Is the shortage perhaps because all the job postings require a CISSP? I'm an architect and a coder. If I spend any time at all getting certs, they will be cloud-related.
Meh, I got a CISSP a few years ago to help pass HR filters. Nobody cared I had it and I found no value in being an ISC2 member, so I let it lapse.
It is listed as a requirement (or similar) on a lot of info sec jobs, but as far as I can tell it's like a lot of other job spec items; nice to have but not required.
Maybe there are companies who insist on it, but I'm not sure I would want to work for anyone that had such a rigid idea of its value. Could always get it again if I really needed to, only took me 2 weeks of study to pass originally. Possibly it has more value for more junior people.
I ran into the same thing more than a decade ago. The problem for me was that I was looking at software jobs, not security jobs. In hindsight that was a colossal mistake. I should have focused only on security and taught myself advanced programming on personal projects.
I am being pushed to get one and I dont see how it helps other our director selling the fact we have one more CISSP on the team. The certification and education bit of infosec is wildly profitable with good marketing to boot. I wonder if that is the driving force behind ISC2’s popularity.
Comments
Is the shortage perhaps because all the job postings require a CISSP? I'm an architect and a coder. If I spend any time at all getting certs, they will be cloud-related.
Meh, I got a CISSP a few years ago to help pass HR filters. Nobody cared I had it and I found no value in being an ISC2 member, so I let it lapse.
It is listed as a requirement (or similar) on a lot of info sec jobs, but as far as I can tell it's like a lot of other job spec items; nice to have but not required.
Maybe there are companies who insist on it, but I'm not sure I would want to work for anyone that had such a rigid idea of its value. Could always get it again if I really needed to, only took me 2 weeks of study to pass originally. Possibly it has more value for more junior people.
I ran into the same thing more than a decade ago. The problem for me was that I was looking at software jobs, not security jobs. In hindsight that was a colossal mistake. I should have focused only on security and taught myself advanced programming on personal projects.
I am being pushed to get one and I dont see how it helps other our director selling the fact we have one more CISSP on the team. The certification and education bit of infosec is wildly profitable with good marketing to boot. I wonder if that is the driving force behind ISC2’s popularity.