Cissp need 5 yr of job exp to aquire and you properly wun be hired as a management directly as a fresh grad.

If you are talking about vendor management, I would advise you to avoid. Basically anything related to security you will throw it to the vendor, while you are doing the pmo job. Plus this role dun really need you to have much security exp, basically any ppl can do it mean that you can be ezily replaceable

Some of my friends stuck in that role cos they learn nothing and is very hard for them to exit.

If starting out or finding a new direction in infosec career, can look at cloud security. Had a job interview with Big 4 partner who didn’t think pentest is lucrative anymore and wants to focus more on cloud security since both everyone in public and private sectors is migrating to cloud.

consulting is where money can be c harged. pen testing is comoditised and profit margins are depressed

All, I'm going to interview for a senior sec ops role. Basically defensive security. Vulnerability mgmt, incident response, managing IDS/IPS etc.

I have 5 years exp as a sysadmin doing incident response, troubleshooting, asset mgmt/security, and all the general infra/network IT stuff.

I also now have 1 year exp in sec ops doing incident response, writing SOPs, providing user trainings, and all the typical ops stuff (IDS/DAM/IAM/EDR/SIEM etc). Never did SOC though. Had vSOC for that.

I have Sec+ and Cysa+ but no CISSP yet.

Any idea what kind of salary I should be asking for? According to the recruiter, it apparently goes up to $9k but I doubt I have enough specialised security experience to ask for that.

So which company is a good place to learn and start my info security career

... there is more thing to test and check in cloud env. that partner probably too out of touch with technical.

I would say you can actually ask for at least $7-$8k depending on the industry you are gonna work for, FI definitely can pay at least $8-9k no issue. But before you go for the interview, do know what is your career path and see if it aligns with your goal.
So basically, SOC engineer or SOC analyst?

can someone enlighten what is SI?

means systems integration. ***t job always fight fire and rubbish client demands. if go wrong, you be scapegoat

Is CSIT a good choice for a fresh grad? Will I be able to learn a lot there?