4 ms·

Sounds great. But how would I (software engineer) go about moving into those sorts of jobs? Do bug bounties until I make it?

• lev99 9y ago
  Start blackhat and switch to whitehat when the feds catch you.
• sheeshkebab 9y ago
  Talk with ops guys and have a security guy (that typically is on that team) assign you things to fix. It’s a bull shit job, as far as software development goes. Sure, you’ll learn a bunch of hacks and ways to fix them and maybe pass cissp cert if you really don’t want to code anymore.
  • souprock 9y ago
    It's not a bullshit job. It's 3.5 million supposed jobs, many of which are bullshit. All sorts of unrelated things are being lumped together. a. compliance b. red teaming c. actually trying to secure stuff d. trying to find holes to exploit e. etc. etc. etc. Some of these involve lots of code. I posted one of those in the "Who is hiring?" thread, and that one takes some serious hard-core coding ability.
  • deleted 9y ago
    [deleted]
• FLUX-YOU 9y ago
  OSCP has a good reputation and should definitely get you a position combined with your engineering experience. If you're in a big city, try to find a security meetup that runs CTFs or events for new folks. Doubly so you can talk and get a more definite direction. Anything OSCP tests you on can be done yourself by virtualization on your own machine or home lab.