4 ms·

I feel that it's also very hard for people who understand security to put themselves out there. For people who actually care about security and not just complia

I feel that it's also very hard for people who understand security to put themselves out there. For people who actually care about security and not just compliance, there's no real job market at all. Companies never hire for this kind of role. So I think they're hard to find because there's no real market for them, there's little point in announcing themselves and their expertise since there's really [almost] nobody interested in hiring that. It's a sad reality, tbh.

jjav 4y ago
> For people who actually care about security and not just compliance, there's no real job market at all. Companies never hire for this kind of role. Can't agree more! This is the sad truth as you say. This is the space I work in and to find a team who actually cares about building a secure product against reasoned threat models is as rare as winning the lottery. Roles with great pay are easy to find in the policy and process side of security though.