Hey folks, I'll be at DEF CON in Vegas this year! Would love to see you all there!  Jack's Parties: https://twitter.com/JackRhysider/status/1686785376327987200 Checkout Miscreants at the Vendor Area: https://www.miscreants.com/ See omnystudio.com/listener for privacy information.

Hey folks, I'll be at DEF CON in Vegas this year! Would love to see you all there! <ul> <li>Jack's Parties: <a href="https://twitter.com/JackRhysider/status/1686785376327987200" rel="nofollow" target="_blank">https://twitter.com/JackRhysider/status/1686785376327987200</a></li> <li>Checkout Miscreants at the Vendor Area: <a href="https://www.miscreants.com/" rel="nofollow" target="_blank">https://www.miscreants.com/</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

DEFCON 2023

Rana Khalil

Rana is a senior cybersecurity assessment analyst and has a really diverse professional background. She has spoken at many different conferences, including BSides, ISSA OS, Ottawa, and hack fest. She's recently received the OSCP, a coveted security certification out there in the community. She has definitely written up and done tons of write-ups on the OSCP and different hack-the-box write-ups.  This episode will unravel how Rana discovered and journeyed through cryptography and pen testing despite attaining a computer science degree. LINKS:  Linkedin: https://www.linkedin.com/in/ranakhalil1/?originalSubdomain=ca Intro Music: https://trash80.com/#/content/133/weeklybeats-2012-week5 Security and Privacy Framework: iapp.org Full Shownotes: https://www.gettingintoinfosec.com/ See omnystudio.com/listener for privacy information.

Rana is a senior cybersecurity assessment analyst and has a really diverse professional background. She has spoken at many different conferences, including BSides, ISSA OS, Ottawa, and hack fest. She's recently received the OSCP, a coveted security certification out there in the community. She has definitely written up and done tons of write-ups on the OSCP and different hack-the-box write-ups.  This episode will unravel how Rana discovered and journeyed through cryptography and pen testing despite attaining a computer science degree. LINKS: <ul> <li>Linkedin:<a href="https://www.linkedin.com/in/ranakhalil1/?originalSubdomain=ca" rel="nofollow" target="_blank"> https://www.linkedin.com/in/ranakhalil1/?originalSubdomain=ca</a></li> <li>Intro Music:<a href="https://trash80.com/#/content/133/weeklybeats-2012-week5" rel="nofollow" target="_blank"> https://trash80.com/#/content/133/weeklybeats-2012-week5</a></li> <li>Security and Privacy Framework:<a href="http://iapp.org/" rel="nofollow" target="_blank"> iapp.org</a></li> <li>Full Shownotes: <a href="https://www.gettingintoinfosec.com/?fbclid=IwAR2EI_04I_SW2gtWIPYzWZ7sxUENKcRfvGMjP1PaJL6s5BSPDABiQglkbug" rel="nofollow" target="_blank">https://www.gettingintoinfosec.com/</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Rana Khalil - From Cryptography to Pentester!

Norman Weekes

Norman Weekes is on the Security Operations Team at Salesforce. He is in charge of scanning their infrastructure and ensuring that everything is set up and operating properly. Norman already spent almost a year in the information security world. This is also his first official full-time security job. After going through different job contracts, he believes that if everything's shut down early, there's no reason not to just get in a good routine and go after whatever certification or whatever job you want. This episode will undoubtedly inspire and assist job contractors who are considering a career in the information security world. LINKS Linkedin:  https://www.linkedin.com/in/normanjr/ Intro Music: https://trash80.com/#/content/133/weeklybeats-2012-week5 Security and Privacy Framework: iapp.org   Full Show Notes: https://www.gettingintoinfosec.com/See omnystudio.com/listener for privacy information.

Norman Weekes is on the Security Operations Team at Salesforce. He is in charge of scanning their infrastructure and ensuring that everything is set up and operating properly. Norman already spent almost a year in the information security world. This is also his first official full-time security job. After going through different job contracts, he believes that if everything's shut down early, there's no reason not to just get in a good routine and go after whatever certification or whatever job you want. This episode will undoubtedly inspire and assist job contractors who are considering a career in the information security world. LINKS Linkedin:  <a href="https://www.linkedin.com/in/normanjr/" rel="nofollow" target="_blank">https://www.linkedin.com/in/normanjr/</a> Intro Music: <a href="https://trash80.com/#/content/133/weeklybeats-2012-week5" rel="nofollow" target="_blank">https://trash80.com/#/content/133/weeklybeats-2012-week5</a> Security and Privacy Framework: <a href="http://iapp.org/" rel="nofollow" target="_blank">iapp.org</a> Full Show Notes: <a href="https://www.gettingintoinfosec.com/" rel="nofollow" target="_blank">https://www.gettingintoinfosec.com/</a>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Norman Weekes— From Contractor To Security Ops Analyst

LEAD

Niru Ragupathy is a Security Engineer at Google and works as the Offensive Security Lead and manages part of the Offensive Security Team. She is currently the Tech Lead Manager. Niru sees managing as a challenging, interesting ride yet undervalued skill. She also considers it rewarding although it demands the investment of both time and effort.  She believes that it is important to start leading and take things slowly but not take the decision lightly. Having planned on taking Biotech in College but being persuaded by her parents, she was thrust to take on Computer Sciences since it has greater demands in society. In the face of her struggles, Niru has found her sense of belongingness in security management. This episode will surely encourage and benefit Engineers who struggle in transitioning on management.  LINKS Linkedin: linkedin.com/in/niru-ragupathy-99078233 Intro Music: https://trash80.com/#/content/133/weeklybeats-2012-week5 Security and Privacy Framework: iapp.org   Full Show Notes: https://www.gettingintoinfosec.com/See omnystudio.com/listener for privacy information.

