4 ms·

For me the sad truth is that I don't. I'm a junior pentester, junior to medior developer (depending on whom you ask) and know a lot more about data science than

For me the sad truth is that I don't. I'm a junior pentester, junior to medior developer (depending on whom you ask) and know a lot more about data science than I'm supposed to for "my profile". Now I'm in a job where I'm simply judged as a developer. I've noticed that even when I find vulnerabilities and show them to the dev team at the startup I work, they don't care. When it's a critical, they care a little. They actively dislike that I try to do more than just programming, since it isn't of my concern. And yet, this is the most graceful company that I've been at since they hired me, out of the 100 I applied to. So yea, I'm floundering. I want to help out with marketing and recruiting. I want to help out with some data science. And I definitely want to hack the company I work at in order to harden your product against hackers. I know my main role is being a dev, but I hate being only seen as a dev. If any company hires people based in Amsterdam and would like such a generalist dev, I'm for hire. I also speak English ;-)

abledon 6y ago
curious question since you mentioned you were a junior pentester, do you see any value in the CompTia Pentest+ cert? e.g. does it guarantee interviews? or its simply a baseline etc..
- mettamage 6y ago
  I've never done pentesting professionally, but I trained with someone who passed his OSCP, and while he was quicker, my knowledge was a lot deeper (especially in reverse engineering). We considered each other to be at each others' level. He's a junior pentester now :) I think he did find that his OSCP helped for recruiters. We both don't know anything about CompTia Pentest+ ------ I got a reaction from my friend. Based on his impression about CompTia Pentest+: it depends on what cert is valued. In The Netherlands OSCP and CEH are the most well-known. CompTia Pentest+ looks most like CEH in terms of design and exam format (based on his quick glance of the curriculum). Take a certificate that recruiters actually look for, because that does help. Even if the certificate doesn't match the job that you're doing, it shows a lot of dedication. For example, the network skills that my friend learned at OSCP (and while we were training) are almost not needed for the web pentesting that he does. He also says that his company feels less hesistant to hire someone with OSCP compared to CEH. OSCP is quite hardcore compared to CEH.

abledon 6y ago

curious question since you mentioned you were a junior pentester, do you see any value in the CompTia Pentest+ cert? e.g. does it guarantee interviews? or its simply a baseline etc..

mettamage 6y ago
I've never done pentesting professionally, but I trained with someone who passed his OSCP, and while he was quicker, my knowledge was a lot deeper (especially in reverse engineering). We considered each other to be at each others' level. He's a junior pentester now :) I think he did find that his OSCP helped for recruiters. We both don't know anything about CompTia Pentest+ ------ I got a reaction from my friend. Based on his impression about CompTia Pentest+: it depends on what cert is valued. In The Netherlands OSCP and CEH are the most well-known. CompTia Pentest+ looks most like CEH in terms of design and exam format (based on his quick glance of the curriculum). Take a certificate that recruiters actually look for, because that does help. Even if the certificate doesn't match the job that you're doing, it shows a lot of dedication. For example, the network skills that my friend learned at OSCP (and while we were training) are almost not needed for the web pentesting that he does. He also says that his company feels less hesistant to hire someone with OSCP compared to CEH. OSCP is quite hardcore compared to CEH.