For Government workers doing any kind of computer security/information assurance, the new regulation, DOD 8570 is a very important document.
DOD 8570, Information Assurance Training, Certification and Workforce Management, requires that all government workers (active duty, govt civilian and contractors) doing security work have a security certification. The DoD is really trying to crack down on security.
Among the top security certification that you can get are the CISSP and the CISA

Getting the top certs and then further specializing could give you the edge. For example, CISSP with an CISA (auditor) would cover a lot of ground as would a CISA and an IDS/C&A/Architecture specialists. It would really kick ass to cover ALL ground. This would not be difficult. Not sure if each specialization would require further certifications.
Cost, Renown, Difficulty Comparisons:http://dmiessler.com/writing/infoseccerts/
Includes: GSEC, CISSP, CISA*note: GSEC is $800 and difficult
Security Certs and their levels according to 8570:http://taosecurity.blogspot.com/2006/01/dod-directive-8570.html
Tech level I-III & Management Level I-III*note: GSEC is Tech level II
Future Areas of IA Certification:
Â
Certification and Accreditation
IDS and Analysts
Auditors
CND/SP members
IA architectures, engineers
(slide 10)On a recent FISC slide I saw Red team (pentesting/hacking) among these future specializations.
Â
Â