Clone of https://github.com/rmusser01/Infosec_Reference .
For those who would prefer to not be tracked by MS.
blueteamexfiltrationforensicshackinghacking-simulatorinformation-securityinfosecinfosec-referencelinuxmitre-attack-dbosxpenetration-testingpentestingprivilege-escalationred-teamreferencesreverse-engineeringwindows
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
34 KiB
34 KiB
Career/Job Related Stuff
Table of Contents
- 101
- Business
- Career Growth/Progression
- Careers in InfoSec
- Choosing a Job/Looking for Work
- Company Culture
- Compensation
- Contracting & Consulting
- Difficult Conversations
- Employee Attrition
- General(Miscellaneous)
- Hiring
- Imposter Syndrome
- Independent Business
- Informal Laws & Principles
- Interview Prep
- Interviewing
- Management
- Meetings
- Mental Health
- Mentoring
- Metrics
- Networking(social)
- Non-Competes
- Non-Technical Skills
- Organizational Theory
- Performance Reviews
- Post-Mortems
- Project Management
- Resume
- Testing
- Other
- Industry
Career Information
- 101
- Ten Simple Rules for Doing Your Best Research, According to Hamming
- ‘Thought Leader’ gives talk that will inspire your thoughts | CBC Radio (Comedy/Satire Skit)
- Self proclaimed “thought leader,” Pat Kelly gives his talk on “thought leadership” at the annual This Is That Talks in Whistler, B.C. In the seminar, Kelly covers: How to talk with your hands, how to get a standing ovation, and how to inspire people by saying nothing at all.
- Lack of progress exposed by the Canary MacGuffin - rachelbythebay
- Strategy Letter I: Ben and Jerry’s vs. Amazon - Joel on Software
- Defining The Corporate Hierarchy - Erik Dietrich
- The Beggar CEO and Sucker Culture - Erik Dietrich
- Business
- When Everything That Counts Can’t Be Counted - Joshua M. Brown
- The Trillion-Dollar Vision of Dee Hock - Mitchell Waldrop(FastCompany)
- The Longest Yard: Reorganizing IT for Success - Bruce F. Webster
- How Complex Systems Fail - Richard I. Cook
- Big companies v. startups - Dan Luu
- The Innovation Equation - Safi Bahcall
- Career Growth/Progression
- How Developers Stop Learning: Rise of the Expert Beginner - Erik Dietrich
- Your Job Title of Tomorrow: Efficiencer - Erik Dietrich
- Things I Learnt The Hard Way (in 30 Years of Software Development) - juliobiason.net
- [Recommended Reading for Developers(2015) - blog.codinghorror.com]
- Careers in Information Security
- NICE Cybersecurity Workforce Framework - NICCS.us-cert.gov
- Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible? A: Because Keynote Speakers Make Bad Life Decisions and Are Poor Role Models
- Some people enter the technology industry to build newer, more exciting kinds of technology as quickly as possible. My keynote will savage these people and will burn important professional bridges, likely forcing me to join a monastery or another penance-focused organization. In my keynote, I will explain why the proliferation of ubiquitous technology is good in the same sense that ubiquitous Venus weather would be good, i.e., not good at all. Using case studies involving machine learning and other hastily-executed figments of Silicon Valley’s imagination, I will explain why computer security (and larger notions of ethical computing) are difficult to achieve if developers insist on literally not questioning anything that they do since even brief introspection would reduce the frequency of git commits. At some point, my microphone will be cut off, possibly by hotel management, but possibly by myself, because microphones are technology and we need to reclaim the stark purity that emerges from amplifying our voices using rams’ horns and sheets of papyrus rolled into cone shapes. I will explain why papyrus cones are not vulnerable to buffer overflow attacks, and then I will conclude by observing that my new start-up papyr.us is looking for talented full-stack developers who are comfortable executing computational tasks on an abacus or several nearby sticks.
- Educational/Informational
- Navigating Career Choices in InfoSec - Fernando Montenegro - BSides Detroit2017
- Making career choices can be intimidating and stressful. Perhaps this presentation can help. The tidal forces affecting technology impact our careers as well. If we're not actively managing them, we're leaving decisions to chance (or to others), and may not like the outcomes. This presentation describes a framework I've used over the past few years to evaluate both ongoing job satisfaction as well as new opportunities as they appear. I'm happy with the outcomes I've obtained with it, and have used this same framework when providing advice to others, and it has been well received. Hopefully it can help others as well.
