06Jun

Entry level software developers average $63,000 to start. Entry level network administrators start at an average of $45,800. Pay for desktop support techs averages $42,000.

With starting salaries above the national average of $40,200 (according to Indeed) and strong employer demand, what’s surprising is there aren’t more candidates clamoring for a job.

What holds back many otherwise skilled individuals is the lack of work experience and the computer degree so many hiring managers demand. Although employers are loosening the degree requirement, they still want to see evidence the candidate can do the job. And the usual way is to review past work experience.

That’s a conundrum for entry-level job seekers. If you have to have experience to get a job, how do you get it without having a job?

Computerworld says there’s a way around that. “In IT, hands-on experience can often be acquired using tools on your own computer or accessible through your current job before you try to get the new job.”

Working in tech support may be a rung or two removed from developer or admin, yet it can be a gateway job. You get hands-on work experience and plenty of opportunities to demonstrate the skills to move up. And the requirements are looser.

Computerworld has a series of projects it says provide “real hands-on experience.” Mastering them will give you experience you can point to when a hiring manager asks. And since most businesses run on Windows, these projects, at the beginner, intermediate and advance levels, are perfect for tech support positions.

At the beginner level, the Computerworld article demonstrates two essential Windows tools and provides an introduction to text commands.

Current tech support professionals will find these three projects a good reminder, if rudimentary. It’s at the intermediate level that the projects get more interesting. Here, Computerworld shows how to manage remote computers and mobile devices including Android, iOS and Mac. Another project goes into some detail about administering a Windows server.

The two advanced projects are even more challenging. They build on the intermediate server project to set up a domain network adding Active Directory Domain Services. The 8th project involves cloud services and managing user access via Azure Active Directory Domain Services.

None of these projects directly involves writing code (or at least not much), nor administering a live network. Instead, they offer the opportunity to learn and to demonstrate new and improved skills. It’s a chance for existing workers and prospective ones to show initiative and willingness, even eagerness, to learn. That, and having the basic skills to do the job, is the key to opening the door to a tech career.

Photo by Annie Spratt

[bdp_post_carousel]

Ethical Hackers Wear Computing’s ‘White Hat’

“Ethical hacker” sounds like an oxymoron, but the role of these “white hat” security experts is crucial to keeping computer systems safe..

These elite professionals are hired to attempt to break into a system to discover vulnerabilities and propose solutions before malicious hackers exploit the weakness to the detriment of the organization. The EC-Council describes an ethical hacker as “an individual… who can be trusted to undertake an attempt to penetrate networks and/or computer systems using the same methods and techniques as a malicious hacker.”

In large organizations, penetration testing, another term often used — some claim wrongly — for ethical hacking, is done regularly. The idea is to stay one step ahead of “black hat” hackers who are constantly attempting to break into networks and systems. Whether they do it for the sense of adventure – so-called “gray hat” hackers – or to steal or destroy data or hold it hostage in exchange for ransom, these hackers are committing a crime.

Catching them is not easy. Many intrusions come from overseas; some are state-sponsored. Even when they are domestic, hackers are usually skilled enough to cover their tracks well enough to go unapprehended. The best may even go undetected until the damage is done.

That’s why the work of ethical hackers is so important, prevention being the best cure.

Increasingly, organizations are hiring or contracting security professionals with one of the two most common certifications in penetration testing. Both require candidates to take an extensive exam.

CompTIA, the computer trade organization, offers a nearly three-hour long test with up to 85 questions. The CompTIA PenTest+ is a combination of multiple choice and performance questions based around simulations.

The Certified Ethical Hacker test of the EC-Council is 4 hours long and all multiple-choice. Unlike the CompTIA test, the certifying organization, EC-Council, requires candidates to first take the organization’s training program or provide proof of two years of work experience in information security.

Both organizations require holders to earn continuing education credits over a three-year period in order to retain their certification.

The two organizations compete fiercely for candidates, with each claiming their certification is better and more thorough.

EC-Council even argues that penetration testing is not the same as ethical hacking, arguing that “in many organizations ethical hackers are not even involved in penetration testing teams or processes.”

Which is best? As with most certifications in IT, both sides have their proponents. For a relatively even-handed approach, here’s a link to a Medium article discussing both. Spoiler alert: It gives the nod to the CEH certification largely because it’s been around longer and is accepted as a DoD 8570 Baseline Certification.

From an employer’s perspective, both certifications mean the candidate has been tested by a credible outside organization and found to be capable of providing that dose of prevention so critical to today’s cybersecurity.

[bdp_post_carousel]