What are the security job prospects for someone without a certification?

What are the security job prospects for someone without a certification?

While in college I worked as a technical support specialist and discovered I wanted to pursue an information security career. I tried enrolling at a technical school, but because I am in debt to the college I attended initially, they will not release my transcripts. Currently I am a junior helpdesk analyst for a government contractor. Should I try to get security certifications? Get more job experience? Start college over? I am now 26 years old.

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Normally, I am not a big fan of security certifications. I don't think they prove much of anything except the ability to take a test. So I don't advocate that path because, in my opinion, it won't help get someone into the field.

I would focus efforts on getting some real-world experience by doing an informal apprenticeship with some security folks. Certain security professionals would probably appreciate the help, and there is a lot of valuable information to be learned from them.

Keep in mind this would be after-hours work, so you need to be a model citizen and perform well in your day job at the help desk. If you slack off there, it's very unlikely the organization would consider you for a role in another department.

Generally, I favor the school of hard knocks. I think people learn a lot more about security by doing rather than studying. That does make me a bit of an anomaly, but if formal education programs aren't an option, and certifications won't get you to where you want to go, I would focus on working your way into the job informally, and then parlaying that into a formal job in security.

More information:

This was first published in February 2008