<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>
<div>Hi Lisa,</div>
<div><br>
</div>
<div>Seeing as you have experience in the security field I have a similar but slightly different question for you. I've been working in the Linux admin/dev field for about 6 years now and security is something that's always interested me but I've always felt
I didn't quite have the skills to cut it. I'm familiar with a lot of the concepts and can comfortably use tools like metasploit, nmap and ssh tunnels but those seem pretty introductory to me. I've been able to write buffer overflow exploits in a lab setting
(like here's some unsanatized input, go write some shell code with a NOP sled to exploit it) and same for things like SQL injections, it seems easy in the context of web goat but make the leap to real live code has just seemed too difficult.</div>
<div><br>
</div>
<div>My actual question is what's the best way for a reasonably knowledgable admin or developer to break into security and get enough experience to merit actually being paid for that sort of work?</div>
<div>
<div>
<div>-- </div>
<div>
<div style="font-family: Consolas; font-size: medium; ">Paul Mooring</div>
<div style="font-family: Consolas; font-size: medium; ">Systems Engineer and Customer Advocate</div>
<div style="font-family: Consolas; font-size: medium; "><br>
</div>
<div style="font-family: Consolas; font-size: medium; ">www.opscode.com</div>
</div>
</div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Lisa Kachold <<a href="mailto:lisakachold@obnosis.com">lisakachold@obnosis.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>Main PLUG discussion list <<a href="mailto:plug-discuss@lists.phxlinux.org">plug-discuss@lists.phxlinux.org</a>><br>
<span style="font-weight:bold">Date: </span>Tuesday, March 12, 2013 7:27 PM<br>
<span style="font-weight:bold">To: </span>Main PLUG discussion list <<a href="mailto:plug-discuss@lists.phxlinux.org">plug-discuss@lists.phxlinux.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: Linux security focus<br>
</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr">Hello Blake,
<div><br>
</div>
<div style="">There is always a big need for Linux/Unix/Windows security people. Security generally involves all attack vectors in a corporate environment. The type of work you do often centers around scanning and/or ticket hockey type work. You are generally
told to state X irregardless of the technical details of the issue. </div>
<div style=""><br>
</div>
<div style="">I have worked extensively in Unix/Linux/Internet Service Provider security, and I prefer Linux/Unixt systems administration. </div>
<div style=""><br>
</div>
<div style="">Getting certifications is your ticket to working at any of the big shops. Also, there are a good deal of contract positions open right now, because people are gun shy (pardon my pun) of recession based changes. All of us have had to come to
terms with the reality of contract work (the gold watch and retirement plan went away with our parents generation) and short term employment. The average Linux Administrator position is about 26 months (varies by survey). Security contracts are often 12
months or less. </div>
<div style=""><br>
</div>
<div style="">You certainly need to keep up with all security related news and use some of the tools (Metasploit, aircrack-ng, nmap, ssh tunneling) and technologies (network OSI stack up related to TCP/IP.</div>
<div style=""><br>
</div>
<div style="">Come to our Hackfests at DeVry University the first Saturday of every month 11-2, where we have more than a few people who can get into anything, work in some of the big shops in town, and join us as we attack virtual systems (setup with multiple
exploits for your edification).</div>
<div style=""><br>
</div>
<div style="">Hope to see you there?</div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Tue, Mar 12, 2013 at 6:55 PM, blake gonterman <span dir="ltr">
<<a href="mailto:gnunixguy1@gmail.com" target="_blank">gnunixguy1@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<p dir="ltr">Hello all, </p>
<p dir="ltr">I attended a few of the stammtisches a few years back, but kind of fell out of the Linux community...
</p>
<p dir="ltr">I've been working at a medium sized company trying to figure out where to go next. A coworker of mine is suggesting I go down the road of Unix security. To that end, I've built a small lab at home and have started getting back into learning to
tools available. I'm not looking for a glamorous pentesting position, just a functional security position focused on Linux.
</p>
<p dir="ltr">I'm curious what people already in the field are focused on these days. I have quite a bit of experience with FIM (tripwire) and I'm focused on mcafee Web gateway at work currently. Once my contract is over at the end of the year, I want to focus
on more Linux relayed work. </p>
<p dir="ltr">So, is there a need for a dedicated Linux security person here in the valley, or should I focus on the sysadmin portion and work security into the mix?
</p>
<p dir="ltr">By the way, I have the RHCSA certificate, I just decided standard sysadmin work wasn't for me.
</p>
<p dir="ltr">Any input is welcome. </p>
<p dir="ltr">Thank you, <br>
Blake</p>
<br>
---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div><br>
</div>
(503) 754-4452 Android<br>
(623) 239-3392 Skype<br>
(623) 688-3392 Google Voice<br>
**<br>
<a href="http://it-clowns.com" target="_blank">it-clowns.com</a> <br>
Chief Clown<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
</div>
</div>
</div>
</span>
</body>
</html>