An Accelerated Pathway to Careers in Cybersecurity for Transitioning Veterans. NICE Annual Conference November 2015

Transcription

1 An Accelerated Pathway to Careers in Cybersecurity for Transitioning Veterans NICE Annual Conference November 2015

2 Panelists David Brown, Director of CyberTalent at the SANS Institute, a new business unit focused on developing Programs and tools to identify, assess, train, and manage cybersecurity human capital. David joined SANS in Prior to SANS David served in senior management roles in medical research, financial services and Higher education. Arlin Halstead, Vice President of Human Resources at Solutionary, Inc. He joined Solutionary in 2009 with over 20 years experience in Human Resource Management and consulting. Prior to joining Solutionary he led HR organizations within the finance, insurance and retail industries and started an HR Consulting company focused on helping start-up companies develop HR programs and practices. John Nix, Director of Federal Business at the SANS Institute, the business unit focused on enabling our National Cybersecurity Workforce and Cyber Mission Force to excel at their cybersecurity missions through world-class assessment, training, certification and continuing education. John joined SANS in June Prior to SANS John held senior leadership roles with several major defense contractors following his 2002 retirement from US Army Special Operations Command. Donny Greene, Cybersecurity Analyst at RBR Technologies, Inc. Donny recently graduated from the SANS VetSuccess Academy, where he earned three GIAC certifications during an intensive four month training program as he transitioned out of military service. He served in the United States Air Force for 23+ years, earning the rank of Senior Master Sergeant. He has 20 years of diverse IT experience, with 11 different certifications and two degrees from the Community College of the Air Force.

3 Agenda Overview of the VetSuccess Immersion Academy & Pilot Veteran perspective Employer perspective Questions

4 Our Hypothesis Transitioning veterans with high technical aptitude are an untapped source of talent We can train, certify, and connect veterans with great jobs quickly & at no cost to the veterans 4

5 Value Proposition Benefits For Veterans Benefits For Employers 100% scholarship Hands-on learning & technical skill-building Expert faculty with teaching and workplace experience Access to employers committed to veterans Pre-screened, qualified candidates Trained and certified graduates Immediate, positive impact on cyber workforce needs Support America s veterans 5

6 How It Works TRAIN & CERTIFY Demonstrate aptitude and skills via SANS CyberTalent Assessment and interviews with SANS staff and academy sponsors. Off Ramps: Individuals who are not selected receive guidance re: other training available to prepare for cybersecurity careers. Develop practical, hands-on skills by completing SANS training courses and associated GIAC certifications. 2 course/2 certification or 3 course/3 certification Mentors & Online Labs Participants are connected to multiple employment opportunities. 2-4 Months 6

7 Connecting Graduates to Employers HOW WHO 2/year; 15 employers/event; hundreds of positions 5,000 job seeker database available to SANS clients SANS clients & database 120,000 subscribers, representing thousands of cybersecurity employers 7

8 Which veterans are best suited for careers in cybersecurity? Cybersecurity Jobs: Military Career Fields Other Success Indicators: Knowledge, Skills and Abilities Cyber Operations Network Operations Electromagnetic Spectrum Operations Electronic Warfare Computer Network Operations Network Warfare Signal Intelligence Computer Science/Related Fields Critical and Adaptive Thinking Problem Resolution Techniques Project Management Principles Detailed Knowledge of Computer Hardware, Software & Peripherals Working Knowledge of Mathematical and Statistical Principles Technical Report Writing InfoSec Crime Investigator/ Forensics Expert Penetration Tester Security Architect Computer Crime Investigator InfoSec Crime Prosecutor Forensic Analyst Malware Analyst Technical Director Network Security Engineer Incident responder Director of Security Security Analyst Operations Center Analyst Vulnerability Researcher Intrusion Analyst Security Auditor Security Software Developer 8

9 Admissions Requirements Students must be available to attend 1 st course on-site. Degrees/experience requirements: BA/BS and have 1-2 years of experience in IT, IS, or audit, or AAS and have at least 3 years of related work experience, or Those without a degree must have at least 3-5 years of related work experience. Achieve acceptable score on SANS aptitude and skills assessment. Participate in an admissions interview with SANS and employers. 9

10 Pilot Cohort: Student Background Service and Rank 8 Air Force, 1 Army 3 Staff Sergeant, 1 Master Sergeant, 5 Senior Master Sergeant Military Experience 4 25 years 17 years average in IT Security Clearance Secret, TS/SCI, TS/SCI with CI Polygraph Highest Degree 3 with a Master s 3 with a Bachelor s 3 with an Associates Demographics 100% Male 6 Caucasian / 3 African American 10

