4 ms·

I'm also intrigued, and seemingly let down, by folks with degrees in "Cyber {defense|analysis|warfare}". These degrees are always laid out on a resume with oth

by ra1n85 11y ago

I'm also intrigued, and seemingly let down, by folks with degrees in "Cyber {defense|analysis|warfare}". These degrees are always laid out on a resume with other super-sexy sounding credentials and accolades. Unfortunately, the interviews always seem to reveal a lot of (sometimes serious) technical gaps. The only reliable indicators I've come to find for technical and engineering acumen are curiosity and experience. These sexy sounding degrees are starting to become indicators of candidates that don't meet requirements.

chrisseaton 11y ago
Yes presumably this whole thing unravels when you interview someone and say 'oh great you have PhD - can you tell me about your top three peer-reviewed papers'
- HarryHirsch 11y ago
  Assuming that you are permitted to unravel the ruse. If your company's purpose is to suck on the Federal teat, such actions are discouraged. Just look next door at the Theranos thread! For the better of ten years, asking hard questions about Theranos was discouraged.
TACIXAT 11y ago
There is a certain school in my area that offers a Masters in Cyber Security. We have come to learn through interviews that people with this degree know very little about practical security, reverse engineering, and exploitation. I'm sure it helps them get a sweet government job though.
- grkvlt 11y ago
  Of course you don't need to know how to write shellcode, or have in-depth knowledge of anti-debugger reversing tricks, to write a very useful and robust security policy for an organisation, or manage a global incident response team. I wouldn't be so quick to dismiss the degree just because it doesn't teach 'practical' security. It's the same story with Computer Science degrees, which don't teach about source control or agile software methodologies, since these 'practical' subjects aren't really anything to do with CS.

by ra1n85 11y ago

chrisseaton 11y ago

Yes presumably this whole thing unravels when you interview someone and say 'oh great you have PhD - can you tell me about your top three peer-reviewed papers'

HarryHirsch 11y ago
Assuming that you are permitted to unravel the ruse. If your company's purpose is to suck on the Federal teat, such actions are discouraged. Just look next door at the Theranos thread! For the better of ten years, asking hard questions about Theranos was discouraged.

TACIXAT 11y ago

There is a certain school in my area that offers a Masters in Cyber Security. We have come to learn through interviews that people with this degree know very little about practical security, reverse engineering, and exploitation. I'm sure it helps them get a sweet government job though.

grkvlt 11y ago
Of course you don't need to know how to write shellcode, or have in-depth knowledge of anti-debugger reversing tricks, to write a very useful and robust security policy for an organisation, or manage a global incident response team. I wouldn't be so quick to dismiss the degree just because it doesn't teach 'practical' security. It's the same story with Computer Science degrees, which don't teach about source control or agile software methodologies, since these 'practical' subjects aren't really anything to do with CS.