[prev in list] [next in list] [prev in thread] [next in thread] 

List:       security-jobs
Subject:    Re: What is a good title for a info security person?
From:       "tcobo" <tcobo () zoomtown ! com>
Date:       2001-10-29 5:47:08
[Download RAW message or body]

System Security Engineering is building security products or systems
according to NSA standards for the Security Engineer Capability Maturity
Model (SSE-CMM).  A System Security Engineer is one who has use the SSE-CCM
and its appraisal methodology to engineer a product.


C. Avery
System Security Engineer
859-384-1549

----- Original Message -----
From: "Jackie Chan" <blue0ne@digitz.org>
To: <alexkargen@cs.com>
Cc: <securityjobs@securityfocus.com>
Sent: Tuesday, October 23, 2001 2:09 PM
Subject: Re: What is a good title for a info security person?


> First order of business... what kind of career move are you trying to
> make.  How you label yourself should accurately reflect not only your
> expertise, but also what kind of job you are looking to land.
>
> For instance, I will list three distinctly different titles you have
> placed here and the a small definition therein.
>
> > Senior Network Security Engineer - You have experience in building
> enterprise wide secure networks from the ground up.  You not only are
> aware of, but are proficient in just about all security
> application suites, Firewalls, VPNS, Routing, DNS, Web Applications, 99%
> of all network and application based protocols in existence, and the ways
to
> exploit/defend against all of the above, and feel comfortable speaking
> about it at an extremely in depth and granular level and have a decent
> knowledge of some quick and dirty programming language like python or
> perl.  Now obviously, alot of people will put this on a resume.  However,
> a decent interview covering the aforementioned topics is a good litmus
> test.
>
> > Senior Security Consultant - Not as indepth and granular as the
> Engineer, however has a really good grasp of implementing security
> products and the concept of how security fits in with business.  The
> consultantis experienced in writing policies, statements of work,
> proposals, pricing models, ROI models, etc.  The consultant might have
> the knowledge of the Engineer, but frequently does not.  The biggest
> characteristic of a security consultant, is his/her ability to merge
> technology with business functionality.
>
> > Security Officer - It helps if the Security Officer has had experience
> in either or both of the above, however they often have not.  The key word
> here is Officer.  They have a responsibility to listen to their directors
> and VP's, as well as to the CEO and shareholders.  Theirs is day to day
> balancing act between technology, policy, and finance.  These are the
> people who get their heads lopped off if something goes seriously wrong.
>
> There are a few more in the spectrum of capabilites, if anyone wishes to
> add to the list.
>
> -blue0ne
>
>
>
> On Tue, 23 Oct 2001 alexkargen@cs.com wrote:
>
> > Hi,
> >
> > On my resume, I have such job titles as:
> >
> > Senior Network Security Engineer
> > Senior Security Consultant
> > Security Officer
> > Network Security Officer
> >
> > Currently I am using Senior Security Engineer.  Some headhunters have
stated that such a title as Senior Security Engineer is not that effective.
> >
> > With that, what is a good title I should use on my resume for an
experienced senior security person such as myself?
> >
> > Thanks!
> >
> > Alex
> >
>
> --
> -blue0ne
> http://www.digitz.org
>
> "The great bulk of my wealthy and educated friends regard me as a
dangerous crank."
> - Theodore Roosevelt
>
>

[prev in list] [next in list] [prev in thread] [next in thread]