I'm graduating with my bachelor's in computer science in December, and I'm looking to get an internship in a security consultant firm for the summer, or apply as an analyst/associate in October. I've got a pretty even spread of security topics from academics and independent study (including crypto algorithms, protocols, security tools [nmap, wireshark, etc...]), and lately I've been focusing a lot on IPv6 security and the IPv4-IPv6 switch. I also do quite a bit of reading about business and management, and I historically know my way around an office.
I guess I'm kind of asking an open-ended question to see:
- If my academic and independent study experiences will be any more than loosely relevant in the field
- Which skills in particular I should focus on that would really make me stand out as an applicant
- Do certifications mean anything for an 'untested' applicant (someone directly out of school)
- As a consultant, how much of what you do is nitty gritty hard network security (beyond pen testing) and how much of what you do is more risk and policy analysis/auditing (I understand this varies from company to company, but I'd like to get individual case feedback)
Any help you guys can give me would be greatly appreciated. Thanks.