RE: Pentester vs IT security analyst

["Bahrs, Art" <Arthur.Bahrs () providence org>]

Hi All,
    I guess I would say that the question can't be answered entirely without job descriptions (even brief ones) for 
each job title.

    The issue is companies use the same job titles in different ways ... what is called a IT Security Analyst at one 
site could be called a PenTester at another...

    Some companies might not a job title of PenTester, but instead have a job duty of PenTesting as a part of the job 
description for an IT Security Analyst or maybe the Security Engineer or an Audit type person??

Thanks
Art

Art Bahrs, CISSP
Security Engineer (Oregon Region)
(503) 216-2722


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of haZard0us
Sent: Wednesday, June 20, 2012 11:57 AM
To: moranc () twp grand-blanc mi us
Cc: security-basics () securityfocus com
Subject: Re: Pentester vs IT security analyst

Q: IT Sec Analyst vs PenTester?

If I had to answer this without further research, it would be:

A: Defensive Security vs. Offensive Security.

--haZ

On Jun 20, 2012, at 5:06 PM, moranc () twp grand-blanc mi us wrote:

> What is the difference between an IT security analyst and a penetration tester? Some say they are similar and some 
> say Security analyst do similar things just more policy work. Thanks for your input guys.
>
> ----------------------------------------------------------------------
> -- Securing Apache Web Server with thawte Digital Certificate In this
> guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it 
> benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
> install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
> highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> 42f727d1
> ----------------------------------------------------------------------
> --


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and 
who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell 
if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your 
Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing 
management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



This message is intended for the sole use of the addressee, and may contain information that is privileged, 
confidential and exempt from disclosure under applicable law. If you are not the addressee you are hereby notified that 
you may not use, copy, disclose, or distribute to anyone the message or any information contained in the message. If 
you have received this message in error, please immediately advise the sender by reply email and delete this message.


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------