Niru Ragupathy is a Security Engineer at Google and works as the Offensive Security Lead and manages part of the Offensive Security Team. She is currently the Tech Lead Manager. Niru sees managing as a challenging, interesting ride yet undervalued skill. She also considers it rewarding although it demands the investment of both time and effort.  She believes that it is important to start leading and take things slowly but not take the decision lightly. Having planned on taking Biotech in College but being persuaded by her parents, she was thrust to take on Computer Sciences since it has greater demands in society. In the face of her struggles, Niru has found her sense of belongingness in security management. This episode will surely encourage and benefit Engineers who struggle in transitioning on management.  LINKS Linkedin: <a href="https://www.linkedin.com/in/niru-ragupathy-99078233?lipi=urn%3Ali%3Apage%3Ad_flagship3_profile_view_base_contact_details%3Bhi6H%2FHw0RbSnN8Bu%2BtP0gQ%3D%3D" rel="nofollow" target="_blank">linkedin.com/in/niru-ragupathy-99078233</a> Intro Music: <a href="https://trash80.com/#/content/133/weeklybeats-2012-week5" rel="nofollow" target="_blank">https://trash80.com/#/content/133/weeklybeats-2012-week5</a> Security and Privacy Framework: <a href="http://iapp.org" rel="nofollow" target="_blank">iapp.org</a> Full Show Notes: <a href="https://www.gettingintoinfosec.com/" rel="nofollow" target="_blank">https://www.gettingintoinfosec.com/</a>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Niru Ragupathy - From Almost Biotech to QA to Google Security Lead

John Gates

John Gates is a Lead IT Security Operations Analyst for a global food brand. John has always liked to know how do things work - and that has proven to be a beneficial trait - from his first job as a car mechanic to IT consultancy and education to his current role. He’s also an advisor and former board member at OpsecEdu, an organization educating technologists in state, local, and education agencies on security best practices.  LINKS Linkedin: https://www.linkedin.com/in/johngates/ OpsecEdu: https://www.opsecedu.com/ Intro Music: https://trash80.com/#/content/133/weeklybeats-2012-week5   Full Show Notes: https://www.gettingintoinfosec.com/john-gates-from-car-mechanic-to-lead-security-analyst/See omnystudio.com/listener for privacy information.

John Gates is a Lead IT Security Operations Analyst for a global food brand. John has always liked to know how do things work - and that has proven to be a beneficial trait - from his first job as a car mechanic to IT consultancy and education to his current role. He’s also an advisor and former board member at OpsecEdu, an organization educating technologists in state, local, and education agencies on security best practices.  LINKS Linkedin: <a href="https://www.linkedin.com/in/johngates/" rel="nofollow" target="_blank">https://www.linkedin.com/in/johngates/</a> OpsecEdu: <a href="https://www.opsecedu.com/" rel="nofollow" target="_blank">https://www.opsecedu.com/</a> Intro Music: <a href="https://trash80.com/#/content/133/weeklybeats-2012-week5" rel="nofollow" target="_blank">https://trash80.com/#/content/133/weeklybeats-2012-week5</a> Full Show Notes: <a href="https://www.gettingintoinfosec.com/john-gates-from-car-mechanic-to-lead-security-analyst/" rel="nofollow" target="_blank">https://www.gettingintoinfosec.com/john-gates-from-car-mechanic-to-lead-security-analyst/</a>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

John Gates - From Car Mechanic to  Lead IT Security  Analyst

Samantha Cowan

Samantha Cowan is the Head of Compliance at HackerOne. She's the former Director of Compliance at OneLogin and former Security Engineer at CoverHound, Cyber Policy, and Zenefits. Sam initially perceived Infosec as an "unhappy job", but later found herself taking her MBA and paving her way into the security industry. Despite having her master's degree, she was not an exemption to facing rejections when applying for cybersecurity. Her episode is mind-blowing as she shares how you can break into boundaries by being confident in yourself and by not compromising to being seen as a token hire. LINKS  Linkedin: https://www.linkedin.com/in/samanthacowan/ Intro Music: https://trash80.com/#/content/133/weeklybeats-2012-week5 Security and Privacy Framework: iapp.org  ---------------------------------------------- Follow @coffeewithayman on Twitter for more For more information check out: gettingintoinfosec.comSee omnystudio.com/listener for privacy information.

Samantha Cowan is the Head of Compliance at HackerOne. She's the former Director of Compliance at OneLogin and former Security Engineer at CoverHound, Cyber Policy, and Zenefits. Sam initially perceived Infosec as an "unhappy job", but later found herself taking her MBA and paving her way into the security industry. Despite having her master's degree, she was not an exemption to facing rejections when applying for cybersecurity. Her episode is mind-blowing as she shares how you can break into boundaries by being confident in yourself and by not compromising to being seen as a token hire. LINKS <ul> <li>Linkedin: <a href="https://www.linkedin.com/in/samanthacowan/" rel="nofollow" target="_blank">https://www.linkedin.com/in/samanthacowan/</a></li> <li>Intro Music: <a href="https://trash80.com/#/content/133/weeklybeats-2012-week5" rel="nofollow" target="_blank">https://trash80.com/#/content/133/weeklybeats-2012-week5</a></li> <li>Security and Privacy Framework: <a href="http://iapp.org" rel="nofollow" target="_blank">iapp.org</a></li> </ul> ---------------------------------------------- Follow <a href="https://twitter.com/coffeewithayman" rel="nofollow" target="_blank">@coffeewithayman</a> on Twitter for more For more information check out: <a href="http://gettingintoinfosec.com/" rel="nofollow" target="_blank">gettingintoinfosec.com</a>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Samantha Cowan - From National Parks Service To Head Of Compliance

Betsy Bevilacqua

Betsy Bevilacqua is the current VP of Information Security at Chainalysis. Initially, she had her mind set on law school until she did a self-audit and realized that she enjoyed computers and tech much more. Her journey into infosec led her to move from Kenya to the US to obtain a degree in Security and explore various companies involved in academia, food and facilities, healthcare, telephone communications, and finance to more traditional tech. Her interview is full of advice for those looking to break in and those already in infosec.Computer Links, Detailed Show Notes, and Transcript: https://gettingintoinfosec.com/betsy See omnystudio.com/listener for privacy information.

