2 ms·

I've always been curious how one applies as a social engineer or hybrid SE and tech guy for a security consultancy. It seems like something that I'd really enjo

by kriro 12y ago

I've always been curious how one applies as a social engineer or hybrid SE and tech guy for a security consultancy. It seems like something that I'd really enjoy doing (having never done it and also not having particular great people skills). I don't know how the business works at all but I'd love to be a plant at some company (or a fake customer) to test their security from the inside. It's not something you can easily learn on your own (I'd guess). Since I worked in ERP I'd also be pretty interested in security testing business software. I can see a myriad of issues both technically but also on a human and for lack of a better word "process exploitation" level. If anyone has suggestions on writing a job application without any actual security testing skills I'd be interested in hearing them. Basically all I can think of is "I know some technology and can program, I have some business background (specifically ERP), I think I'm a quick learner and I'd probably work for very little assuming increased salary as I get more valuable"...sounds like something I'd instantly put in the trash if it hit my desk though :P

6stringmerc 12y ago
Same here, as in being interested in the field. On the other hand though, I've had something like 10+ customer service jobs, along with formal education, a tried-and-true love of technology...and a deviant / mischevious streak wider than the Gulf of Mexico. Oh, also acting lessons...People are kind of my specialty... To me, working customer service is very much a social engineering training ground. How? Little to no actual authority, frequently hostile / challenging engagements, and limited tools and techniques by which a solution or conclusion can be reached. There's a significant advantage to out-thinking one or more customers, staying just ahead of them thought process wise, which seems to align with turning the coin around. One of the other things I learned through both customer service and in my white collar career(s) is how to dress for success. Self-presentation is one of the most important parts to get people to let down their defenses. Technicians look tech-y, consultants look business-y, security people project a certain firmness...well, anyway, that's been my experience as both service provider and dealing with people in power. I've always used my learned perspectives for good. At the end of the day, it's absolutely amazing the results that one can get with a pleasant, persistent attitude, good appearance, and some patience.

by kriro 12y ago

6stringmerc 12y ago

Same here, as in being interested in the field. On the other hand though, I've had something like 10+ customer service jobs, along with formal education, a tried-and-true love of technology...and a deviant / mischevious streak wider than the Gulf of Mexico. Oh, also acting lessons...People are kind of my specialty... To me, working customer service is very much a social engineering training ground. How? Little to no actual authority, frequently hostile / challenging engagements, and limited tools and techniques by which a solution or conclusion can be reached. There's a significant advantage to out-thinking one or more customers, staying just ahead of them thought process wise, which seems to align with turning the coin around. One of the other things I learned through both customer service and in my white collar career(s) is how to dress for success. Self-presentation is one of the most important parts to get people to let down their defenses. Technicians look tech-y, consultants look business-y, security people project a certain firmness...well, anyway, that's been my experience as both service provider and dealing with people in power. I've always used my learned perspectives for good. At the end of the day, it's absolutely amazing the results that one can get with a pleasant, persistent attitude, good appearance, and some patience.