@IRJ said in I am thinking about getting into Security:
I heard on the grapevine that their might be a new position soon where I am working for a IT security person. I am unsure of the exact job title, but the job function will basically be trying to hack our own network then send a report to the IT team.
The position will entail penetration scanning, testing, and looking for any possible vulnerabilities on the network. I am told the position will not be in the IT department since it is trying to break into what IT is actually doing.
I have recently been tasked with doing scanning and testing. I am still a rookie, but I am learning fast. So far I have been able to fix a few holes in our network. My boss has given me the Go Ahead to attend 5 days of training with ECC Council. This is the training that I will be taking. https://iclass.eccouncil.org/?p=719
How would you feel about stepping into a new role like this when you're whole career has been based on Windows Server Administration?
A lot, almost all, of the pen testing tools are *nix based and are setup through the command line. So one of the big things you'll need to learn is working in and around a Linux environment and the tools that go along with it. Downloading Kali Linux and getting a testing environment up and running could go a long way.
The other thing, and I think it is vastly understated, is how important social engineering is to a successful attack. Learning some of the common social engineering methods and understanding how people think is huge when pen testing.