Betsy Bevilacqua is the current VP of Information Security at Chainalysis. Initially, she had her mind set on law school until she did a self-audit and realized that she enjoyed computers and tech much more. Her journey into infosec led her to move from Kenya to the US to obtain a degree in Security and explore various companies involved in academia, food and facilities, healthcare, telephone communications, and finance to more traditional tech. Her interview is full of advice for those looking to break in and those already in infosec.Computer Links, Detailed Show Notes, and Transcript: <a href="https://gettingintoinfosec.com/betsy" rel="nofollow" target="_blank">https://gettingintoinfosec.com/betsy</a> <ul></ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Betsy Bevilacqua - From Almost Lawyer to CISO and Security Leader

Eric Cole

Dr. Eric Cole is an accomplished cybersecurity hacker and executive advisor. His career has been a mix of sixth-sense chance encounters and wisdom/foresight of the future. His uncanny ability to see the opportunity in cybersecurity combined with the wisdom to listen to those smarter than him is why he is where he is today. His interview is chock full of poignant advice and tips. Dr. Eric Cole also has a creative side to him: he's a musician. He was a French horn player before and now, he's a drummer. He's known as the Tommy Lee of Cybersecurity. Eric Cole's Quick List of Advice  Always be respectful, Don't be an A**Hole to other people… but don't give a crap what other people say or think because we're unique and different. If you're an entrepreneur in cybersecurity, they're not gonna get ya. Listen to people that are smarter than you and have made the mistakes before you make them. Life will force you to repeat lessons until you learn them. The biggest gap is in the monitoring, detection, and analyst side.  Quotes  "It's all about looking at calculated risk, understanding [the] pros and cons, and taking chances." "You've done the same thing six times in a row, and it doesn't work. What makes you think if you do it a seventh time [that] it's actually going to work?" "Try different things." "Have advisory board members for your life." "If the best professionals in the world have coaches, why shouldn't we?" "If people are not listening to your advice, 99% of the time, it's because you didn't answer the right question." "Smart people know the right answer. Brilliant people ask the right question." "Good cybersecurity people solve problems. Great cybersecurity people solve the right problems." "Don't overlook the obvious." "It's never a lack of resources, but a lack of resourcefulness."  Getting Into Infosec Other episodes, transcripts, a career guide to Getting Into Infosec:https://gettingintoinfosec.com/See omnystudio.com/listener for privacy information.

Dr. Eric Cole is an accomplished cybersecurity hacker and executive advisor. His career has been a mix of sixth-sense chance encounters and wisdom/foresight of the future. His uncanny ability to see the opportunity in cybersecurity combined with the wisdom to listen to those smarter than him is why he is where he is today. His interview is chock full of poignant advice and tips. Dr. Eric Cole also has a creative side to him: he's a musician. He was a French horn player before and now, he's a drummer. He's known as the Tommy Lee of Cybersecurity. Eric Cole's Quick List of Advice <ul> <li>Always be respectful, Don't be an A**Hole to other people… but don't give a crap what other people say or think because we're unique and different. If you're an entrepreneur in cybersecurity, they're not gonna get ya.</li> <li>Listen to people that are smarter than you and have made the mistakes before you make them.</li> <li>Life will force you to repeat lessons until you learn them.</li> <li>The biggest gap is in the monitoring, detection, and analyst side.</li> </ul> Quotes <ul> <li>"It's all about looking at calculated risk, understanding [the] pros and cons, and taking chances."</li> <li>"You've done the same thing six times in a row, and it doesn't work. What makes you think if you do it a seventh time [that] it's actually going to work?"</li> <li>"Try different things."</li> <li>"Have advisory board members for your life."</li> <li>"If the best professionals in the world have coaches, why shouldn't we?"</li> <li>"If people are not listening to your advice, 99% of the time, it's because you didn't answer the right question."</li> <li>"Smart people know the right answer. Brilliant people ask the right question."</li> <li>"Good cybersecurity people solve problems. Great cybersecurity people solve the right problems."</li> <li>"Don't overlook the obvious."</li> <li>"It's never a lack of resources, but a lack of resourcefulness."</li> </ul> Getting Into Infosec Other episodes, transcripts, a career guide to Getting Into Infosec: <a href="https://gettingintoinfosec.com/" rel="nofollow" target="_blank">https://gettingintoinfosec.com/</a>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Dr. Eric Cole - Accidental CIA Hacker To Fortune 500 Security Advisory To Entrepreneur

Lisa Jiggetts

Lisa Jiggetts knew from an early age that she was going to be in tech and cyber. A navy veteran who started off as a cook, she always found herself gravitating towards technology. She is also the Founder &amp; Board of Director of the Women’s Society of Cyberjutsu, a non-profit that is dedicated to increasing the opportunities and advancement for women in cybersecurity. Check out her journey into the cybersecurity field. Notes  Originally a cook in the military, then migrated to information security. Looked for opportunities to transition into information security by talking to people in and outside her social network. Networking can be hard, but it will turn in your favor. Lisa is an introvert, but knows how to become an extrovert when needed.  Quotes  "When you're starting out, you don't necessarily get into the area you want to be in—you got to work your way up." “That's the biggest thing you can do. I think is networking because somebody knows somebody." "So I got all these certifications… I read a book and pass. What is it to me personally? That didn't tell me, you know, how to do anything. They get you in the door." "[Networking is] hard, but just do it because, in the end, it's gonna turn out in your favor."  Links  Lisa on Twitter: https://twitter.com/lisajiggetts Intro Music: https://trash80.com/#/content/133/weeklybeats-2012-week5 Women’s Society of Cyberjutsu: https://womenscyberjutsu.org/  Getting Into Infosec  Breaking IN: A Practical Guide to Starting a Career in Information Security: https://www.amazon.com/dp/B07N15GTPC/ T-Shirts, Mugs, and more: https://gettingintoinfosec.com/shop/  Stay in touch and sign up for sneak peeks, updates, and commentary: https://gettingintoinfosec.com/subscribe Ayman on Twitter: https://twitter.com/coffeewithayman Follow Us on Twitter:  https://twitter.com/getintoinfosec Follow Us on Instagram: https://www.instagram.com/coffeewithayman/ Join our community: https://community.gettingintoinfosec.com/ See omnystudio.com/listener for privacy information.

