Network Security Certification

I can only answer this from personal experience so it's not a definitive answer.

 1. Yes it is, the way I see it not only is it a facinating aspect of it but even as technology change, there will always be a need for security practitioners.

 2. Depends, being a DTS person I have to assume that you higher level experience is limited, it would help to get a broader field of experience in networking, infrastructures etc rather that just desktop, easier said than done I know, I personally would advide going to a 3rd line support level first to get a better overall knowledge which you will need, you wont need to become an expert in everything (nobody is an expert, anyone that says different is wrong! they just know more and have had more experience). There's nothing to stop you hitting the books or the web either, there's a world of info out there.

 3. Like everything pay depends on experience and capabilities and usualy cames as part of a track record. From what I have seen (and I guess this depends on where your from) a professional security persona earns about the same or more as a thrid line manager, but less that someone like a CCIE.

4. The qualifications get you through the door, they do, like any qual, show a certain level of knowledge but don't always prove understanding or experience. However it's better to have them than not of course...anything that gets you the interview. The trouble is, with a lack of experience security exams are not straight forward, you may be able to get it from a book and learn "parrot fashion" but you'll trip up on your fuirst job when you don't know what you are talking about.

I realise my comments are not uplifting but I think they are realisitc. If you enjoy IT half of the fun is the learning and exploration of new things.

I don't think you can do it overnight but then again it shouldn;t take forever, move up the scale to third line for a couple of years and then you'll be more prepared.

However, like anything this is just my opinion, I will be curious to see the comments of those who disagree :)

Best Wishes and good luck......it is worth the pursuit

DJM

This has happened to me.

What i have done is as follows.
I took my own personal time out to read books. I kept my DTS jobs running in the back ground (wishing every day i could leave and do something interesting and worthwhile) and i read books about CCNA networking (its going to be hard to become a network security specialist if you dont know the difference between layer 3 routing and layer 2 switching. Programming, learning new os's. etc etc.
While going at work i looked at other things. Then one day i was offered the chance to do both DTS and programming/implementations.
I took it. I am now on the way to becoming CCNA certified, MCSE, .NET compliant and lots more.

My advice is, learn in your own time, there are not many jobs out there that will train you up from scratch, but there are chances to learn on base knowledge you already have. I could already do programming and had a basic networking background before i embarked on the CCNA and later on a networking job. While at the job i have the chance to expand my programming (diverging into .NET) and also doing system builds, and also being given some after hours work to earn some extra money.

But waffle aside, learn in your own time (read CCNA then do Cisco security, cos if you cant configure a router you sure as hell aint going to secure one down to a multitude of possible attacks) maybe ask your boss if there is a chance to get some extra qualifications during quiet periods. learn programming so you can code your own overflows, pen test suites that sort of thing. There are not many good security testers out there who cant code. Those that cant code and call themselves security experts are just fooling themselves. Gain MCSE in NT and start to use Linux. All this will help to get you out of a boring rut known as DTS (damn tedious sh1t (can we say that here??)) I should know, it is exactly what i did.
THe field of security is good, but almot every man and his dog are doing it now. The world is starting to get flooded with "security experts". Check Bugtraq and all the people who post to that. Only the best will get the good money. Those, most probably like myself, will stay getting better but never shining out above the rest. Id expect you to be able to get at least 25K in uk for security work, possibly more the bigger the array of things you can audit. In the us id guess at least 35K but it does depend who you are working for and what they need securing.

But learn your CCNA, Some programming, Windows Certs and go for the Cisco Security modules. Good luck!

I know you can do it. Just give it time and determination. Afterall, you have nothing to lose, just everything to gain!

Check out Comptia Security+ to get your foot in the door.
The best way to find out is to dabble in it and see if you like it.