Information security has a salary of BRL 38,000, but cannot find professionals; see how to enter

[ad_1]

Suddenly, the cybersecurity sector ‘exploded’, especially during the pandemic. People from the area tell g1 what the challenges are, why there are so many vacancies left and what are the best ways to get into it for good. Vagner Martins is a junior information security analyst and shares tips for those who want to enter the area Celso Tavares/g1 Never has information security been so valued as it has been since 2020. That’s because it was only after the pandemic that many companies understood how essential this pillar is for them (understand the reasons below). The problem is that the number of people to work safely is still low because of the lack of qualified labor. To get an idea of ​​the problem, the area has the largest global deficit of talent, according to a survey by Google for Startups. And the salaries are very high, reaching almost R$ 40 thousand. g1 spoke with cybersecurity professionals, executives from large companies and associations representing the sector. Based on these conversations, the report brings, below, a series of practical tips for those who want to start or migrate to the field of protection. In this report, you will find out: What this professional does and how the sector is doing Is the salary really high? What should I study to get started? Options for finding your bubble Where and how can I work in the area? How is work 👀 What this professional does and how the sector is doing It is responsible for managing a company’s security sector and aims to protect sensitive data and information. It helps shield from possible cyberattacks, but it can also establish security policies. Infosec, cybersecurity, cyber security and cyber security are synonyms for the area. See how the sector is doing: 🏴 ☠️ Companies turned on the alert and began to look more closely at their security from 2017 onwards, when there was a massive attack by the WannaCry virus. In this episode, criminals generated a worldwide alert by affecting several companies, including in Brazil. According to the France Presse agency, their computers were infected by a “ransomware” virus and the criminals demanded a ransom of up to $600 in Bitcoins to leave control of the equipment; 👎 But this hitherto unprecedented incident was not enough to change the information security scenario, says Edivaldo Sartor, professor of the graduate course in cyber defense at FIAP; ➡️ Advance to 2020: at the height of the pandemic, with the advancement of digitization, the number of virtual attacks on companies exploded. In this, companies understood that a security lapse can affect their entire operation. Many, then, started to invest and hire specialized people; 📘 At the same time, here in Brazil, they were forced to follow the General Data Protection Law (LGPD), which came into force in 2020 and therefore needed security professionals to adapt to the new legislation, explains Ana Paula Bialer, member of the national data protection council of the National Data Protection Authority (ANPD); 💼 “It is a sector that demands a lot and needs an extremely specialized professional. It is on the rise due to the high volume of online financial transactions, purchases and, obviously, everything related to personal data”, he says to g1 André Barrence, head of Google for Startups; 👀 “We have many scams in Brazil and they are creative. It’s a diversity of problems that you don’t see in other countries, and that opens up space for those who want to get in”, says Marina Ciavatta, specialist in information security awareness, who has worked for more than 10 years in the field; 🏃 ♀️ But there is a very big difficulty in finding and retaining talent, as turnover is high. People end up getting better deals all the time. This scarcity has made companies seek outsourcing, hiring another company that offers information security, explains Roberto Engler, IBM’s security leader. 💰 For Brasscom, the association that represents technology companies, cybersecurity is a trend for 2023 and national spending on protection solutions will grow 13% this year, reaching US$ 13 billion. Professionals tell you what it’s like to work with information security 🤑 Is the salary really high? Marina Ciavatta, an information security professional, says that cybersecurity pays well and that there is a very broad career path within companies, that is, it is difficult to stay stagnant and, therefore, the salary also increases. “It’s an area that has a lot of flow of people, so it’s common to see people migrating from one company to another in short intervals of time. Obviously, that’s where the salary goes up”, explains Ciavatta. Robert Half consulting data shared with g1 show the most sought after professionals and their respective salaries: Governance, risk and compliance analyst (GRC): between R$ 11,850 and R$ 18,150 Governance, risk and compliance specialist (GRC): between BRL 17,750 and BRL 22,600 Pentester: between BRL 13,400 and BRL 18,400 DevSecOps Analyst: between BRL 14,650 and BRL 24,500 Cybersecurity Coordinator: between BRL 17,350 and BRL 23,750 Cybersecurity Manager: between BRL 23,100 and BRL 38,700 For an information security analyst position, which is the gateway for anyone wanting to build a career in this area, the average salary is between BRL 4,000 and BRL 8,000 per month, according to the Center for Studies and Advanced Systems of the Reef (Cesar). 📖 What should I study to get started? As the spotlight for this universe has recently arrived, security courses are relatively new and there are still few options available on the market. Hey, so where to start? 