Dear ph00dy,
I'm not a full-time security professional, but I'm in a closely related field doing system administration and e-commerce development for a number of clients. I quit college about 13 years ago when one of my professors recommended me for a programming job (dBase) and everything has been on-the-job training since then.
You mentioned that everything you learn in school is 2-3 years behind. That's typical. It probably stays that way until you get into post-graduate work (which I never did). Then you might actually end up being *ahead* of the curve.
I have mixed feelings about not having a degree. On the one hand, I have done well without it and I have enjoyed the challenge. On the other hand, a lot of doors are much easier to get through if you do have that piece of paper. Most corporate hiring managers are college graduates themselves and they must have that "stamp of approval" on everyone who comes through their door.
To get by without a degree you have to be independent, well above average, and very hard-working. But there is a lot of satisfaction in being able to succeed that way.
Greg
On 11/7/2000 at 10:00 PM ph00dy wrote:
>My questions are:
>
>1.Is college a waste of time for pen-test/auditing/risk assessment
>professionals?
>2.If so how does one prove what they know to a perspective employer?
>3.What is the practical value of a college degree in our field? What about
>in the long run?
______________
Gregory McCann
http://www.calypteanna.com
"Acquire the spirit of peace and thousands around you will be saved."
- Saint Seraphim of Sarov
Received on Nov 09 2000
Intro
