How can I do cool non-cleared computer security work?
I will be attending SANSFIRE 2007 in DC this summer, I’m very much looking forward to it. From what I’ve heard, there is a lot of “cool” security stuff that goes on there, in addition to the 59 infosec courses being offered. Should be a great networking opportunity as well. Too bad it’s very expensive and your current contract is ending soon. Lots of government-centric activities will be going on. Things like SAS70 and SOX are creating a lot of crossover opportunity between finance and security. So maybe you could check out somewhere like KPMG or other accounting/audit firms to see what they are offering? Every company needs qualified security professionals these days. I work as a security analyst for a small software company. Small, as in around 300 employees, but we have over 500 clients.
Drat, you just missed Schmoocon which would have been a great place to network (no pun intended). I have a ton of friends who do this kind of work, and basically you do need a clearance for any “fun” security work, even if you work for a contractor. If you’re not married to DC, there’s always the googe.