Helping along the next generation of security professionals

I enjoy being a catalyst for up-and-comers in security, even if it is for a fleeting moment.  And today I got that cool feeling when I was at a mini security conference here in Houston (since I am one of the very few bloggers not going to BlackHat and Defcon).  As I was standing at our booth and making conversation with everyone walking by, a young guy walked up asking about our company and the partner that was with us.  We talked for a bit, and then we performed the card-swapping ritual.  As he looked at my card, he started asking me about my CISSP certification.  He said he was looking at getting his and wanted to know whether or not it was worth it, what the experience was like, etc.  I gave him some recommendations, told him to look at joining some security associations (ISSA, Infragard, etc.) since they have some study groups, recommended some materials, etc.

Now I know I will likely receive some comments on whether or not the CISSP is a good cert, etc., and that is fine.  But the real reason behind this post is the aspect of getting to help someone along in their quest for becoming a better security professional (or any professional for that matter).  It is the chance at some form of mentorship.  It is the knowledge that someone has benefited from my experience.  And frankly, that is a cool feeling.  And that feeling got even cooler when I received an email from that same young man thanking me for the time and saying that he was going to take my advice on joining one of the professional security organizations.

Basically, I want to help those guys and girls trying to make it.  It makes me feel good that I can help, and it makes me feel good that someone gives a crap what I think.  Maybe it is because I have some letters behind my name, since obviously this guy didn't know me from Adam.  But at least I got to help.  That made my day.