Information Security Consultant: Career

An information security consultant is tasked with protecting their clients’ network and data from being breached. In the area of information security, often referred to as cybersecurity, there are many different roles. Some are general with a wide breadth of responsibilities. Others are highly specialized, focused on a specific area of cybersecurity. Cybersecurity consultants most often serve as generalists but may specialize in one or more areas.

There are many roles that a security consultant may specialize in, as the list below from George Washington University shows.  Most security consultants will cycle through some of these roles throughout their careers. It is not unusual for a security consultant to fill a few roles simultaneously (including many of the roles listed on the career hub).

Preparing for a career as a security consultant

Learn networking basics – Security consultants protect data and devices on a network. You need a good understanding of networking to be effective in security.

Learn cybersecurity basics – You may be excited about learning how networks are breached, but take the time to understand the basics. Check out TechRadar’s article on free online training in cybersecurity.

Learn coding and/or scripting – Python, Javascript, PowerShell, Node.js, Bash, Ruby, and Perl are all good to know.

Build a lab – Book knowledge alone is not going to give you the skills you need. Hands-on experience is also really important. Some training should give interested people the knowledge needed to build a home lab. Don’t let the term “lab” scare you off. You can build a good lab with minimal resources at little expense. Get ideas at Infosec Reference.

Get certified – This is a bit tricky. There are many cybersecurity certifications to choose from and you never know which a potential employer will value. There are free courses online for some certifications but the exams themselves are very expensive. Many companies will pay employees for additional training and certification. Being able to demonstrate cybersecurity knowledge and skills is much more important than getting a certification. Your skills will get the job, then pursue certification.