4 ms·
Super interested in this space. I checked your profile but only saw a keybase profile. A friend JUST hooked me up with an alpha tonight! What if I am infosec/
by 616c 10y ago
Super interested in this space. I checked your profile but only saw a keybase profile. A friend JUST hooked me up with an alpha tonight!
What if I am infosec/netsec/whatever student and I watch a ton of Pluralsight on AWS and Docker and I am starting to build my own lab. Will people hire someone like me? I ask publicly because I assume I'm not the only one.
- eganist 10y agoPossibly. Especially if you're using building the environment as a testbed for teaching yourself how to break into apps or how to automate security tools. About that... you know what's more likely to get you hired in the space? If you have no work experience in appsec but walk in and tell or show me a pattern for how you automated appsec testing in a build pipeline or QA process at home and describe the challenges you had to overcome, or if you have a few fleshed-out bug bounty submissions (with exploits) and can describe your favorite one in depth, or if you've taught yourself how to review code for flaws and could do it in front of me in an interview setting, I might be quite willing to waive the years in appsec requirement. Other smart hiring managers probably will too. https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project https://www.owasp.org/index.php/Category:OWASP_WebGoat_Proje... <<This is a good starting point for learning how to break things. Also for learning how to fix them :)
- 616c 10y agoGot it. This is what I will spend my weekends on after an exam. Thanks for your response, and aapologies for my late reply.