-
Continue reading →: The Worst InfoSec Resume, Ever
I do quite a bit of InfoSec résumé reviewing and critiquing, both personally and professionally, so I’m repeatedly asked for tips on common problems. In order to ensure that these problems were not exclusive to me, I recently had a lengthy discussion with a number of InfoSec professionals involved in…
-
Continue reading →: Starting an InfoSec Career – The Megamix – Chapter 6
[You can find the previous chapters in this continuing blog series here: Starting an InfoSec Career – The Megamix – Chapters 1-3 Starting an InfoSec Career – The Megamix – Chapters 4-5] Chapter 6: Self-Study Options In the previous chapters, I’ve discussed potential career paths, education and certification options, and the fundamental…
-
Continue reading →: Hair Dryers, Hacking, and Us
In case you’ve been living under a rock for the past several days, IBM posted, then ultimately removed a video promoting STEM fields for women via “hacking hairdryers”, to a great deal of public outcry from STEM professionals. The unhappiness stemmed not only from perceived sexism, but also tremendously poor…
-
Continue reading →: Starting an InfoSec Career – The Megamix – Chapters 4-5
Chapter 4: Blue Team Careers With the help of many people in InfoSec who kindly gave me advice and quotes, I have created a perhaps overly simplistic listing of common InfoSec roles in today’s market. For each role I have listed a brief summary of what the job does, where…
-
Continue reading →: Starting an InfoSec Career – The Megamix – Chapters 1-3
Even once a person realizes he or she has a passion for information security, moving in the field can seem a daunting task. The education market is oversaturated with degrees, certifications, and training programs. Meanwhile, many prominent hackers mock those programs publicly. Although I’ve touched on security education and training…
-
Continue reading →: How to become a hacker… now with 80% more pictures.
Around con time, I’m frequently asked ‘how to become a computer hacker’. Since it’s a delightfully non-specific question, I have decided to illustrate my response for posterity: The most critical things when getting into infosec are the right attitude, curiosity, and interest, a solid foundation of technical knowledge, and the…
-
Continue reading →: Community
One of my friends commented today as the infosec community broke into another quabble that, If nothing else, today we learned how fragile the InfoSec community is. — Robert Olson (@NerdProf) September 9, 2015 Okay. Let’s step back for a moment. Disagree or agree with me, but kindly let me…
-
Continue reading →: Better GIAC Testing with Pancakes
It’s no secret that as well as being a SANS instructor myself, I’m a long-time fan of SANS and their associated GIAC infosec certifications. Some certifications aren’t worth a ton of credibility in the information security arena, but the SANS training and testing mechanisms really do ensure that students have…






