ISC(2), which sponsors the CISSP, co-developed with NSA a CISSP
Concentration called the ISSEP - Information Systems Security
Engineering Professional. The focus is really on the National Security
Agency's way of doing systems security engineering, as reflected in the
SSE-CMM methodology, and in th
Depending on where you want to go, defiantly look at the CISSP, or one of
the GAIC cert.'s Software "engineering" is another subject entirely. Some
people (a lot actually) would argue that SE's are not engineers at all,
since they are not licensed by states or other governmental agencies like
EE's
A lot of people I know in IT are picking up certifications and I'm wondering if
there's any equivalent for software engineers or product security engineers.
I have vague memories of QE/QA certifications for ISO compliance, but a quick
perusal of google and yahoo turns up nothing for security
