Career of the future...

[risc]

Re: Career of the future…

@solarcipher

to be honest, working in IT is like a beating a dead horse, same old concepts being recycled, rebranded and all… as for IT security, from what has been my observation, is nothing more than glorifying best practices of server administration (which isn’t very difficult by the way), analyzing programs for silly oversights by programmers and looking out for logs … its all the rage these days, but considering the burgeoning cost of IT sec deptts, i think the trend of hiring hefty CIOs, dedicated security specialists by enterprise level organizations isn’t likely to last long and is likely to be limited to just carrier or service providers … but again i maybe wrong… rather i hope i am wrong, i got a lot hanging on itsec..

Yes and no.

Yes in the sense basic security is not complicated, and it should be bets praqctice for any sys admin worth their salt.

No in the sense, many (if not most) admins dont have forensic, incident reponse, or able to truely detect or test defences. From what I have seen even for professionals difficult to keep with current information. I cant see many admins understanding currenet exploitation techniques, able to craft customised shellcode or understand failings in IPS/IDS.

I agree with cost only major enterprises can afford to hire dedicated professionals. So we may see service providers taking this role. However SME will still want professionals so expect as now plenty of consultancy for the future. End of the day a system cant replace an individual who understands bad guys or how systems work together. Majority of weakneses are in system (not application) implementations. Cant audit that from nessus.