🤔 For other IT degrees, such as information systems, computer science, computer networking and development. They are important to have a base, but then you have to look for a technical security course, for example, to specialize; Search for open or undergraduate courses such as cyber defense and information security. They are new and not yet widely available in all educational institutions, but they help. Attend technology events, after all, they are great for making contact, seeking mentorships and finding professional opportunities. People heard by g1 say they got jobs thanks to these opportunities (see options for events/groups below). Search for content and study types of cyber threats such as malware, ransomware, phishing, social engineering, and advanced persistent threat. 🫧 Options to find your bubble Professionals consulted by g1 indicated some free or non-profit hackerspaces (hackerspace junction) that can receive and guide those who are starting. Here are some options: Garoa Hacker Clube: security community that promotes the exchange of IT knowledge for those in São Paulo, hence the term “drizzle”. Mate Hackers: group that holds meetings, lectures, courses and other infosec activities for those in Porto Alegre (RS). North Devs: considered the largest technology community in the North of Brazil. It has events, lectures, workshops to promote education in the area. Cybersec girl: led by Sabrina Ramos, the community is aimed at beginners in infosec with study materials, lives, podcasts and free courses. Women in Cybersecurity (WOMCY): organization formed by women and with programs for them to enter and develop a career in infosec. Binary Mind: free education and content project on information technology that welcomes beginners from this universe. Hackers do Bem: program formed in partnership between the Escola Superior de Redes of RNP and Senai, which offer free training (EAD) in information security. Divina Naiara Vitorino is infrastructure and security coordinator Fábio Tito/g1 🤔What’s work like? The person who chooses cybersecurity will not necessarily find jobs only in technology companies. “Any company, of any segment and size, as well as public bodies, is in need of a security professional”, says Edivaldo Sartor, from FIAP. Opportunities also exist in retail, communications, healthcare, education, food, beverage and finance companies. But, according to the consultancy Robert Half, the segments that lead the hiring are: Financial market; telecommunications; e-commerce platforms (sales); and the pharmaceutical market. And there are many pillars within cybersecurity for the person to choose to work with, but for experts, the main ones are these: 🔴 Offensive security (Red Team): This professional works in search of security vulnerabilities within the company. The Red Team person simulates intrusions, as a cybercriminal would, to find flaws and alert the defensive area team; 🔵 Defensive security (Blue Team): professionals in this area act to fix these identified flaws. Its #1 goal is to make sure companies don’t get hacked; 🛡️Governance, risk and compliance (GRC): the person who chooses this pillar can structure, apply and monitor legal security processes. It is she, for example, who monitors whether the company is following the LGPD. For those who choose GRC, studying digital law is an important differential. Popularly, the offensive area professional is also known as “good hacker” or “ethical hacker”. But these terms are considered negative by the community. “There is no ‘good hacker’ and ‘bad hacker’. The ‘bad hacker’ is merely a criminal”, says Marina Ciavatta, specialist in information security awareness. Professionals tell us what it’s like to work with programming 💼 What the job is like In everyday life, this worker can act “putting his hands in the dough”, dealing with possible attacks or identifying problems. It is a profession that works by analyzing codes, that is, checking how a virus behaves and analyzing types of threats and possible consequences. At the same time, he must always be on the alert, industry insiders say. But not only that. It is also possible to work leading information security teams. The work can be done in a hybrid model (in person and home office) or only at home office. Working isolated, without contact with other people, is not common, but it can happen in specific cases. “It can happen that the company ‘delivers’ a virus to a person and he has to lock himself in a room to focus and find out how this risk behaves. This profile has space, explains Edivaldo Sartor, professor of the graduation course in cybernetic defense at FIAP. Professionals also say that the area is surrounded by pressure. This is because the responsibility to ensure the company is protected from cyber attacks and leaks is great. Therefore, cases of burnout and depression are increasingly recurrent, according to them. The report is part of the series “Career in technology: information security”, by g1.Based on reports from professionals, professors, executives from large companies and associations representing the sector, the series shows how the cybersecurity market is doing in Brazil. Vagner Martins, junior information security analyst Celso Tavares/g1 ALSO READ: Is programming still worth it? Does it pay money? Professionals tell how the sector is doing (and give tips) ‘I already encourage my children’; ‘beginning can be frustrating’: professionals tell what it’s like to work with programming ‘Play it because it’s worth it’: the stories of programmers working outside Brazil Programming on the rise: see how to start in the sector Programming on the rise: see how to start in the sector 5 tips to start your IT career 5 tips to start your IT career

[ad_2]

Source link