4 ms·

It might be a red flag. But that can't be some roadblock to entering the industry. People get into careers for all sorts of reasons. A paycheck. The thrill of

It might be a red flag. But that can't be some roadblock to entering the industry. People get into careers for all sorts of reasons. A paycheck. The thrill of succeeding at their job. The thrill of being the best in the business. You can't just exclude those people from that career and focus on people "the goals of the business". Personal goals are better drivers to excellence than business goals.

slg 4y ago
The problem is when their personal goals conflict with both the business's and society's goals. Think of it like a manager who announces "I love bossing people around, that is why I'm in the industry." Sure, that is part of the job, a person in that role shouldn't have an issue with it, but someone who says that is the reason they are doing the job is directly telling you they are unfit for the job.
- pseudo0 4y ago
  The business's goal is to minimize theft of their products. Society's goal is to prevent theft. It seems like those goals are in alignment with someone in loss prevention who enjoys the thrill of successfully catching shoplifters. I don't see this as any different from people who work red team in infosec and get a thrill from getting root on a box, or those who are blue team and the highlight of their week is catching an intrusion attempt. Some people just thrive in that sort of competitive environment.
  - slg 4y ago
    >The business's goal is to minimize theft of their products. Society's goal is to prevent theft. It seems like those goals are in alignment with someone in loss prevention who enjoys the thrill of successfully catching shoplifters. "Minimizing theft" is not the same thing as "catching shoplifters". An ideal security job from the perspective of the business/society is boring. An ideal security job from the perspective of an adrenaline seeker is exciting. This conflicting incentives can lead to that security person creating excitement in situations where none should exist.

slg 4y ago

The problem is when their personal goals conflict with both the business's and society's goals. Think of it like a manager who announces "I love bossing people around, that is why I'm in the industry." Sure, that is part of the job, a person in that role shouldn't have an issue with it, but someone who says that is the reason they are doing the job is directly telling you they are unfit for the job.

pseudo0 4y ago
The business's goal is to minimize theft of their products. Society's goal is to prevent theft. It seems like those goals are in alignment with someone in loss prevention who enjoys the thrill of successfully catching shoplifters. I don't see this as any different from people who work red team in infosec and get a thrill from getting root on a box, or those who are blue team and the highlight of their week is catching an intrusion attempt. Some people just thrive in that sort of competitive environment.
- slg 4y ago
  >The business's goal is to minimize theft of their products. Society's goal is to prevent theft. It seems like those goals are in alignment with someone in loss prevention who enjoys the thrill of successfully catching shoplifters. "Minimizing theft" is not the same thing as "catching shoplifters". An ideal security job from the perspective of the business/society is boring. An ideal security job from the perspective of an adrenaline seeker is exciting. This conflicting incentives can lead to that security person creating excitement in situations where none should exist.