i have several bits of low-level advice: - dont lie on your resume - if you dont know something, just say you dont, and move on - dont spend the whole call bragging - never answer "but I cant talk about it". - expect to get asked shit you dont know
Let's provide some *positive* advice and/or motivation for folks who really want to focus on information security as a career. I'll start: There are a ton of opps out there. You don't have to commit to a specific path right away. (ie. pentest, blue team, grc, iot, ics, etc.)
-
-
-
- be comfortable with what you do/dont know - be prepared to talk about your experience - be prepared to field trick questions - understand people wanna hire because they have a problem to solve or a job to get done - have your own questions ready for them - dont be afraid to ask
-
many times I find myself uncomfortable with what I don’t know until I realize that I don’t have to know everything... then balance settles in and this is where I seem to learn new tactics-techniques-procedures more efficiently
End of conversation
New conversation -
-
-
Security awareness & engagement is a great career path for people with a marketing, comms, or UX background. You don’t need to be a deep technical security expert. It’s also one of the few niches in security that is majority women (58% of full-time awareness pros are women).
-
If you want to learn more about security awareness strategies and what it’s like to lead awareness for a large company, definitey join us next Wed as we talk to one and only
@ShaylaTreadwell! Feel free to hit up@jasonhoenich for advice, too!https://twitter.com/chadloder/status/1088195275397578752?s=21 …
Security awareness? Organizational behavior? Strategies for changing culture? SCIENCE!!
Join me next week LIVE, and learn from @ShaylaTreadwell!… End of conversation
New conversation -
-
-
You can be you and be real, and that is a positive thing, not a negative thing. Keep learning. You got this.
- End of conversation
New conversation -
-
-
we have lots of great free training (ie: http://opensecuritytraining.info ) and experienced folks who are willing to help out new people!
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Never be ashamed of what you don't know, drive to find those answers. Even the most seasoned people in this industry never stop learning and we all depend on researching and working with peers for our mutual successes.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
There are many wonderful people who will mentor and support you in the community. Even if they don't have the time, they will make the time. Remember this is about people. It is helpful to have tech skills but also people skills.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
security is an industry for noobs! since it changes soo fast and doesn't have a certification/degree requirement, there is a low barrier to entry for those willing to learn. You don't get the same opportunity in more traditional career paths, like accounting.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Remember that information security is not one thing. Review https://www.linkedin.com/pulse/map-cybersecurity-domains-version-20-henry-jiang-ciso-cissp/ … and pick a domain to start with that seems right for you...learn something new and then keep going. The map has multiple paths to connect!
- 1 more reply
New conversation -
-
-
I'm in! If your goal is red team, be on the blue team first. If your goal is blue team, be on the red team first. Or at least learn as much as you can about the opposing team's methods.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Understanding tech is a core foundation for effective InfoSec. IT is one place to start - network config, access controls, all the day-to-day. Once you have some IT under your belt, transitioning into InfoSec is a lot easier, including by adding some InfoSec into your IT role.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Don’t believe your current career/education/experience is not applicable. All skills have value in this field if you know how to apply it. If you do not think it’s applicable ask around, it is applicable
- 1 more reply
New conversation -
-
-
Learn a scripting language. Then realize that scripting language is only one tool, and branch out to have more than one tool.
-
So valuable. I searched for a way in a few years long, and a scripting language helped me build a base, making everything else easier. Can recommend.
End of conversation
New conversation -
-
-
Everything is made up of people, tools & process. The more you know your own role & where it fits into the bigger picture; the easier it is to see the relationship. It's easier to transition a degree or two away from what you're doing if you remain in the same Framework.
- 1 more reply
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.