audit SANS certifications for awhile. I'm simply ineligible to take them (for what shoul

Re: [funsec] "Skills gap"?

2012-11-24 Thread rackow
It's a huge problem. There has been debate in various spaces on how to handle any of this, and so far none have really caught on. (Thankfully?) When we posted a new cyber position some time ago, it was amazing the people that applied. We were looking for a junior level person, yet had plenty of

Re: [funsec] "Skills gap"?

2012-11-24 Thread Kyle Creyts
I know a lot of people who recently joined the workforce in IT and infosec, and I know few enough who are happy or satisfied with their pay; part of the problem is the way paragon status has been conferred upon those with a trivial set of skills, a good break with the press, and sense of opportunis

Re: [funsec] "Skills gap"?

2012-11-24 Thread Paul Ferguson
B.S. There *are* significant "wage increases, at least in Infosec. - ferg On Sat, Nov 24, 2012 at 9:51 AM, Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: > I see a lot of companies complaining that they can't get skilled/trained > infosec > people. > > I see a lot of experienced infosec

[funsec] "Skills gap"?

2012-11-24 Thread Rob, grandpa of Ryan, Trevor, Devon & Hannah
I see a lot of companies complaining that they can't get skilled/trained infosec people. I see a lot of experienced infosec people out of work. http://www.nytimes.com/2012/11/25/magazine/skills-dont-pay-the-bills.html == (quote inserted randomly by Pegasus Mailer) rsl...@v