Theft of passwords and personal data, ransom extortion, disinformation - today the threat posed by the use of new technologies is growing more and more. Experts caring for IT security are key employees of many companies - they earn great money, but have a huge responsibility on their shoulders. Who are? What are the career paths in this area?
Growing cyber threat
In recent years, there have been several distinct trends in the area of cyber attacks. The most common are typuransomware attacks, where hackers encrypt company data and demand a ransom to decrypt it. There is still a lack of very accurate data on this subject, but there is a strong belief in the business world that cyber attacks are one of the most profitable crimes alongside drug trafficking. In order to break into servers, attackers can take advantage of the inattention of employees who open attachments from messages from unreliable recipients.
Unfortunately, the more and more popular are the redential stuffing attacks, where logins and passwords, once stolen, are verified on various other platforms. It turns out that many people still use the same passwords to log in in many places, which for criminals in the world of technology is a great help in obtaining key information about, for example, access to bank accounts.
The last trend that was strongly observed during the war in Ukraine is disinformation attacks. Their consequences are certainly not as direct financial as the types presented above, but they constitute a powerful weapon in the propaganda war.
Large and wealthy companies in particular fall victim to cyber attacks, as hackers can expect to pay tribute from them. Companies with less capital are less tasty morsels. However, the principle of attacking is analogous and everyone is equally susceptible. Therefore, the trend in the demand for IT specialists in the field of network security is growing - concludes Karolina Giza, team leader, Antal IT Services.
Cyber sentinels wanted by companies and public institutions
Cybersecurity is an area that has been developing rapidly recently. The development of technology and its use increases the risk, and thus the need for security increases, and organizations not only from the private but also public sectors place emphasis on the development of the IT protection area in their structures. This undoubtedly translates into the development of existing network security teams, and where this area has not been developed, the creation of new departments.
We observe increasing recruitment needs for positions such as: Cybersecurity Engineer; Cybersecurity Architect, Pentester, Cloud Security Engineer, DLP Engineer or Cyber Risk Analyst. High demand for IT security specialists influences their financial expectations. Of course, it depends on experience and specific competences, but overall salaries range from 25,000 to even 40,000. gross monthly for senior or leadership level employees - indicates Karolina Bucka.
How to start your way to guard the network
The cybersecurity career path is very diverse. Students and graduates of IT, seeing the growing market needs for this specialization, often immediately train in this area and take up internships in IT security departments. Often, specialists in the field of IT infrastructure, who already partially had this area in their duties, deepen their expertise. Each company has a slightly different structure and demand. With regard to this specificity, they create teams.
It is important to certify the competences held. Each additional production certificate will be an asset, but will rarely be a requirement to participate in the recruitment process. CISSP is a certificate that is undoubtedly highly respected and respected because of the vast knowledge and experience needed to pass the exam - notes Karolina Bucka.
Security for businesses is important at all levels. It's not just the security teams that don't care. Of course, experts prepare the framework, establish rules and set directions for the development of protection systems, but in fact, each team must now take into account the security of applications, systems or any solutions created. At the Security Forum, a meeting of which Antal was a partner, you were able to talk to specialists in, among others, crisis management, energy and digital security, business continuity and supply, education, fighting against economic and financial fraud, which will allow you to broadly look at the issue of enterprise protection - Karolina Bucka concludes.