Security firms generally promote from within, even if they sometimes hire the highest-ranking personnel from outside the company. It’s tough to say how long it’ll take for you to get promoted. A lot of the time, it depends on how much continuing education you’ve completed, how you fit in with the team, and whether you're proactive in striving to resolve problems.