Lisa Jiggetts knew from an early age that she was going to be in tech and cyber. A navy veteran who started off as a cook, she always found herself gravitating towards technology. She is also the Founder &amp; Board of Director of the Women’s Society of Cyberjutsu, a non-profit that is dedicated to increasing the opportunities and advancement for women in cybersecurity. Check out her journey into the cybersecurity field. Notes <ul> <li>Originally a cook in the military, then migrated to information security.</li> <li>Looked for opportunities to transition into information security by talking to people in and outside her social network.</li> <li>Networking can be hard, but it will turn in your favor.</li> <li>Lisa is an introvert, but knows how to become an extrovert when needed.</li> </ul> Quotes <ul> <li>"When you're starting out, you don't necessarily get into the area you want to be in—you got to work your way up."</li> <li>“That's the biggest thing you can do. I think is networking because somebody knows somebody."</li> <li>"So I got all these certifications… I read a book and pass. What is it to me personally? That didn't tell me, you know, how to do anything. They get you in the door."</li> <li>"[Networking is] hard, but just do it because, in the end, it's gonna turn out in your favor."</li> </ul> Links <ul> <li>Lisa on Twitter: <a href="https://twitter.com/lisajiggetts" rel="nofollow" target="_blank">https://twitter.com/lisajiggetts</a></li> <li>Intro Music: <a href="https://trash80.com/#/content/133/weeklybeats-2012-week5" rel="nofollow" target="_blank">https://trash80.com/#/content/133/weeklybeats-2012-week5</a></li> <li>Women’s Society of Cyberjutsu: <a href="https://womenscyberjutsu.org/" rel="nofollow" target="_blank">https://womenscyberjutsu.org/</a></li> </ul> Getting Into Infosec <ul> <li>Breaking IN: A Practical Guide to Starting a Career in Information Security: <a href="https://www.amazon.com/dp/B07N15GTPC/" rel="nofollow" target="_blank">https://www.amazon.com/dp/B07N15GTPC/</a></li> <li>T-Shirts, Mugs, and more: <a href="https://gettingintoinfosec.com/shop/" rel="nofollow" target="_blank">https://gettingintoinfosec.com/shop/</a> </li> <li>Stay in touch and sign up for sneak peeks, updates, and commentary: <a href="https://gettingintoinfosec.com/subscribe" rel="nofollow" target="_blank">https://gettingintoinfosec.com/subscribe</a></li> <li>Ayman on Twitter: <a href="https://twitter.com/coffeewithayman" rel="nofollow" target="_blank">https://twitter.com/coffeewithayman</a></li> <li>Follow Us on Twitter:  <a href="https://twitter.com/getintoinfosec" rel="nofollow" target="_blank">https://twitter.com/getintoinfosec</a></li> <li>Follow Us on Instagram: <a href="https://www.instagram.com/coffeewithayman/" rel="nofollow" target="_blank">https://www.instagram.com/coffeewithayman/</a></li> <li>Join our community: <a href="https://community.gettingintoinfosec.com/" rel="nofollow" target="_blank">https://community.gettingintoinfosec.com/</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Lisa Jiggetts - From Navy Cook To Pentester To Non-Profit Founder!

Eric Strom

Eric Strom is the Unit Chief of the Mission Critical Engagement Unit, Cyber Division. In this role, Mr. Strom oversees the FBI Cyber Division’s private sector outreach efforts to the 16 critical infrastructure sectors, forging partnerships with companies in those sectors to develop and share threat intelligence related to activities by sophisticated criminal organizations as well as nation-state actors. Notes  Eric has been with the FBI for 21 years, since June 1999 Originally a lawyer practicing criminal defense and civil defense, then went to non-profit Early on in the FBI, they had to do a lot of workarounds. Cyber wasn't so straightforward 56 Field offices were all doing something different, then became consolidated centrally as a service organization  Quotes   "Now, it's funny. None of us really had a traditional cyber background. Tom started out his career as a geologist, and Keith actually started out selling, like, furniture. He was a salesman."   "But, I mean, from the legal standpoint, you've got third-party liability and other things. So we really had to walk a kind of a tight rope when it came to what types of malware we were infecting ourselves with. And then how far we'd let it go."   "And so as we're taking it over, it was really interesting to sit behind one of the malware analysts and watch a Wireshark and watch the instructions coming out. I crossed the wire. It was really cool. And when it really kind of sunk in, because to me, it was like a tangible thing. I can actually see it happening as it was going on."   "It's (cybersecurity) probably the most rewarding thing you'll ever do in your life."   Links  FBI: https://www.fbi.gov/ Intro Music: https://trash80.com/#/content/133/weeklybeats-2012-week5 Outro Music: https://freemusicarchive.org/music/KieLoKaz/Free_Ganymed/Alte_Herren_Kielokaz_ID_364  Getting Into Infosec   Breaking IN: A Practical Guide to Starting a Career in Information Security: https://www.amazon.com/dp/B07N15GTPC/   T-Shirts, Mugs, and more: https://gettingintoinfosec.com/shop/   Stay in touch and sign up for sneak peeks, updates, and commentary: https://gettingintoinfosec.com/subscribe   Ayman on Twitter: https://twitter.com/coffeewithayman  See omnystudio.com/listener for privacy information.

