CYBER SECURITY CAREER GUIDE Start Your Career | Develop New Skills
Total Page:16
File Type:pdf, Size:1020Kb
UNCLASSIFIED CYBER SECURITY CAREER GUIDE Start your career | Develop new skills IN THIS GUIDE } WHAT IS CYBER SECURITY? Learn how cyber security affects your everyday life and why more professionals are needed. } TYPES OF CAREERS Learn about the different roles you can play. } WHO IS HIRING? Find out where your career can take you. } CAREER PATHWAYS See how the path you choose leads to different career options. } WHERE TO GO TO SCHOOL Find out where you can get the education you need to start your career or develop new skills. } WORKING AT CANADA’S NATIONAL CRYPTOLOGIC AGENCY Find out why a career at the Communications Security Establishment (CSE) may be right for you. WHAT IS CYBER SECURITY? Many teams worked together to create this guide from the comfort of their homes. Amid a worldwide pandemic, we managed to keep working. To create. To move forward. To communicate. But the COVID-19 pandemic did not bring out the best in everyone. There were unscrupulous people trying to take advantage of Canadian citizens. Our healthcare systems were targeted. Criminals were looking for Canadians’ names, SINs, addresses, birth dates, and banking and credit card information. Criminals tried to trick Canadians into clicking on links that would take them to malicious websites. The links were sent via text messages, emails, and social media apps. Once on the website, malicious code would start downloading onto devices to steal personal information. Stop for a minute to think about all the things you do on your Hi, my name is Christine Beauchamp, and I phone, tablet, or laptop. Do you do your banking online? Do am the Director of Client Engagement and you have a mobile wallet? Do you chat on social media or send Incident Detection at the Canadian Centre pictures to friends? Do you have your assignments stored for Cyber Security (within CSE). there? When I graduated from the University Wouldn’t it be nice if you could go online and not worry about of Ottawa with a degree in Sociology criminals trying to steal your money or identity? to combine with my degree in Russian translation, I did not see myself working That is what cyber security is. It is the constant pursuit in cyber security. But, just as quickly as to secure our information systems, the data on them, technology advances, career options and and the services they provide. It is about protecting the educational pathways grow. systems that all Canadians rely on like healthcare, banking, telecommunications, energy, and transportation. It is about In the following pages, you will find protecting businesses big or small. information on the cyber security field and the many educational paths that can lead Cyber security is about securing our future. you to your dream job. I hope this guide helps you find the path that best suits your interests—one that makes you want to get out of bed in the morning. Whichever stream you choose, you will be making a difference by helping strengthen Canada’s digital safety and security. Whether you write code, set up equipment, design infrastructures, or train the next generation, you are helping to secure our future. Good luck! I can’t wait to see where your path takes you. 2 CYBER SECURITY PROFESSIONALS ARE… MARK IN DEMAND WOOFF The number of jobs for cyber security professionals in Canada is growing by every year!1 “When you work at CSE, every day is an 7% opportunity to make a difference in the world of cyber security.” the number3.5 Million:of vacant positions worldwide by 2021.2 AYESHA WELL PAID SIDDIQUI The annual average salary of a cyber security professional in “At CSE, you will find yourself surrounded 3 2020 is . by a group of brilliant, dedicated, and $97,000 considerate experts who work towards a common goal. Explore the phenomenal opportunities and build a career you’ll be DIVERSITY REQUIRED proud to call yours!” Today’s cyber security professionals know that the best solutions come from diverse teams. Having people of different backgrounds and experiences working together on a problem creates the best, most effective solutions. ANGELA Diversity provides access to a greater MCALLISTER range of talent. It provides greater insight into clients’ needs. It helps open doors to new markets and helps make a company more profitable and resilient. “My work is meaningful and helps protect Canada. I love knowing that I’m making a Cyber security is for everyone! positive contribution to Canada’s future.” 