11 Results 35 applications; 9 enrolled Assessment performance: Overall: 50-90% Aptitude: 64-92% 7 enrolled in 3 course curriculum 2 enrolled in 2 course curriculum 100% Employment in Infosec STARTING SALARY $75-90K $90-120K $120K EMPLOYERS TRAIN & CERTIFY SEC401 Security Essentials & GSEC Certification: 9 of 9 passed on 1 st attempt SEC504 Hacker Techniques, Exploits & Incident Handling & GCIH Certification: 7 of 9 passed on 1 st attempt SEC503 Intrusion Detection In Depth & GCIA Certification: 6 of 7 passed on 1 st attempt US Army Cyber Protection Brigade 11

12 How it s Funded Open Academy Sponsored Academy 2 Course 2 Certification 3 Course 3 Certification Supported by multiple employers Supported by a single company Veteran s Fee Employer Fee 0 0 $15,000 $22,500 Employers gain priority access to by participating in admissions interviews, Academy career days, and through the SANS CyberTalent Connection Database and Virtual Career Fairs Sponsor company provides exclusive support and funding for all graduates in advance. Students agree to join sponsor company upon graduation 12

13 What We ve Learned Thus Far Transitioning veterans with high technical aptitude can be an excellent source of talent to address the skills gap in cybersecurity. We can identify, assess, train, certify, and connect veterans to great employment opportunities quickly. On-site training for the 1 st course creates community among the students. Curricula content, program duration, and support services must be adaptable to meet different needs of transitioning veterans. Program graduates are attractive candidates for technical positions. 13

14 2016 Expansion Plans Type Partners Location When Veterans Cohort # 2 Veterans Cohort # 3 Women s Cohorts # 1 & # 2 Veterans Cohort # 4 Veterans Cohort # 5 Veterans Cohort # 6 NA SANS event & virtual In Process Joint Base Lewis McChord Tacoma, WA In Process NCWIT East/West In Process NA SANS event & virtual Q1 16 Fort Gordon Augusta, GA Q1 16 Solutionary and Offutt AFB Omaha NE Q

15 Recruiting Cyber Security Talent To Meet Today s Demands Arlin Halstead, SPHR Vice President, Human Resources

16 Challenges Why is it so hard to find people? Demand for Cyber Talent is Outstripping Supply Growth is 3x faster than all other IT jobs 25% longer to fill open positions 69% increase in jobs requiring Cyber Security Experience

17 Challenges New Technology Fronts: Mobility to Cloud Motivated Threat Actors Increased Sophistication of Threats Exponential Increase in Number of Attacks Advanced Threats in the Cyber Security Landscape require an Advanced Skill Set to Compete Emerging Skill Set Education and Certification Training and Development Experience Motivations Immediate Impact

18 Cyber Talent Shortage What has to change? Get more qualified people into the field Accelerate Skilled Candidates into Workforce Attract High Potential Candidates Provide Training, Education and Certification

19 VetSuccess Attract High Potentials Well Trained Educated Experienced Engaged Skill Ready Immediate Impact

20 Successful Strategies SANS Partnership VetSuccess Program Immersion Academy Cyber Security Talent Fair Cyber Talent Database Education & Training Professional Certifications

21 SANS VetSuccess Story Ed Russell Graduate 1 st Cohort 25 years service in Air Force Communications Squadron 10 years Supervisor/Management Duties BA Computer and Information Science - University of Maryland Successfully passed three SANS courses in 4 months Hired as an Information Security Analyst - Accelerated OJT Promoted to Lead our Quality Assurance Team

22 Solutionary Future Involvement Sponsored Academy Partner with SANS and Regional Military Bases Attract Transitioning Military Veterans Combine SANS Training with On-the-job Training Place Graduates into Roles aligned to their Strengths Goal: Accelerate Qualified Candidates into Workforce Solution: SANS VetSuccess

23 SANS - VetSuccess Immersion Academy Bridge Gap in Cyber Talent Shortage Attract Skilled Labor Train and Certify Partner with ER s for Placement Accelerate Advance Skill Set into Workforce Provide Support and Value to our Military Veterans of the Armed Forces succeed in IT Security because of the sense of duty that comes with a Cyber Security Role Always on the lookout to defend against the attacks that are out there today. - Rob Kraus Director Solutionary SERT (Sergeant, United States Army)

24 David Brown 24