RE: Career Choice

["Britton, Jeff B." <JBBritton () LMUS LeggMason com>]

I've been in security for appx 2 years now, and I can't begin to tell you
how much programming experience helps.  An overall programming language
class is critical - to understand the building blocks of all languages, both
sequential and object oriented.

Not only do you become capable of automating many parts of your job (which
in turn saves time and $$...something every manager likes to see) but you
are also able to get a much better handle on specific vulnerabilies/expoits
and how they directly affect whatever you are investigating.  

Be very careful when you get into MIS or CIS... I was a COSC major and can
tell you that CIS and MIS are much broader degree's, and for lack of a
better term, much easier than COSC or similar.  If you want to break into
the security industry right out of school, you'll probably need one of two
things...
1. A darn impressive resume
2. An inside contact to get you a job

Best of luck.



-----Original Message-----
From: Richard Kirk [mailto:saviente () gmail com]
Sent: Tuesday, March 08, 2005 8:10 AM
To: security-basics () securityfocus com
Subject: Career Choice


I am currently a student at DeVry University studding Network
Communications Management. My true concentration is in security
forensics.

In any case the more I looking into vulnerabilities and network flaws
the issues come from within the programming of the
application/protocol etc. and most assaults use multiple programming
languages to execute these attacks.

I have two questions, the first is should I be learning how to
program? My current studies have only one programming language course
(Intro to Java). Second, will the Bachelors degree I'm getting help me
get into the field I'm looking for or should I change my major to
something else such as MIS or CIS?

Thank You for your time
Best Regards

IMPORTANT:  The security of electronic mail  sent through the Internet 
is not guaranteed.  Legg Mason therefore recommends that you do not 
send confidential information to us via electronic mail, including social 
security numbers, account numbers, and personal identification numbers.    

Delivery, and timely delivery, of electronic mail is also not 
guaranteed.  Legg Mason therefore recommends that you do not send time-sensitive 
or action-oriented messages to us via electronic mail, including 
authorization to  "buy" or "sell" a security or instructions to conduct any 
other financial transaction.  Such requests, orders or instructions will 
not be processed until Legg Mason can confirm your instructions or 
obtain appropriate written documentation where necessary.