- Infosec Tools of the Trade: Getting Your Hands Dirty
- In this presentation we'll will be going over introductions to the various focuses in information security and demoing the most common tools that are used in operational security, both offense and defense. You'll leave with an idea on how to freely obtain and use these tools so that you can have what you need for that first interview: experience and a passion for security. This is a green talk for people who don't have a clue on what offensive and defensive people do operationally, from a tool perspective.
- So You Want To Be A H6x0r Getting Started in Cybersecurity Doug White and Russ Beauchemin
- How to Get Any Job You Want (even if you’re unqualified) - Raghav Haran
- Getting Hired: A Few Tips - Mubix
- Navigating Career Choices in InfoSec - Fernando Montenegro - BSides Detroit2017
- Interview Preparation
- Relevant Standards
- NICE Cybersecurity Workforce Framework
- The NICE Framework, NIST Special Publication 800-181, establishes taxonomy and common lexicon that is to be used to describe all cybersecurity work and workers irrespective of where or for whom the work is performed. The NICE Framework is intended to be applied in the public, private, and academic sectors. (USA Focused)
- NICE Cybersecurity Workforce Framework
- Autonomous Vehicles
- Data Scientist
- Penetration Tester
- Articles & Writeups
- How to become a pentester - Corelan
- Attacking Big Business
- 10 common mistakes aspiring/new pentesters make - PentesterLab
- So You Want To Be a Pentester? - Jack Halon
- And THIS is Why Penetration Testing Sucks - Ronin Chang
- So You Want To Be a Pentester? - Jack Halon
- World's Worst Penetration Test Report - rant
- Make It Count: Progressing through Pentesting - Bálint Varga-Perke -Silent Signal
- Talks & Presentations
- So you think you want to be a penetration tester - Defcon24
- So, you think you want to be a penetration tester, or you already are and don't understand what the difference between you and all the other "so called" penetration testers out there. Think you know the difference between a Red Team, Penetration Test and a Vulnerability assessment? Know how to write a report your clients will actually read and understand? Can you leverage the strengths of your team mates to get through tough roadblocks, migrate, pivot, pwn and pillage? No? well this talk is probably for you then! We will go through the fascinating, intense and often crazily boring on-site assessment process. Talk about planning and performing Red Teams, how they are different, and why they can be super effective and have some fun along the way. I'll tell you stories that will melt your face, brain and everything in between. Give you the answers to all of your questions you never knew you had, and probably make you question your life choices. By the end of this session you will be ready to take your next steps into the job you've always wanted, or know deep inside that you should probably look for something else. There will be no judgment or shame, only information, laughter and fun.
- So you want to be a pentester? - Hans-Michael Varbaek
- This presentation gives the viewer an idea of what it is to be a pentester full-time, what a pentester typically works with, how to learn ethical hacking, and improving your chances of getting a full-time job.
- Certification? College?: How do you get into Cybersec really? - Doug White(WWHF2018)
- Doug White talks about College options, Certifications, and what you need to do to break into the Cybersec field. How to start and move your career if you want to make a living, legally.
- Hold my Red Bull Undergraduate Red Teaming Jonathan Gaines
- So you think you want to be a penetration tester - Defcon24
- Articles & Writeups
- Reverse Engineering
- Security Analyst
- Choosing a Job/Looking for Work
- How to Get Any Job You Want (even if you’re unqualified) - Raghav Haran
- 80+ Back Doors Into Cyber Careers - keirstenbrager
- Common Sense Career Transitions - Celeste Thayer[DC206]
- Have you considered a tech career that was "above your pay grade"? What about a dream gig that you have few or - gasp - none of the basic qualifications for? Celeste will give you a few tips on how to identify skill gaps, then learn, network, and otherwise wrangle yourself into a job you wanted but never thought you could apply for, and have a better chance to pass the resume review stage.
