How can you advance your career in incident handling?

While certification isn't meant to replace experience, the process of studying for the certification exam can help build one's overall knowledge and skillset. Taking and passing a certification exam demonstrates not only your knowledge but also your passion and want to work in the field. For the certs themselves, while the GCIH (which I have) is an incredible certification, not everyone can afford the current price closing in on $10K US. A great place and much more affordable place to start are with the CySA+ and ECIH which were also mentioned here. Good luck in your certification adventures!

Para avançar na carreira de tratamento em incidentes: 1 - Estar sempre de olho nas atualizações de CVE e como os malwares agem, OWASP também. 2 - Obter sempre conhecimento do mercado/tecnologia com certificações

Obtenha uma certificação relevante, treine bastante em plataformas como o letsdefender. Voce pode checar se o Siem/SOAR tem alguma universidade , o CrowdStrike por exemplo tem uma universidade incrível com material de outro mundo legendado...

Incident Response Frameworks: Familiarize yourself with industry-standard incident response frameworks, such as NIST SP 800-61 or the SANS Incident Handling Process. Understand the key phases, best practices, and methodologies involved in incident response. Hands-on Experience: Gain practical experience by participating in incident response exercises, simulations, and real-world incidents. Seek opportunities to work on incident response teams or collaborate with experienced incident handlers. Mentorship and Networking: Seek mentorship from experienced incident handlers or join professional networks and communities. Networking can provide valuable insights, guidance, and potential career opportunities.

Look for opportunities to gain hands-on experience in incident handling by pursuing positions like Security Analyst, Incident Responder, or SOC (Security Operations Center) Analyst. Actively participate in incident response activities, including monitoring, detection, analysis, and resolution of security incidents. Additionally, dedicate time to analyzing and learning from logs generated by various devices to enhance your understanding of the incident handling process. Furthermore, familiarize yourself with open-source tools available in the field to broaden your skillset and capabilities.

KB ARTICLE CONTRIBUTION #127 Some additional tools for Incident Response, from a recent survey I did that had 580 votes, are as follows: -ManageEngine 13% -SolarWinds 14% -CrowdStrike Falcon Insight XDR 54% -IBM QRadar 19% Plus, others called out extra tools that the use in the comments, and I am including those below: -Sift workstation -Microsoft Defender XDR -Sof-elk -Security Onion

The great thing about incident handling is that many of the tools commonly used in the field are open source and free to use. Not only that, but there are also many online CTF exercises that can help you further learn and practice your skills. Be sure to check them out! At the same time, be sure to find those in the community that post specifically on incident handling and be sure to follow them here on LinkedIn and other social media.

Communication is key. Information will come from everywhere when an incident is occurring, and it is crucial to have in place a process which will ensure this information is communicated properly to the concerned team members. Having great communication skills ensure each members are up-to-date and have the correct information to orchestrate their next activity. It ensures the efficiency of the team during an incident which minimize the risk.

One of the key skills anyone in any field should have is the ability to communicate. We can say "communicate effectively," though for me it means to communicate simply. Work to be able to explain complex subjects in simple terms that anyone can understand and you'll be well ahead of many others in the field and at the office. Everyone will appreciate your efforts in making things easy to understand!

Earn industry-recognized certifications: CISSP, GCIH, and CISM are just a few options that validate your skills and knowledge to employers. Invest in formal education: Pursue a degree in cybersecurity, computer science, or a related field to solidify your theoretical foundation. These steps can help you stand out in the competitive cybersecurity landscape and unlock exciting career opportunities.

Like with any field, one of the best ways to expand your knowledge is to share with and learn from others. And the best way to do that is to network. While many in the technical fields can be introverted and afraid to network, realize that it isn't as scary as you might think it is! And if you think it is still, start small such as using social media to participate in the cyber security community. LinkedIn has an INCREDIBLE cyber security community where the vast majority of people want to help others while leaving their egos at the door.

KB ARTICLE CONTRIBUTION #129: Skill sharing is one of my favorite things to do, plus networking with peers is a insightful way to facilitate that, and LI is an exceptionally great resource for finding people with various skillsets as well as unique perspectives who are willing to have open discussions on a wide range of Incident Handling topics as well as eager to answer any questions you might have.

We should always consider ourselves lifelong learners. Continue to increase your knowledge and skillset through gaining hands-on experience and pursuing other certifications that help you grow your knowledge (and prove your passion for the field).

KB ARTICLE CONTRIBUTION #130: I have a longstanding goal to obtain my Master's in Cybersecurity without taking on an exorbitant amount of debt, plus there are companies who offer tuition assistance to obtain degrees, so I believe that would be the best way to move towards achieving that accomplishment. FOR EXAMPLE: If you work full-time in a Higher Education institution, they have a tuition waiver where you only pay about $200 per course, plus any expenses for books and equipment.

Really important to sharpen your axe regularly. New trends and technologies are constantly introduced into this industry which shape how things operate and function in certain areas. By taking notes and understanding what the technology and threat landscape is consist of, you will be able to prepare accordingly. Also, you can adopt new practices to avoid and minimize the risk of an incident occurring. Therefore, you improve your efficiency and performances when an incident happens.