Eric Strom is the Unit Chief of the Mission Critical Engagement Unit, Cyber Division. In this role, Mr. Strom oversees the FBI Cyber Division’s private sector outreach efforts to the 16 critical infrastructure sectors, forging partnerships with companies in those sectors to develop and share threat intelligence related to activities by sophisticated criminal organizations as well as nation-state actors. Notes <ul> <li>Eric has been with the FBI for 21 years, since June 1999</li> <li>Originally a lawyer practicing criminal defense and civil defense, then went to non-profit</li> <li>Early on in the FBI, they had to do a lot of workarounds. Cyber wasn't so straightforward</li> <li>56 Field offices were all doing something different, then became consolidated centrally as a service organization</li> </ul> Quotes <ul> <li> "Now, it's funny. None of us really had a traditional cyber background. Tom started out his career as a geologist, and Keith actually started out selling, like, furniture. He was a salesman." </li> <li> "But, I mean, from the legal standpoint, you've got third-party liability and other things. So we really had to walk a kind of a tight rope when it came to what types of malware we were infecting ourselves with. And then how far we'd let it go." </li> <li> "And so as we're taking it over, it was really interesting to sit behind one of the malware analysts and watch a Wireshark and watch the instructions coming out. I crossed the wire. It was really cool. And when it really kind of sunk in, because to me, it was like a tangible thing. I can actually see it happening as it was going on." </li> <li> "It's (cybersecurity) probably the most rewarding thing you'll ever do in your life." </li> </ul> Links <ul> <li>FBI: <a href="https://www.fbi.gov/" rel="nofollow" target="_blank">https://www.fbi.gov/</a></li> <li>Intro Music: <a href="https://trash80.com/#/content/133/weeklybeats-2012-week5" rel="nofollow" target="_blank">https://trash80.com/#/content/133/weeklybeats-2012-week5</a></li> <li>Outro Music: <a href="https://freemusicarchive.org/music/KieLoKaz/Free_Ganymed/Alte_Herren_Kielokaz_ID_364" rel="nofollow" target="_blank">https://freemusicarchive.org/music/KieLoKaz/Free_Ganymed/Alte_Herren_Kielokaz_ID_364</a></li> </ul> Getting Into Infosec <ul> <li> Breaking IN: A Practical Guide to Starting a Career in Information Security: <a href="https://www.amazon.com/dp/B07N15GTPC/" rel="nofollow" target="_blank">https://www.amazon.com/dp/B07N15GTPC/</a> </li> <li> T-Shirts, Mugs, and more: <a href="https://gettingintoinfosec.com/shop/" rel="nofollow" target="_blank">https://gettingintoinfosec.com/shop/</a> </li> <li> Stay in touch and sign up for sneak peeks, updates, and commentary: <a href="https://pages.gettingintoinfosec.com/subscribe" rel="nofollow" target="_blank">https://gettingintoinfosec.com/subscribe</a> </li> <li> Ayman on Twitter: <a href="https://twitter.com/coffeewithayman" rel="nofollow" target="_blank">https://twitter.com/coffeewithayman</a> </li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Eric Strom - From Lawyer to FBI Cyber Division Unit Chief

Interviews with people who have transitioned and got jobs in #infosec and #cybersecurity so you can learn and be inspired from their experience. There is no linear path into the field of Information Security, so the hope is that you will resonate with at least one of the guests. Some of my guests were teachers, paralegals, librarians, military vets, developers, and IT help desk techs (to name a few) before transitioning. Also featuring "spoof" ads poking fun at the industry.

Getting Into Infosec

Transcript Hey everyone…  So, as if this time was not hard enough as it was with Covid, the American Black community has been affected yet again. It's difficult to post motivating content while so many are feeling a sense of outrage and so much going on. So I'm going to pause, slow down, or at least take into consideration the posting of new content during this period. Of course, people still need to work, so I can't stop completely, and I do have episodes coming down the pipe. There's a personal story I want to share related to this. A friend and I were driving once, but he realized he left his wallet at home, which had his driver's license. I said, "Not a big deal. They can just look you up if you get pulled over." He then looked at me, and I then figured it out: he's black. It hit me then how privileged of a life I had. It then hit me how scary driving while back really is. I may not be white, Christian, and from the suburbs, but I'm not black and male. I may not have the best things to say at this moment, but I realize staying silent isn't an option. I don't have a TV, and I'm not on Twitter often, but the little I did see made me realize silence or status quo is almost as bad. Diversity and inclusion are an integral part of this podcast. I've never called it out as I just wanted my lineup to speak for itself. Many of my guests are black. For the longest time, it was rare to see a brown or black person at a security conference. It was quite lonely. For listeners outside of the US, please try to empathize with whatever social divide you have in your country. It could be the religious minority in your country, the darker-skinned, those of a "lower" social caste, the poor, or whomever it may be. There are always those that are marginally suppressed or oppressed. So…. I stand with the Black community against racism, violence, and hate. Now, more than ever, we must support one another as allies and speak up for justice and equality. #BlackLivesMatter ****************************************** Website: https://gettingintoinfosec.com/ Twitter: https://twitter.com/coffeewithayman See omnystudio.com/listener for privacy information.

