3 ms·
6 month cyber security study and then go blue team. Don’t bother with penetration testing.
by qualudeheart 5y ago
6 month cyber security study and then go blue team. Don’t bother with penetration testing.
- boppo1 5y agoWhy not bother with pentesting?
- qualudeheart 5y agoPentesting is much more saturated than defensive security is. Everyone wants to be a hacker.
- the_only_law 5y agoWhat does “blue team” stuff typically include. A lot of the security people I’ve worked with in large enterprises just run canned tools, configure appliances or think about compliance stuff and then fill out a shit ton of paperwork. Makes sense why everyone wants to go offensive in that case.
- rsj_hn 5y agoThe trick is to find a company that has to take security seriously, and then that company will have some meaningful blue-team work even though there is an ocean of tool running, compliance paperwork. So for example, Microsoft, Google, Amazon, they all have good product security teams that do meaningful stuff, where "meaningful stuff" is defined as: - design and development of security features and defense mechanisms - design reviews, code reviews - innovative tool development (as opposed to just running) - development and improvement of Big data/statistical analysis You just have to find a team actually doing that, and not a team doing compliance stuff. But there are such teams.