Educational growth in security industry for developer

Educational growth in security industry for developer

I am a developer with six years of experience in networking(TCP/IP/SNMP/streaming media/SSL/authentication protocols). I have spent the past two years primarily developing a security product. What kind of career growth can a developer hope to expect? The certifications (CISSP), career paths and job titles that one often hears about (security engineer, security consultant, security analyst, chief security officer) are all related to individuals who have started out as system administrators. As a developer, what should I do to further embellish my skills, with some standard objective measures like certifications?

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

You're right to observe that a career as a security product developer is less open to embellishment through certification. In fact, I am unaware of any certifications that take a development rather than an operational approach. You don't say much in your e-mail about your educational background. Traditionally, the way to boost one's visibility and perceived value in more technical fields where certs are not available is to pursue an advanced degree like a Master's in computer science, software engineering, MIS, IT and so forth; if you already have a Master's, perhaps you might want to consider a PhD.

On the other hand, this is a reasonably active and in-demand area in the programming field. Are you sure that additional embellishment beyond a strongly and clearly worded recitation of your skills, knowledge and experience is necessary? I'm not convinced that your experience alone is not sufficient to help you grow and develop your career further. Perhaps it may be necessary only to keep seeking out new, interesting and meaningful development projects for you to grow and learn as you might like.

Good luck in your future career planning and development.


For more information on this topic, visit these other SearchSecurity.com resources:
  • Ask the Expert: How to pursue a career in application security
  • Best Web Links: Infosec Training, Careers and Events


    This was first published in February 2003