Transcript Hey everyone…  So, as if this time was not hard enough as it was with Covid, the American Black community has been affected yet again. It's difficult to post motivating content while so many are feeling a sense of outrage and so much going on. So I'm going to pause, slow down, or at least take into consideration the posting of new content during this period. Of course, people still need to work, so I can't stop completely, and I do have episodes coming down the pipe. There's a personal story I want to share related to this. A friend and I were driving once, but he realized he left his wallet at home, which had his driver's license. I said, "Not a big deal. They can just look you up if you get pulled over." He then looked at me, and I then figured it out: he's black. It hit me then how privileged of a life I had. It then hit me how scary driving while back really is. I may not be white, Christian, and from the suburbs, but I'm not black and male. I may not have the best things to say at this moment, but I realize staying silent isn't an option. I don't have a TV, and I'm not on Twitter often, but the little I did see made me realize silence or status quo is almost as bad. Diversity and inclusion are an integral part of this podcast. I've never called it out as I just wanted my lineup to speak for itself. Many of my guests are black. For the longest time, it was rare to see a brown or black person at a security conference. It was quite lonely. For listeners outside of the US, please try to empathize with whatever social divide you have in your country. It could be the religious minority in your country, the darker-skinned, those of a "lower" social caste, the poor, or whomever it may be. There are always those that are marginally suppressed or oppressed. So…. I stand with the Black community against racism, violence, and hate. Now, more than ever, we must support one another as allies and speak up for justice and equality. <a href="https://www.youtube.com/results?search_query=%23BlackLivesMatter" rel="nofollow" target="_blank">#BlackLivesMatter</a> ****************************************** Website:<a href="https://www.youtube.com/redirect?q=https%3A%2F%2Fgettingintoinfosec.com%2F&amp;v=Xt6sCOaFukY&amp;event=video_description&amp;redir_token=La9QOKijyPfvi-mpTrj_yyWXChJ8MTU5MTEzOTgzN0AxNTkxMDUzNDM3" rel="nofollow" target="_blank"> https://gettingintoinfosec.com/</a> Twitter: <a href="https://www.youtube.com/redirect?q=https%3A%2F%2Ftwitter.com%2Fcoffeewithayman&amp;v=Xt6sCOaFukY&amp;event=video_description&amp;redir_token=La9QOKijyPfvi-mpTrj_yyWXChJ8MTU5MTEzOTgzN0AxNTkxMDUzNDM3" rel="nofollow" target="_blank">https://twitter.com/coffeewithayman</a> See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Black Lives Matter

Christina Hanson

Christina Hanson is a security analyst working for Truvantis Cyber Security Consulting and one of my former boot camp students. She has extensive technical experience and a deep understanding of the collaborative nature of InfoSec, not to mention how women and other underrepresented groups in the community have a more difficult time navigating this industry due to institutional barriers. In our discussion, Christina touches on the wide variety of resources and events that helped her enter information security, why teamwork is just as important as technical work, and why InfoSec's responsibilities will continue to grow in the near future. Episode Highlights  How Christina's aptitude for IT led her down the path to InfoSec The "elective" course Christina took that turned out to be career-changing Why cooperation and group work are so important in InfoSec The "soft skills" needed to work in security Infosec was not her 1st or 2nd career! An overview of Christina's day at Truvantis and how she works with clients Christina's experience at a SANS women's academy and the Day of Shecurity conference Why the InfoSec industry needs contributions from people from all backgrounds and how it benefits from diversity in general The increasing accessibility of conferences and other tech events for those who can't attend InfoSec's important role as companies have more and more access to users' data  Quotes  "I found that just the general atmosphere of security and the overall focus of what you're trying to accomplish was really helpful." "Anything you're gonna do in security, you're gonna do as a team." "Being open to learning new things is really important with this particular field." "Even if I don't understand everything they're talking about, it gives me at least a start and a basic understanding that I can then research later." "Being a professional in this field, it's so important that we are able to make other people safe."  Links:  Christina's LinkedIn: https://www.linkedin.com/in/christinahanson461/ Day of Shecurity: https://www.dayofshecurity.com/ SANS Women's Academy: https://www.sans.org/cyb Merritt College: http://www.merritt.edu/ Dr. Johannes Ullrich: https://twitter.com/johullrich SANS Daily Podcast: https://isc.sans.edu/podcast.html The Cyberwire Podcasts: https://isc.sans.edu/podcast.html OWASP: https://www.owasp.org Amanda Rousseau (@malwareunicorn): https://twitter.com/malwareunicorn Dead Drop SF: https://www.meetup.com/Dead-Drop-SF/ See omnystudio.com/listener for privacy information.

Christina Hanson is a security analyst working for Truvantis Cyber Security Consulting and one of my former boot camp students. She has extensive technical experience and a deep understanding of the collaborative nature of InfoSec, not to mention how women and other underrepresented groups in the community have a more difficult time navigating this industry due to institutional barriers. In our discussion, Christina touches on the wide variety of resources and events that helped her enter information security, why teamwork is just as important as technical work, and why InfoSec's responsibilities will continue to grow in the near future. Episode Highlights <ul> <li>How Christina's aptitude for IT led her down the path to InfoSec</li> <li>The "elective" course Christina took that turned out to be career-changing</li> <li>Why cooperation and group work are so important in InfoSec</li> <li>The "soft skills" needed to work in security</li> <li>Infosec was not her 1st or 2nd career!</li> <li>An overview of Christina's day at Truvantis and how she works with clients</li> <li>Christina's experience at a SANS women's academy and the Day of Shecurity conference</li> <li>Why the InfoSec industry needs contributions from people from all backgrounds and how it benefits from diversity in general</li> <li>The increasing accessibility of conferences and other tech events for those who can't attend</li> <li>InfoSec's important role as companies have more and more access to users' data</li> </ul> Quotes <ul> <li>"I found that just the general atmosphere of security and the overall focus of what you're trying to accomplish was really helpful."</li> <li>"Anything you're gonna do in security, you're gonna do as a team."</li> <li>"Being open to learning new things is really important with this particular field."</li> <li>"Even if I don't understand everything they're talking about, it gives me at least a start and a basic understanding that I can then research later."</li> <li>"Being a professional in this field, it's so important that we are able to make other people safe."</li> </ul> Links: <ul> <li>Christina's LinkedIn: <a href="https://www.linkedin.com/in/christinahanson461/" rel="nofollow" target="_blank">https://www.linkedin.com/in/christinahanson461/</a></li> <li>Day of Shecurity: <a href="https://www.dayofshecurity.com/" rel="nofollow" target="_blank">https://www.dayofshecurity.com/</a></li> <li>SANS Women's Academy: <a href="https://www.sans.org/cyb" rel="nofollow" target="_blank">https://www.sans.org/cyb</a></li> <li>Merritt College: <a href="http://www.merritt.edu/" rel="nofollow" target="_blank">http://www.merritt.edu/</a></li> <li>Dr. Johannes Ullrich: <a href="https://twitter.com/johullrich" rel="nofollow" target="_blank">https://twitter.com/johullrich</a></li> <li>SANS Daily Podcast: <a href="https://isc.sans.edu/podcast.html" rel="nofollow" target="_blank">https://isc.sans.edu/podcast.html</a></li> <li>The Cyberwire Podcasts: <a href="https://isc.sans.edu/podcast.html" rel="nofollow" target="_blank">https://isc.sans.edu/podcast.html</a></li> <li>OWASP: <a href="https://www.owasp.org" rel="nofollow" target="_blank">https://www.owasp.org</a></li> <li>Amanda Rousseau (@malwareunicorn): <a href="https://twitter.com/malwareunicorn" rel="nofollow" target="_blank">https://twitter.com/malwareunicorn</a></li> <li>Dead Drop SF: <a href="https://www.meetup.com/Dead-Drop-SF/" rel="nofollow" target="_blank">https://www.meetup.com/Dead-Drop-SF/</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Christina Hanson -  From HOA Manager to Headfirst Into InfoSec!

