From Andrew Hay I saw this list of the “coolest” IT security jobs from SANS. I see a good mix of testing, after-the-fact response, detection and hands-on engineering/monitoring, and advisory/managerial positions. I’m always happy to see a good mix, since too often it seems the advisory/managerial people get heard from the most and aren’t always the ones with their ears near the ground.

On the other hand, there are a lot of ties in both lists, which might indicate a low number of votes. The higher then number of votes, the less ties I should expect.