3 ms·
Security is kind of a weird space. You can't just buy security. It's lots of consulting and training firms with some products that enterprises buy. I have a fe
by ejcx 11y ago
Security is kind of a weird space. You can't just buy security. It's lots of consulting and training firms with some products that enterprises buy.
I have a feeling this is going to be just like all the other ones, with some proprietary IDS.
One interesting thing to note, being originally from NoVa/DC. No mention of a clearance requirement in the company's job reqs. I've never seen a job req that required a clearance without one.
- milge 11y agoIf you think about not having security clearance, it makes sense. You'd usually have clearance to see certain data. By not requiring it, you're replicating how anyone else would try breaking into secure systems.
- vonmoltke 11y agoThe way most agencies work, the vulnerabilities would be considered classified information. So, the testers would not have access to classified information prior to the evaluation, but what they find during the evaluation would become classified.
- rdl 11y agoThere are plenty of cases of working on unclassified systems in classified environments where you need a clearance primarily to get to the point of doing your work. Less true as a contractor building products, less true in the US vs. deployed.
- Eridrus 11y agoYou can't just buy it, but you also can't afford to build all your tools in house. It probably will be some new detection technology, since that's the direction the industry is going (if you can't prevent all breaches, you need detection anyway) and I don't think we've exhausted the space of possible approaches to detection yet.
- Bedon292 11y agoMost of the development could easily be done with a bunch of uncleared individuals. It would only takes a few cleared people to implement the technologies on the classified systems, which could be a different job req.