Matt Toth

Matt Toth is a Senior Security and Veteran Sales Engineer. Having collaborated with the Department of Defense on War Games and advised senior leaders on possible cyber threats, Matt has two decades of IT experience with a focus on cybersecurity. With a passion for security, Matt is deeply engaged with the community to educate and prepare the next generation of cyber professionals. On top of that, he’s a good friend of mine in the industry with solid advice for those looking for a career in Information Security. In our chat, Matt breaks down a Sales Engineer’s role, explains his love of conference badges, and gets philosophical on issues related to those trying to make it in the field. Episode Highlights:  The jack-of-all-trades nature of Sales Engineer work Matt describes one company’s dishonest approach to “AI” How a luxury car and stylish threads can make the wrong impression on your client Con culture and breaking through the shyness barrier Matt delves into #BadgeLife The surprising accuracy of Hackers and Mr. Robot How Matt’s art school’s aspirations shifted to IT InfoSec wargames and the “Russian nesting doll” scenario Matt encountered working with a client Why some companies prefer to live with a security problem rather than attempt to fix it Lastly: Have you been keeping an ear out for my Easter eggs? Listen closely  Quotes:  “I’m here, the customer trusts me to be here, and I’m gonna make sure that when they’re done, they’re happy with the situation so that they never come back and say, ‘Hey dude, you screwed me over.’” “You have to understand that you’re responsible for your own success. You can’t hide because you do have a quota.” “If you really don’t like the technology you’re dealing with, you’re not going to sell it well.” “It’s awesome... [and iconic,] that soundtrack is still incredible! On the way out to BlackHat this year, I watched Hackers on the airplane, and it was freaking me out… all of the attacks… are real world attacks we’re dealing with today still!” “When you’re meeting with your audience, understand who they are and understand what they expect.” “‘Hi, I’m Matt, and I’m an InfoSec addict!’ ‘Hi Matt!’” “If you’re just getting into the industry, recognize that all of us have our skill gaps. There is no one who knows everything.” “My thoughts on certs are, 'do you like to get paid?'” “Most insider threats aren't malicious: they're just people trying to do their job and oftentimes working around the system to try to be more efficient.”  Links:  Matt’s LinkedIn Matt’s Twitter - @willhackforfood Matt’s blog Splunk William Gibson and Neuromancer Grifter and #trevorforget Derbycon See omnystudio.com/listener for privacy information.

Matt Toth is a Senior Security and Veteran Sales Engineer. Having collaborated with the Department of Defense on War Games and advised senior leaders on possible cyber threats, Matt has two decades of IT experience with a focus on cybersecurity. With a passion for security, Matt is deeply engaged with the community to educate and prepare the next generation of cyber professionals. On top of that, he’s a good friend of mine in the industry with solid advice for those looking for a career in Information Security. In our chat, Matt breaks down a Sales Engineer’s role, explains his love of conference badges, and gets philosophical on issues related to those trying to make it in the field. Episode Highlights: <ul> <li>The jack-of-all-trades nature of Sales Engineer work</li> <li>Matt describes one company’s dishonest approach to “AI”</li> <li>How a luxury car and stylish threads can make the wrong impression on your client</li> <li>Con culture and breaking through the shyness barrier</li> <li>Matt delves into #BadgeLife</li> <li>The surprising accuracy of Hackers and Mr. Robot</li> <li>How Matt’s art school’s aspirations shifted to IT</li> <li>InfoSec wargames and the “Russian nesting doll” scenario Matt encountered working with a client</li> <li>Why some companies prefer to live with a security problem rather than attempt to fix it</li> <li>Lastly: Have you been keeping an ear out for my Easter eggs? Listen closely</li> </ul> Quotes: <ul> <li>“I’m here, the customer trusts me to be here, and I’m gonna make sure that when they’re done, they’re happy with the situation so that they never come back and say, ‘Hey dude, you screwed me over.’”</li> <li>“You have to understand that you’re responsible for your own success. You can’t hide because you do have a quota.”</li> <li>“If you really don’t like the technology you’re dealing with, you’re not going to sell it well.”</li> <li>“It’s awesome... [and iconic,] that soundtrack is still incredible! On the way out to BlackHat this year, I watched Hackers on the airplane, and it was freaking me out… all of the attacks… are real world attacks we’re dealing with today still!”</li> <li>“When you’re meeting with your audience, understand who they are and understand what they expect.”</li> <li>“‘Hi, I’m Matt, and I’m an InfoSec addict!’ ‘Hi Matt!’”</li> <li>“If you’re just getting into the industry, recognize that all of us have our skill gaps. There is no one who knows everything.”</li> <li>“My thoughts on certs are, 'do you like to get paid?'”</li> <li>“Most insider threats aren't malicious: they're just people trying to do their job and oftentimes working around the system to try to be more efficient.”</li> </ul> Links: <ul> <li><a href="https://www.linkedin.com/in/matt-toth-68b7181/" rel="nofollow" target="_blank">Matt’s LinkedIn</a></li> <li><a href="https://twitter.com/willhackforfood" rel="nofollow" target="_blank">Matt’s Twitter - @willhackforfood</a></li> <li><a href="http://blog.hacktheplanet.org/" rel="nofollow" target="_blank">Matt’s blog</a></li> <li><a href="https://www.splunk.com/" rel="nofollow" target="_blank">Splunk</a></li> <li><a href="https://en.wikipedia.org/wiki/William_Gibson" rel="nofollow" target="_blank">William Gibson</a> and <a href="https://en.wikipedia.org/wiki/Neuromancer" rel="nofollow" target="_blank">Neuromancer</a></li> <li><a href="https://twitter.com/grifter801" rel="nofollow" target="_blank">Grifter</a> and <a href="https://www.csoonline.com/article/3227910/security/hackers-create-memorial-for-a-cockroach-named-trevor.html" rel="nofollow" target="_blank">#trevorforget</a></li> <li><a href="https://www.derbycon.com/" rel="nofollow" target="_blank">Derbycon</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Matt Toth - From Slinky Network Support Engineer to Security Sales Engineer

