3 ms·
I have NEVER heard a useful description by a cybersecurity analyst (i.e. detecting intrusions and exfiltration) on how they do their work, despite being in a po
by itronitron 9y ago
I have NEVER heard a useful description by a cybersecurity analyst (i.e. detecting intrusions and exfiltration) on how they do their work, despite being in a position where they should have been able to do so. Usually I just get shrugged shoulders.
- quotheth 9y agoI can't tell what this post is implying - that sec analysts are like... a fake job? Can you please elaborate?
- itronitron 9y agoApologies for being unclear, to elaborate ... IMHO cyber-security analysts could do much better in defining how they do their job in order to give people that are interested a path forward in developing the needed skills. To be clear, I'm not talking about the larger cyber-security profession that is mostly focused on setting and enforcing rules.
- tptacek 9y agoI have no trouble conjuring a job description for a "cybersecurity analyst"; I assume their job consists of: 1. Staffing an event management system (probably something with a pretty console that is 1/5th as powerful as an ELK deployment but that costs 10x as much because Security) and investigating alerts. 2. Kicking off routine scanning processes and reviewing the results generated by them. 3. Responding to requests to let this application or that host through some perimeter firewall.
- deleted 9y ago[deleted]