3 CYBER SECURITY PROFESSIONALS PROTECT THE SYSTEMS WE RELY ON In the last 20 years, advancements in technology have changed the way people communicate, bank, shop, and pass the time. And, despite its small market size, Canada was the third most targeted country to possible cyber attacks in 2018. The growing threat of cyber attacks has made governments and industries more aware of the need to protect and defend the information and systems Canadians rely on. As a result, cyber security is growing as a recognizable discipline that encompasses multiple specialities in science, mathematics, business, social sciences, and computing and engineering faculties. Although only a subset of businesses participates directly by producing or selling cyber security solutions or by building or operating networks, every business uses technology to deliver its products and/or services securely and efficiently to consumers. Cyber security, as a result, has become more important to protect the computer systems of all businesses in all industries. FINANCE AND BANKING GOVERNMENT The industry maintains valuable Cyber attacks on governments are information such as client identities, increasing daily because a successful bank account information, financial attack provides access to large amounts assets, and intellectual property. of private and sensitive information. HEALTH COMMUNICATIONS Systems hold sensitive patient The industry transmits a large amount information and encompass medical of sensitive information such as online implant devices such as pacemakers retail transactions, email messages, that may be exploitable. web-browsing activity, social media platforms, and user’s private information. TRANSPORTATION An industry vulnerable to cyber attacks ENERGY AND UTILITIES to air and ground transportation An ideal target for cyber attacks on systems. As well, the industry holds industrial control systems to access sensitive and valuable information such data or to cause physical damage to as birth dates, and passport numbers. infrastructures. SAFETY Emergency response teams, law enforcement, call-center communications-management software, CCTV systems, interactive voice response systems, and emergency alert systems are all vulnerable to attack. 4 WHO IS HIRING? Everyone! That may be an exaggeration, but it is not far from the truth. Businesses of all kinds have proprietary information they need to protect. They also have the personal information of their employees, clients, suppliers, and business partners to protect. Every online retailer, bank, school, law firm, medical facility, utility, government has information and systems that need protection. Companies that engineer systems or new technologies, or companies that perform design work have intellectual property that needs to be protected. Basically, if a business uses the internet or a network to perform its tasks, it needs cyber security professionals! Cyber security is fundamental to good business. Private sector companies and government agencies both offer exciting career opportunities. Plus, the skills and experience acquired in either sector are attractive to both types of employers. So, mobility from one to another is always an option. The facts below highlight why cyber security professionals are in high demand. Any device that is connected to the internet is vulnerable to cyber attacks. Worldwide, there will be ~38.6 billion devices internet-connected devices by 2025.4 Cyber attacks happen every 39 seconds.5 WHAT DO CYBER SECURITY PROFESSIONALS DO? The great part about cyber security is that it Cyber security professionals work in diverse fields and encompasses many different fields. Yes, there are the perform important roles, such as: extremely technical roles. But there are also many } Defending our nation different fields that contribute to a business’s security posture (how good their cyber defences are). } Securing our telecommunications infrastructure } Safeguarding our money As today’s companies do more of their business online, } Protecting our electrical distribution systems the need for cyber security professionals continues to grow. } Protecting our identities } Ensuring our medical information remains private Job roles can be separated into four basic categories. } Stopping ransomware attacks Let your interests guide you when choosing a career path. } And many more 5 1. GOVERN AND SUPPORT NO EXPERIENCE? NO PROBLEM. Manage and provide direction and support to ensure an organization So, you’ve decided to make the jump and enroll in a conducts effective cyber security cyber security program. Now what, you ask? “Will I be work. Roles include cyber legal able to find a job in the field after school if I have no advisor, policy analyst, privacy work experience in cyber security?” officer, and risk analyst. The odds are in your favour. Consider this: graduates of cyber security programs tend to be quickly recruited by public and private sector organizations. 2. PROTECT AND DEFEND In fact, the shortage of cyber security professionals Detect, prevent, respond to, and is so pronounced that organizations are retraining recover from cyber incidents and employees in basic cyber security skills on the job! As threats. Roles include cyber threat a skilled graduate of a cyber security program, you are assessor, data scientist/modeler, big sure to be an attractive candidate for many employers. data analyst, cyber security analyst, information security analyst, To increase your odds, do the following: vulnerability assessment analyst, and penetration tester. NETWORK Get a LinkedIn account and start connecting with 3. DESIGN AND DEVELOP people in the industry. Businesses post jobs there and Develop, secure, test, and integrate recruiters use it as a tool to find candidates.