4 ms·

>Security cert, no assembly or even C knowledge. Work at a security company. Everyone I know with "research" in their title is legitimately great. That being

>Security cert, no assembly or even C knowledge. Work at a security company. Everyone I know with "research" in their title is legitimately great. That being said there are different types of security researchers. It seems like you were focused on vulnerability research/exploit development/offensive stuff. There's also malware analysis, intelligence, and detection research. Just like exploit development, malware analysis requires reverse engineering skills. However, Intelligence analysts and people doing detection research often have incredibly deep and broad skillsets that don't involve knowing assembly or C, yet they are still doing amazing work. Some of them are also reverse engineers, but depending on the role its not the standard by which I would judge competence. I've seen orgs that hire mostly bureaucrats, but if a person has genuine passion for security they can find a fun and challenging place to work.

methusala8 5y ago
Is there any space for Data Scientist here who knows his way around ML and AI? I see some roles that require some Data science but they are not widely prevalent.
- chevill 5y ago
  Where have you looked? If you have domain specific experience with security it would really help but security is growing so rapidly I suspect they probably have trouble filling all of the data science/ML/AI roles without also hiring people who have focused on other areas. I hear quite a bit about security companies/large companies with mature security programs trying to build services/products that utilize AI. FireEye/Mandiant, Rapid7, Palo Alto Networks, Microsoft, Apple, Google, Talos, would probably be good places to look.
  - methusala8 5y ago
    I was looking into this role here : https://careers.microsoft.com/us/en/job/1041386/Security-Data-Scientist https://careers.microsoft.com/us/en/job/1041386/Security-Dat... Two more questions: a) Is it possible to get domain specific experience without getting into an cyber security role? b) Did you mean to say that Companies will be open to hire non-Cyber Security folks due to the high number of vacancies? I am sorry. I did not understand what you meant. Thanks a ton!
    - chevill 5y ago
      Yes I mean that companies may hire someone with data science skills but no security specific work experience. In fact the job you posted says this: "Passion to the cybersecurity is mandatory, though no previous experience or knowledge is required"

methusala8 5y ago

Is there any space for Data Scientist here who knows his way around ML and AI? I see some roles that require some Data science but they are not widely prevalent.

chevill 5y ago
Where have you looked? If you have domain specific experience with security it would really help but security is growing so rapidly I suspect they probably have trouble filling all of the data science/ML/AI roles without also hiring people who have focused on other areas. I hear quite a bit about security companies/large companies with mature security programs trying to build services/products that utilize AI. FireEye/Mandiant, Rapid7, Palo Alto Networks, Microsoft, Apple, Google, Talos, would probably be good places to look.
- methusala8 5y ago
  I was looking into this role here : https://careers.microsoft.com/us/en/job/1041386/Security-Data-Scientist https://careers.microsoft.com/us/en/job/1041386/Security-Dat... Two more questions: a) Is it possible to get domain specific experience without getting into an cyber security role? b) Did you mean to say that Companies will be open to hire non-Cyber Security folks due to the high number of vacancies? I am sorry. I did not understand what you meant. Thanks a ton!
  - chevill 5y ago
    Yes I mean that companies may hire someone with data science skills but no security specific work experience. In fact the job you posted says this: "Passion to the cybersecurity is mandatory, though no previous experience or knowledge is required"