Salary.sg Forums - Reply to Topic

Additional Options
Miscellaneous Options Automatically parse links in text Automatically retrieve titles from external links

22-06-2022 02:54 PM

Unregistered

Quote:

Originally Posted by Unregistered

If starting out or finding a new direction in infosec career, can look at cloud security. Had a job interview with Big 4 partner who didn’t think pentest is lucrative anymore and wants to focus more on cloud security since both everyone in public and private sectors is migrating to cloud.

... there is more thing to test and check in cloud env. that partner probably too out of touch with technical.

21-06-2022 05:05 AM

Unregistered

So which company is a good place to learn and start my info security career

16-06-2022 08:24 PM

Unregistered

All, I'm going to interview for a senior sec ops role. Basically defensive security. Vulnerability mgmt, incident response, managing IDS/IPS etc.

I have 5 years exp as a sysadmin doing incident response, troubleshooting, asset mgmt/security, and all the general infra/network IT stuff.

I also now have 1 year exp in sec ops doing incident response, writing SOPs, providing user trainings, and all the typical ops stuff (IDS/DAM/IAM/EDR/SIEM etc). Never did SOC though. Had vSOC for that.

I have Sec+ and Cysa+ but no CISSP yet.

Any idea what kind of salary I should be asking for? According to the recruiter, it apparently goes up to $9k but I doubt I have enough specialised security experience to ask for that.

11-06-2022 10:31 PM

Unregistered

Quote:

Originally Posted by Unregistered

consulting is where money can be c harged. pen testing is comoditised and profit margins are depressed

11-06-2022 10:14 PM

Unregistered

29-05-2022 08:42 AM

Unregistered

Quote:

Originally Posted by Unregistered

Pentester looks cool but real life doesn't.

Stick with CISSP become management and ask Pentester deliver for u.

Cissp need 5 yr of job exp to aquire and you properly wun be hired as a management directly as a fresh grad.

If you are talking about vendor management, I would advise you to avoid. Basically anything related to security you will throw it to the vendor, while you are doing the pmo job. Plus this role dun really need you to have much security exp, basically any ppl can do it mean that you can be ezily replaceable

Some of my friends stuck in that role cos they learn nothing and is very hard for them to exit.

27-05-2022 03:07 PM

Unregistered

Quote:

Originally Posted by Unregistered

I just got CISSP but I'm considering working towards OSCP next to get my foot into pentesting. Is there any benefit in that? I'm currently in a security administrative/incident response role. No major shift work since we hire vsoc

Pentester looks cool but real life doesn't.

Stick with CISSP become management and ask Pentester deliver for u.

27-05-2022 12:36 PM

Unregistered

Quote:

Originally Posted by Unregistered

Your side got pentesting

27-05-2022 04:46 AM

Unregistered

Hi guys, can you recommend me a few good companies for SOC analysts to start for entry level career. Thanks very much in advance !

16-05-2022 01:15 AM

Unregistered

Quote:

Originally Posted by Unregistered

Too many pentesters in the market. Nowadays, fresh grads from infosec degree are quite well-trained in school and can be fairly competent pentesters within a year. Can try look for opportunities at defenders side since you already have some experience (less "exciting" but also less competitive and very essential)

This thread has more than 10 replies. Click here to review the whole thread.

Posting Rules
You may not post new threads You may post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Forum Rules