Friday, February 20, 2009

Part 3 - Considering a Career in Computer Forensics?

What kind of jobs are out there? Can I get a job doing this work?

Those are probably two of the most important questions on anyone's mind when considering their first career or a career change.

While the general consensus seems to be that the field of computer forensics is exploding, I am not sure I agree with that conclusion.

The other thing to consider is that right now, the IT market is collapsing, with the number of job openings shrinking as people are getting laid off, setting up a situation where there are more applicants seeking fewer job opportunities.

If anything, the largest growth in the employment market for computer forensics people is going to continue to be in the law enforcement sector. The government continues to put money into new forensics labs and they need staffing.

The quandary is that many law enforcement agencies will not use civilian employees for computer forensics work, but insist on using sworn employees.

The typical path in law enforcement is to become a police officer or special agent, and then spend a number of years doing general police work. After that, you might have an opportunity to move into computer forensics.

In the private sector, I have not seen much of any indication of new job openings in this field, especially not for people just entering the field. Most of the job openings I have seen have been for experienced examiners.

With an influx of highly trained and experienced IT people entering the job market via layoffs, the competition for IT security jobs and entry level forensics jobs is going to get tougher.

Also, it appears that the US is lagging behind in computer forensics growth compared to the UK and other european countries. For instance, on Forensic Focus , I see many more job vacancies for UK posts than US posts.

A search for the term Computer Forensics on Dice returned 52 openings and the same search on Monster returned 85 openings.

SimplyHired returned 1282 openings against a database of 2.7 millions job postings. This was higher than I expected to be honest. However, not all of these are pure computer forensics jobs. Some are sales, engineering and such. However, when I clicked on several of the hits to review the jobs, some were no longer valid links.

The problem for people new to the field is that there are very few entry level jobs available.

That doesn't mean you can't get a job, it just means that it may take longer to land a position than you might like.

What about certifications?

Honestly, the truth about certifications is that they really only serve two purposes; Getting you an interview or for impressing people to get accepted as an expert in court.

Experience outweighs certifications every time. So if you lack experience, then getting a certification is probably worth it. Bear in mind that getting certified does not make you a better examiner. As with most licensing or certification tests, the goal is to answer the questions to satisfy the testers, not to demonstrate real skill or knowledge. Even the "practical" portions of some of these certifications are more about guessing what they are looking for than performing real world analysis work.

The trick about certifications is that they are an industry unto themselves. For instance, to get to sit for some certifications, you must demonstrate a certain level of training that is of course, provided at a hefty price by the certification company.

Getting the training is a good idea if you can afford it so you can properly use a particular product or technique. I am all for training and would rather see that on a resume than a certification any day.

While I believe that this field will grow at a healthy rate, and I do think jobs will be available, it is important to understand that the narrower your field of specialty, the fewer jobs there are, period.

Patience and preparation is a must. As well as deciding if you are willing to work as a sworn officer for a number of years to get into some law enforcement positions.

Also, be willing to enter a company in a related position to get in the door, with the idea and hopefully a conversation at the outset, that your goal is to practice in your specialty when the opportunity arises.

No comments:

Post a Comment

I have moderated my comments due to spam.