- There Is No Shortage of Talent - There's a Shortage of Suckers - ResumeSkills.us
- Pushing Left, Like a Boss: Part 1 - SheHacksPurple
- The Secret Rules For Getting Hired - Terence Eden
- How To Land A Job In Infosec
- How to Get a Programming Job without a Degree - Erik Dietrich
- Startups
- Company Culture
- Compensation/Equity
- The Holloway Guide to Equity Compensation
- Stock options, RSUs, job offers, and taxes—a detailed reference, including hundreds of resources, explained from the ground up and made to be improved over time.
- Salary strategies everyone in tech already knows — but you don't - Candor
- H1B Salary Database - h1bdata.info
- The Holloway Guide to Equity Compensation
- Contracting & Consulting
- Difficult Conversations
- Employee Attrition
- General
- Hiring
- What I Learned Doing 250 Interviews at Google - Moishe Lettvin
- F*** You, I Quit — Hiring Is Broken - Sahat Yalkabov
- Hiring is Broken And Yours Is Too - RajivPrab.com
- In Head-Hunting, Big Data May Not Be Such a Big Deal - Adam Bryant
- "This interview with Laszlo Bock, senior vice president of people operations at Google, was conducted and condensed by Adam Bryant."
- Here's Google's Secret To Hiring The Best People - Lazlo Bock(Wired - 2015)
- Hiring is Broken… And It Isn’t Worth Fixing - Erik Dietrich
- A Players Don’t Hire A Players — They Partner with A Players - Erik Dietrich
- The Hiring Post - sockpuppet.org
- On Secretly Terrible Engineers - Danny Crichton
- Impostor Syndrome
- Independent Business
- Informal Laws & Principles
- The Gervais Principle - RibbonFarm
- Peter Principle - Wikipedia
- The Peter principle is a concept in management developed by Laurence J. Peter, which observes that people in a hierarchy tend to rise to their "level of incompetence". In other words, employees are promoted based on their success in previous jobs until they reach a level at which they are no longer competent, as skills in one job do not necessarily translate to another. The concept was enunciated in the 1969 book The Peter Principle by Peter and Raymond Hull.
- It was originally written as a satire.
- Dilbert Principle - Wikipedia
- The Dilbert principle refers to a 1990s theory by Dilbert cartoonist Scott Adams stating that companies tend to systematically promote their least competent employees to management (generally middle management), to limit the amount of damage they are capable of doing.
- The Iron Law of Bureaucracy
- Pournelle's Iron Law of Bureaucracy states that in any bureaucratic organization there will be two kinds of people":
First, there will be those who are devoted to the goals of the organization. Examples are dedicated classroom teachers in an educational bureaucracy, many of the engineers and launch technicians and scientists at NASA, even some agricultural scientists and advisors in the former Soviet Union collective farming administration.Secondly, there will be those dedicated to the organization itself. Examples are many of the administrators in the education system, many professors of education, many teachers union officials, much of the NASA headquarters staff, etc.
- The Iron Law states that in every case the second group will gain and keep control of the organization. It will write the rules, and control promotions within the organization.
- Pournelle's Iron Law of Bureaucracy states that in any bureaucratic organization there will be two kinds of people":
- Robustness Principle - Wikipedia
- Golden Hammer - wiki.c2.com
- The Shirky Principle - Technium
- “Institutions will try to preserve the problem to which they are the solution.” — Clay Shirky
- Law #8: The Law of Duality - ericsink.com
- Interview Prep
- offensiveinterview - WebBreacher
- Interview questions to screen offensive (red team/pentest) candidates
- The Hidden Flaw In Behavioral Interview Questions - Mark Murphy
- test-your-admin-skills
- A collection of *nix Sysadmin Test Questions with Answers for Interview/Exam (2018 Edition).
