Ask HN: How to move from development to security compliance?

1 pointhemling1 comment

I'm a Java dev 10+ yrs. I would like to move into a position where I can consult companies about security compliance. How do I make this move? The problem is without prior experience it seems all doors are closed. Finding a development job and then hoping an opportunity comes up to get compliance exposure seems not very promising.

Anyone made that shift?

Any pointers appreciated, thanks

View on HN

CISSP would be a good start. That will open a lot of Federal government doors, health IT doors, etc. If you want to be a white hat at Qualcomm or compliance at Google, that's going to be pretty tough straight out of the box. The people I know in such jobs earned their way to them with a lot of hard work and now live with the sword of Damocles hanging over them.

Reply on news.ycombinator.com