I'm new to this site and wanted to get some opinions on my current situation.
Last month I completed my bachelor's in Network Security and Forensics. The forensics was my favorite aspect of everything I did, so I also took a SANS 2 day Windows Forensics mini-course in Atlanta last week and that just convinced me even more that this is what I want to do.
However, looking for forensics jobs everyone seems to want experience and such. I've still applied for some of the jobs hoping I might get a chance based on my high GPA, Network+ & Security+ certs, and other minor career experiences.
I finally received a call back from a company that seemed quite interested in me, however the job is an instructor position. They are basically wanting someone who can learn new things quickly and then turn around and teach a course on it.
I certainly fit that bill as I've been self-teaching since I was 7 years old and got my first computer (C-64) and taught myself BASIC.
But, it seems kind of odd to go from being a student to instructor in just a few months without ever having any actual professional experience.
On the other hand, so far this seems to be my only possible entry into forensics at all. And, I would at least get to work with full working licensed products and probably be able to get some certifications while I'm doing it. Plus, the ad mentioned needing clearance and they are sending me a background check authorization so I might get a clearance out of it too. So, if and when I'm ready to move on I'd have more certifications and possibly a clearance which might help me to find another job later on.
So, what is your opinion? It seems like it could be a good opportunity though it also seems a little unorthodox. Then again I have had lots of teachers where I knew more about the subject than they did and they got along fine. And, being a recent student I have a fresh perspective on what makes a course good or bad.
Thanks in advance for your feedback,
7
Congrats, 7, on having a company express interest! These days, that's an accomplishment.
Don't knock the teaching gig. I've been an adjunct instructor for a year and it's a nice way to fill in between clients, especially during those slow spells. Most of the courses I've taught saw me reading up on the week's material the Sunday before. Bonus? *I* learned some things I didn't know previously. I am able to bring my experience to the table and give my students real-world insight. Teaching is a skill that will benefit you in any career.
Unorthodox? Just what *is* orthodox in today's ever-changing digital landscape???
This is a great opportunity for you… make the most of it.
Now, go study!
)
Thanks for the response. It definitely sounds like a great opportunity to me too. Hopefully I'll receive a package from them soon.
7
First congratulations.
Second how was the SANS 2-day? It was sold out, but I am ever hopeful there will be more. I have been to a couple of the "full" classes, but just don't have the budget this year.
You may get some flack from some students, but once you get through your first class and get comfortable no one will care. Publish some research and students will care even less.
It was the best $99 I've ever spent.
I always heard SANS classes were great, but they're so expensive figured I'd never get to take one unless someone else sent me. So, when I saw a $99 class within a 3 hr. drive I jumped on it.
Unfortunately, it sounded like it was a one shot deal they put together to try and lure more attendees to the GFIRST conference. And, it's kind of a teaser of 2 of their full classes as the instructor said he'd pulled 1 day from 1 class and 1 day from another and sort of merged them together (I think the classes were 408 & 508, but I'm not sure.)
There 4 or 5 guys that are practicing forensic pros and they seemed a little disappointed thinking that it was too basic, but I think they still learned a thing or two. For everyone else I think it was great.
First day covered using FTK Imager Lite to do acquisitions and the different types of image formats. Then how to mount the image read only in a Linux SIFT VM and share it through SMB to a Windows VM that way you have it accessible for analysis by tools on both platforms. It might be common knowledge here, but it was worth the $99 for me to realize that you could do that and learn how.
Then, the second day was registry analysis using Access Data Registry Viewer and RegRipper. Also extracting protected reg files (SAM, etc) from live system using FTK Imager Lite. Also, got into the internet history via the index.dat I think using Pasco to parse it, but I had stepped out for a minute and missed that so I'll have to go back and try it on my own.
The book had some additional info such as RAM acquisition and analysis, but he basically blew by it in class due to lack of time.
We had 1 practice case that we worked on and there were a few more on the DVD we could work on at home if we wished. Their are tons of tools and stuff on their as well. Could be better documentation on the DVD contents, but I'm sure you can Google and find however to use whichever tool you are looking at.
Rob Lee was an excellent instructor and I'd highly recommend him.
All in all it was a great class and I'm more likely than before to take one of the full classes now that I know the quality level of their classes.
7
I think it's noteworthy and indicative as to your values and ethics that you've recognized it might be odd to teach something without first having worked in the field. It's unfortunate that your back may be against the wall, so to speak. In that as the only current opportunity you may be forced to take it. But you're right in your thinking - how comfortable and knowledgeable could an instructor be without field experience? How would you feel as a student if you learned your instructor had no real world experience? There is no substitute for experience.
Big thumbs up for questioning whether or not it's the right thing to do.
Cheers!
farmerdude
From talking to them it seems like they are really looking for a generalist that can pick up any new technology and then turn around and train others on it. In that case, I think I'd probably be a better choice than someone who did have a lot of experience in one particular area as I always say my greatest asset is adaptability and ability to learn quickly.
And, as you said with the job market being the way that it is I can't really afford to pass up any opportunities.
They sent me the application forms and it asks for my salary requirements. I've always heard you shouldn't answer that or should just put "negotiable", but what do you think?
7
I've always heard you shouldn't answer that or should just put "negotiable", but what do you think?
7
Do your (Google) research. Determine the local range for your experience and postition and bracket that range +/- $5K.
Don't forget Benefits typically cost an employer 30-40% on top of your salary. Health Insurance, paid vay-cay, retirement, continuing-ed subsidy, etc… all ad up.
A "job" is more than just a paycheck, but that paycheck needs to be competitive.
I've always heard you shouldn't answer that or should just put "negotiable", but what do you think?
As indicated, do your research and know what the normal ranges are. Each company is different and there are often perks or unseen downsides to each job. In a training hours, for example, you might get to work with (and learn) cutting edge technologies, but then have to travel in the local area more than you might want.
When I've done the school house training gig, I loved it.
I just went with "Negotiable" for the application. There are too many variables at the moment to set a figure.
If they have me come down for an interview and give me a better idea of the parameters of the job and how much time I'll get to spend learning and getting certs versus teaching. Plus, there are other less tangible considerations like if I can telecommute part of the time (obviously when I'm learning, not teaching.)
I do need to go ahead and do some research though so I can have some idea if they make me an offer.
Salary.com shows the middle 50% of Technical Trainers in Tampa making between $47K-$67K.
I think if I got somewhere in that range along with full benefits I'd be doing pretty good. Especially considering the additional benefits of them paying for certifications and getting me a security clearance.
7