This document provides information and advice for becoming an information security (InfoSec) professional. It discusses Obsidis Consortia, Inc. (OC, Inc.), a non-profit organization that promotes security awareness and supports security professionals in Puerto Rico. The document outlines skills, certifications, community involvement, and experience needed to enter the InfoSec field, and recommends building a home lab to gain hands-on experience. It emphasizes learning, practicing, sharing knowledge, and having passion for the field.

1. Obsidis Consortia, Inc.
So, you want to become a InfoSec
professional?
José L. Quiñones-Borrero, BS
MCP, MCSA, MCT, CEH, CEI, GCIH, GPEN, RHCSA

2. What is OC, Inc?
• Obsidis Consortia, Inc. [OC, Inc.] is a non-profit
organization that promotes security awareness in
the community and supports professional
development of security professionals, students
and enthusiasts in Puerto Rico. OC, Inc. has develop
and is supporting initiatives like the Init6 Security
User Group, Professional Training & Workshops,
Network and Security Systems Simulation Scenarios
(Capture the Flag), Security BSides Puerto Rico
Conference and a Community Outreach Program.

3. .. so what do you need?
• Formal Education
• Skills
• Certifications
• Community
• Experience

4. Skills
• Networking
– TCP/IP, Routing, Switching, Cisco CLI
• Operating Systems
– Windows, Linux (Red Hat or Debian), OS X
• Virtualization & Cloud
– ESXi, Hyper-V, Xen, KVM, Amazon, Rackspace
• Services
– DNS, HTTP, Mail, Storage

5. … more skills
• Databases
– MySQL, PostgreSQL, MSSQL
• WebApps
– PHP, ASPX
• Scripting & Programming
– C, C++, .Net
– Python, Ruby, Perl
– Bash, Powershell, CMD

6. Vendor Certifications
• Microsoft
– MCTS, MCITP, MCSA, MCSE
• Cisco
– CCNA, CCNP
• Red Hat
– RHCSA, RHCE
• Vmware
– VCP
• Others
– Juniper, Fortinet,

7. … other certs
• CompTIA
– A+, Network+, Security+, Linux +
• EC Council
– CEH, CHFI …
• SANS Institute
– GIAC …
• ISC2
– CISSP

8. Roadmap
Area Fundamentals Intermediate Advance Top Managerial
Networks
Network +,
CCNA CCNP CCIE CCAr
Windows MTA, MCTS MCITP, MCSA MCSE MCA
Linux LPI, Linux + RHCSA RHCE RHCA
Development MCTS MCSD
Security
Security +,
GSEC CEH, CHFI, GCIH
OSCP,
GPEN,
GWAP OSCE
CISSP, GSEC,
Security +
Others CSM, CISA PMI

9. Community
• User Groups
– Init 6 Security Group
– Stratups PR
– Python Interest Group
• Social Media
– Twitter, Google +, Linkedin, “Facebook”
• Networking
– Student associations, Professional associations
(ISA, ISACA, ACFE, ISOC, IEEE)

10. How to get experience
• Do an Internship
• Set a Home Lab
• Do research and publish it
• Capture the Flag Events

11. Set you own lab
• eBay.com
– Switches, routers, firewalls
• Workstation
– 2-4 Cores, 8-16GB RAM, Dual Monitor, RAID 0 HDs
• Virtualization
– Vmware Workstation or VirtualBox
• Reference Books
– On everything.

12. … so, you want to become a InfoSec
professional?
… learn, practice, share and love it!

13. Open Discussion …
• Q & A
• How can we help?
• How you can help your selves?

14. Please visit us to keep in touch …
www.ObsidisConsortia.org
www.BSidesPR.org
https://www.youtube.com/channel/UCtpOw0dKOIVJu7JZqHx4oQg
https://plus.google.com/u/0/communities/102771209982001396923
https://facebook.com/obsidisconsortia
https://twitter.com/BSidesPR
Affiliates:
www.TalktoanIT.com
www.codefidelio.org
www.darkoperator.com