4 ms·

No disrespect to actual security experts, but here are the four common areas where a lot of dubious/questionable "pros" can pop up: - Health experts - Educati

by euske 7y ago

No disrespect to actual security experts, but here are the four common areas where a lot of dubious/questionable "pros" can pop up: - Health experts - Education specialists - Productivity gurus - Security specialists

whymauri 7y ago
where's blockchain?
freehunter 7y ago
As a security specialist, 100% agree. It’s just not provable that we are worth anything. There is so much theory and guesswork and companies still get hacked because you can’t prove if I’m wrong or right until you actually get hacked. There’s too much ground to cover and not enough people watching the alarms. And of course he alarms trigger whenever a stiff wind blows. Everyone wants to do security but no one knows what security means so they just cut a fat check and pretend like it is working.
- WrtCdEvrydy 7y ago
  It's the same thing as formal software engineering specs. Unless you're doing software for airplanes, ain't noone formally proofing anything being done.
  - agentultra 7y ago
    That's not true! I don't usually write proofs at work but I do work with formal models of critical sections in our systems. Although on the side I am working on bootstrapping Lean's ecosystem so we can write more proof-carrying code in more places.
- westpfelia 7y ago
  Plus Security Expert is incredibly vague. Like what do you do? Are you a pen tester? SIEM analyst? Compliance? Do you work in SecDevOps? Or are just a firewall/IDS guy? Or maybe you walk around the office and hit your accountants every time they click on a phishing link with a wiffel ball bat. The world of info sec is so massive that saying you are a expert in 'Security' is useless.
  - PenguinCoder 7y ago
    > Or maybe you walk around the office and hit your accountants every time they click on a phishing link with a wiffel ball bat. I would like this job. Please post the job link ;)
    - SamuelAdams 7y ago
      Search for "Corporate Controller". They typically report directly to the CFO and oversee a lot of other financial roles. Every company has one, and they usually only step out of their office to hit someone with a club or something. A lot of their job is protecting the company from lawsuits, usually because someone somewhere did something dumb. Source: worked closely with a corporate controller for many years.
  - SamuelAdams 7y ago
    You could say the same thing about being a software developer. That could be backend development, but even then there's different languages and tools: MongoDB, MSSQL, Oracle. Even the server languages can differ vastly: Java, .NET Core, Python, Ruby, that list goes on. Add "full stack" to that list and now it could include desktop software (Windows forms, WPF, etc), javascript frameworks, or mobile platforms (which can include swift, C, java, or some of the cross platform frameworks). Sure, all these skills are in demand, but good companies will explain what their interpretation of "Software developer" means in the job description. Then you, an expert in a few of those languages, will pick and choose what jobs to apply for. I don't see why the security field has to be any different.
croh 7y ago
well put
lawnchair_larry 7y ago
So true. Even actual experts are often worthless to your business in the grand scheme of things. It’s complicated.

by euske 7y ago

whymauri 7y ago

where's blockchain?

freehunter 7y ago

As a security specialist, 100% agree. It’s just not provable that we are worth anything. There is so much theory and guesswork and companies still get hacked because you can’t prove if I’m wrong or right until you actually get hacked. There’s too much ground to cover and not enough people watching the alarms. And of course he alarms trigger whenever a stiff wind blows. Everyone wants to do security but no one knows what security means so they just cut a fat check and pretend like it is working.

WrtCdEvrydy 7y ago
It's the same thing as formal software engineering specs. Unless you're doing software for airplanes, ain't noone formally proofing anything being done.
- agentultra 7y ago
  That's not true! I don't usually write proofs at work but I do work with formal models of critical sections in our systems. Although on the side I am working on bootstrapping Lean's ecosystem so we can write more proof-carrying code in more places.
westpfelia 7y ago
Plus Security Expert is incredibly vague. Like what do you do? Are you a pen tester? SIEM analyst? Compliance? Do you work in SecDevOps? Or are just a firewall/IDS guy? Or maybe you walk around the office and hit your accountants every time they click on a phishing link with a wiffel ball bat. The world of info sec is so massive that saying you are a expert in 'Security' is useless.
- PenguinCoder 7y ago
  > Or maybe you walk around the office and hit your accountants every time they click on a phishing link with a wiffel ball bat. I would like this job. Please post the job link ;)
  - SamuelAdams 7y ago
    Search for "Corporate Controller". They typically report directly to the CFO and oversee a lot of other financial roles. Every company has one, and they usually only step out of their office to hit someone with a club or something. A lot of their job is protecting the company from lawsuits, usually because someone somewhere did something dumb. Source: worked closely with a corporate controller for many years.
- SamuelAdams 7y ago
  You could say the same thing about being a software developer. That could be backend development, but even then there's different languages and tools: MongoDB, MSSQL, Oracle. Even the server languages can differ vastly: Java, .NET Core, Python, Ruby, that list goes on. Add "full stack" to that list and now it could include desktop software (Windows forms, WPF, etc), javascript frameworks, or mobile platforms (which can include swift, C, java, or some of the cross platform frameworks). Sure, all these skills are in demand, but good companies will explain what their interpretation of "Software developer" means in the job description. Then you, an expert in a few of those languages, will pick and choose what jobs to apply for. I don't see why the security field has to be any different.

croh 7y ago

well put

lawnchair_larry 7y ago

So true. Even actual experts are often worthless to your business in the grand scheme of things. It’s complicated.