This last week I came across a great presentation at Source Boston, and though it’s a repeat of a presentation from last year’s Defcon.  I didn’t get to see it then and the video from Source is a lot higher quality.

In the presentation Mike Murray and Lee Kushner talk about their experience in the business of information security.  Mike has a long history in security and better than most understanding of the business of security, and Lee presents from the perspective of a recruiter.  These two hit a lot of important points, and give great advice for anyone wanting to break into the security world, or better understand how to make their career in it.

These guys do a great job of explaining how the security team isn’t “special” anymore, and it’s often being rolled into other parts of the organization.  They also tackle the a question that I hear constantly from those looking to get into infosec, “What certification should I get?” with a great answer, “Whichever one you feel will allow you to connect with the people you want to know and establish the brand that you want to”,  which may not be in the form of a certification at all, and may involve getting involved in a specific conference or a niche area of research.