Path to management?

Been in security for 7 years and want to get into management and above. Work at a SaaS company with only 3 security managers. Most people are individual contributors.

How does one get into management? Luck? Right place right time? Connections?

Most jobs require X amount of years as a manager on their job description.

I have CISSP and lots of other certs, a bachelors, and so on.

Is it better to wait years and years at one company to hopefully get a shot at management? Or just to apply to all management jobs out there and hope someone takes a chance on you?

Thanks all!

reddit.com
u/sectestpen1 — 14 days ago
▲ 6 r/CMMC

Do 3.2.1, 3.2.2, and 3.2.3 Awareness and Training controls mean the entire company?

We have a fedramp/GCC high environment and a separate environment for folks not touching CUI and other data.

Do the awareness and training controls apply to both environments or only to users in the FedRAMP environment?

Where is the documentation to get concrete proof that it applies to both or just the single FedRAMP environment?

Thanks so much

reddit.com
u/sectestpen1 — 14 days ago

Cyber at Big 4 and afterwards

Got an offer from deloitte for a senior security engineer/consultant position.

Been working in various tech companies for last 6-7 years. Want to move in management and above.

Is deloitte/big 4 a good way to break into management at tech companies? I imagine it’s more business/management at deloitte rather than being very hands on and you learn a lot about project management

How do other companies view big 4 cyber experience?

Nervous my technical skills will decline, but won’t be too big of a issue if I can make the jump to management in 3-4 years

reddit.com
u/sectestpen1 — 23 days ago

GPS salary expectations

Got a call from the recruiter that I will be getting an offer letter once the final approval returns from pto.

Website range is 110k to 199k. Role is in DC area.

What to expect for a senior consultant cyber role within GPS? Have 9 years of experience in various tech companies in cyber engineering.
No MBA, just a bachelors

Thanks for any info!

reddit.com
u/sectestpen1 — 24 days ago

2 weeks of silence after final round

Great feedback for behavioral and technical rounds. Quick turnaround to chat with the portfolio leader/MD. Also went really well and he said he’s excited for me to join the team. This is for cyber division

Recruiter I’ve been working with was out on vacation for a week and MD also said he’s going out on vacation 3 days after our chat, so I assume he had time to provide feedback.

I sent an email and voicemail to recruiter, but he hasn’t replied back at all.

Should I consider this as ghosting? Or is it just a busy time with 4th of July and everyone being out. How long does it take to get an offer?

reddit.com
u/sectestpen1 — 1 month ago

Portfolio leader interview round?

Talked to my recruiter and he said I did really great on the behavioral and technical interview rounds and they can see me on multiple contracts/roles within the cyber security field.

Recruiter said he wants to schedule a portfolio leader round. Should not be technical or behavioral. More about where I’d fit? Does this mean I should get an offer? No idea what to expect

Any advice is apprciated

reddit.com
u/sectestpen1 — 2 months ago

Role re-alignment during interview ?

Interviewing for a GPS/public cyber role. Went thru managerial and technical screens and did very well. Manager said I could cover various sides of threat hunting, detection and general engineering.

Recruiter called and he said feedback was great. Also asked if I wanted to interview for an extra round on pentesting side, which I said no, since I do not have a ton of exp there.

He said he would go back to the approvers and see what side I am a best fit with.

Does my original application for the role not matter? Will I be put on a bunch of different contracts and be a jack of all trades? I specialize in threat hunting and detection

Never worked for a big4, so not sure how it’s done.

Thanks for any info!

reddit.com
u/sectestpen1 — 2 months ago