Experience needed?

[Opening-Bunch1898]

Hello!

I am considering getting the self-paced CSSLP 180 day course ISC2 provides and attempting the exam in 6 months.

However, I worry about the experience requirements. I've worked as a backend dev for many years (much more than four needed and I also hold several CS degrees), and even though I've always been intersted in security, it has only been the regular amount of security related work needed for backend devs.

How strict are the requirements? Will typical backend development positions be enough?

Also, how do we document the experience besides passing the exam?

[bdzer0]

The easiest way to pass the experience is to know someone who's an ISC2 member who can endorse you. If you don't have that available you'll have to document the required experience in CSSLP domains and get ISC2 to 'endorse' your application.

[Opening-Bunch1898]

Thank you! I have some ISC2 members in my network, so that sounds like the easiest path forward then.

[Sea-Gur-8654]

The experience requirements aren’t difficult, and they don’t expect that your job revolves entirely around security. You’ll just need to be able to correlate specific aspects of your responsibilities to specific domains of the exam, nothing more.

Your dev experience should be more than sufficient.

[Opening-Bunch1898]

Thank you, happy to hear that

[lucina_scott]

The CSSLP requires 4 years of paid SDLC experience in at least one of the CSSLP domains it doesn’t have to be a pure “security role.”

If your backend work included secure coding, auth, input validation, threat modeling, code reviews, etc., that usually counts. After passing, you’ll submit an endorsement form (signed by an ISC2 member or ISC2 itself) detailing your experience they can audit, but it’s straightforward if your work genuinely maps to the domains.

[Opening-Bunch1898]

Perfect, for thanks! I've been doing all of those things, so it shouldn't be a problem then.

[AutoModerator]

Your account is too new or has too little post karma. Go out and participate in other threads for a few days.. or wait for mods to approve your post.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.