August 11, 2010, 12:39 PM — Information security is a tough field to break into and a growing group of information security professionals are finding that it's a whole lot easier if someone has their backs.
A program started in March called InfoSec Mentors has already paired more than 100 mentors and mentees who share their expertise on technology as well as broader issues such as how to define and achieve career goals, spread their ideas about the industry and overhaul their resumes.
"I wish there had been something like this when I was trying to make my start in the industry," says Melissa Fagan, who organized the program after hearing a talk about the one-day mentor program organized by Stacy Thayer held this spring at the Source Boston conference.
Since then she has driven InfoSec Mentors by soliciting participants and matching up more veteran professionals with relative newcomers or those who are looking for guidance in making career changes.
The group got a shot in the arm recently at the Security B-Sides conference in Las Vegas where 30 more people signed up for the program, she says.
A survey of participants showed that 20% weren't making a productive connection with the mentor or mentee they were paired with. In those cases, Fagan finds them another partner. Mentors have backed out for a variety of reasons including insufficient time to devote and a mentee's interest in black-hat hacking.
Another 20% who said they were very satisfied were actively working on projects together such as resume tuning, starting up blogs or doing programming exercises. "Anyone who worked on a project was definitely satisfied," Fagan says.
The other 60% said it was too soon to declare the program a success or failure because they hadn't done much yet, but they could see that it would be successful once the relationship kicked in, she says. So far everyone who has volunteered has been matched but there are no guarantees.
Jack Kowalsky, a mentee who has been doing DOS and Linux administrator work for the past six years, has been paired up with a Web application security professional, Dave Rook, in Ireland. They've corresponded about how Kowalsky can prepare himself for an infosec career and met in person for the first time at Security B-Sides.