- Linux System Administrator/DevOps Interview Questions - chassing
- Tech Interview Handbook - yangshun.github.io
- Ten Rules for Negotiating a Job Offer - Haseeb Qureshi
- How Not to Bomb Your Offer Negotiation - Haseeb Qureshi
- Deploying Guerrilla Tactics to Combat Stupid Tech Interviews - Erik Dietrch
- offensiveinterview - WebBreacher
- Interviewing
- Management
- Management Skills
- Meetings
- Mental Health
- Burnout
- Depression
- General
- Stress
- Abusive Behaviour
- Mentoring
- Metrics
- Networking
- That’s still not my RJ 45 Jack - IRL Networking for Humans Pt 2 - Johnny Xmas
- We're smart. We're incredibly tech savvy. We can rock some mad OSINT with our Google-Fu. We're 85% +-10% sure which part of the body a hat goes on. We think you can never have enough beard. WE THINK THAT'S ACCEPTABLE. The second in his multi-part series on building social prowess, this talk will focus on the inconvenient truth of your book always, always, always being judged by its cover, and how to deal with that with minimal effort so you can get back to sewing more pockets on your utilikilt. This talk covers both male and female situations, though it is primarily unisex. We'll get you set up with a core wardrobe and hygenic skillset so you'll be able to roll out of bed, spend minimal time "getting ready," rock the dreaded client-facing meeting or industry meetup, and get you back home where you can safely take your pants off.
- That’s still not my RJ 45 Jack - IRL Networking for Humans Pt 2 - Johnny Xmas
- Non-Competes
- Non-Technical Skills
- Organizational Theory
- Organizational Theory - Wikipedia
- The normalization of deviance in healthcare delivery - John Banja
- Resilience Engineering: Part I - Kitchen Soap
- Bureaucratic drift - Wikipedia
- Why are large companies so difficult to rescue (regarding bad internal technology) - Lawrence Krubner
- The normalization of deviance in healthcare delivery - John Banja
- Bedford and the Normalization of Deviance - Ron Rapp
- Resilience In Complex Adaptive Systems - Richard Cook(Velocity NY 2013)
- Performance Reviews
- Post-Mortems
- Project Management
- Resume
- 17 things that make this the perfect résumé - Áine Cain and Shayanne Gal(BusinessInsider)
- résumés - PracticalTypography
- Become a Software Specialist with the Help of Your Resume - Erik Dietrich
- How to Prepare Your Resume (Your Resume Stinks!) (Hall Of Fame Guidance) - ManagerTools
- Resume Update 2019 - Part 1 - ManagerTools
- Impossible is Nothing - Resume
- Testing(Certifications/Exams)
- Other
- What senior engineers do: fix knowledge holes - Dan Moore
- Worthwhile for the first comment in response to the article: "I don’t see anything “senior” about it, or even “engineer”. Seeing problems and solving them is what everyone does. Documenting the solution is one part of solving a problem. An apprentice carpenter does these things, too, and so does a farmer, and a waiter. Unfortunately, it’s not what most software companies reward, or how they operate. Whenever I did this, my manager, at every software company I’ve worked for, would say: “That’s cool, but you’re supposed to add the FooBar feature, and it needs to be done this Friday. Don’t waste time with reverse-engineering, or documentation. Just add one new field to the protocol somewhere. We can clean it up Later(TM).” This is Conway’s Law at work. What sort of company encourages the creation of two critical components which are completely undocumented? The sort of company which doesn’t reward documentation of critical components. That’s not likely to change because the engineer that created them happened to leave. (It took more time to reverse-engineer the protocol than it would have to document it when the knowledge was fresh.) The PM and QA who allowed this to happen are still there, right? What “Senior Engineer” really means is someone who’s spent enough time in the trenches to have earned a job title that allows them the latitude to make these sorts of improvements, and not have a PM question why they aren’t, instead, doing exactly what they were assigned. Look back at the story. Did the “senior engineer” go through proper channels to schedule a “reverse-engineer and document network protocol” task? No, he clearly didn’t trust that it would happen. Or maybe it was already there, but lowest priority (way below “fix CSS on IE”, of course). What was his actual responsibility that week? The story doesn’t say, but I don’t see any remarks about a PM breathing down his neck asking about the CSS fix he asked for (because that PM is the only user of the system, anywhere, of course, who uses IE and sees that particular bug). Documentation is not on this week’s “Sprint”! The process is fundamentally broken. We hear fables like this about how life would be better if we all did something one way (you’ll get promoted to Senior Engineer!), while in practice we’re punished for doing so."
- Revisiting L0pht testimony – 20yrs later -Space Rogue
- My Canons on (ISC)² Ethics - Such as They Are(2011)
- Apple’s Software “Problem” and “Fixing” It (via twitter)
- Job Hunting Experiences
- What senior engineers do: fix knowledge holes - Dan Moore
- Industry