Having completed 20 episodes, I decided to take a moment to go over each episode briefly. Thanks to call my guests! Ep01 - Dan Borges: https://twitter.com/1njection Ep02 - 0daySimpson: https://twitter.com/0daySimpson Ep03 - Christina Hanson Ep04 - Matt Toth: https://twitter.com/willhackforfood Ep05 - Rob Carson: https://twitter.com/robcarson05 Ep06 - Robin Stuart: https://twitter.com/rcstuart Ep07 - Clay Wells: https://twitter.com/ttheveii0x Ep08 - Elvis Chan: https://twitter.com/FBISanFrancisco Ep09 - Virtual Kyle Kennedy: https://twitter.com/Kyle_F_Kennedy Ep10 - InfoSteph: https://twitter.com/StephandSec Ep11 - Yaron Levi: https://twitter.com/0xL3v1 Ep12 - Jack Rhysider: https://twitter.com/JackRhysider Ep13 - Marcus Carey: https://twitter.com/marcusjcarey Ep14 - Nipun Gupta: https://twitter.com/nipungupta Ep15 - Adrian Kaylor: https://twitter.com/AdrianKaylor Ep16 - InfosecSherpa: https://twitter.com/InfoSecSherpa Ep17 - InfosecJon: https://twitter.com/InfoSecJon Ep18 - Masha Sedova: https://twitter.com/modMasha Ep19 - Jared Folkins: https://twitter.com/JF0LKINS Ep20 - Leron Gray: https://twitter.com/mcohmi Getting Into Infosec:   Twitter: https://twitter.com/coffeewithayman   YouTube: https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A   Book: https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/  See omnystudio.com/listener for privacy information.

Having completed 20 episodes, I decided to take a moment to go over each episode briefly. Thanks to call my guests! Ep01 - Dan Borges: <a href="https://twitter.com/1njection" rel="nofollow" target="_blank">https://twitter.com/1njection</a> Ep02 - 0daySimpson: <a href="https://twitter.com/0daySimpson" rel="nofollow" target="_blank">https://twitter.com/0daySimpson</a> Ep03 - Christina Hanson Ep04 - Matt Toth: <a href="https://twitter.com/willhackforfood" rel="nofollow" target="_blank">https://twitter.com/willhackforfood</a> Ep05 - Rob Carson: <a href="https://twitter.com/robcarson05" rel="nofollow" target="_blank">https://twitter.com/robcarson05</a> Ep06 - Robin Stuart: <a href="https://twitter.com/rcstuart" rel="nofollow" target="_blank">https://twitter.com/rcstuart</a> Ep07 - Clay Wells: <a href="https://twitter.com/ttheveii0x" rel="nofollow" target="_blank">https://twitter.com/ttheveii0x</a> Ep08 - Elvis Chan: <a href="https://twitter.com/FBISanFrancisco" rel="nofollow" target="_blank">https://twitter.com/FBISanFrancisco</a> Ep09 - Virtual Kyle Kennedy: <a href="https://twitter.com/Kyle_F_Kennedy" rel="nofollow" target="_blank">https://twitter.com/Kyle_F_Kennedy</a> Ep10 - InfoSteph: <a href="https://twitter.com/StephandSec" rel="nofollow" target="_blank">https://twitter.com/StephandSec</a> Ep11 - Yaron Levi: <a href="https://twitter.com/0xL3v1" rel="nofollow" target="_blank">https://twitter.com/0xL3v1</a> Ep12 - Jack Rhysider: <a href="https://twitter.com/JackRhysider" rel="nofollow" target="_blank">https://twitter.com/JackRhysider</a> Ep13 - Marcus Carey: <a href="https://twitter.com/marcusjcarey" rel="nofollow" target="_blank">https://twitter.com/marcusjcarey</a> Ep14 - Nipun Gupta: <a href="https://twitter.com/nipungupta" rel="nofollow" target="_blank">https://twitter.com/nipungupta</a> Ep15 - Adrian Kaylor: <a href="https://twitter.com/AdrianKaylor" rel="nofollow" target="_blank">https://twitter.com/AdrianKaylor</a> Ep16 - InfosecSherpa: <a href="https://twitter.com/InfoSecSherpa" rel="nofollow" target="_blank">https://twitter.com/InfoSecSherpa</a> Ep17 - InfosecJon: <a href="https://twitter.com/InfoSecJon" rel="nofollow" target="_blank">https://twitter.com/InfoSecJon</a> Ep18 - Masha Sedova: <a href="https://twitter.com/modMasha" rel="nofollow" target="_blank">https://twitter.com/modMasha</a> Ep19 - Jared Folkins: <a href="https://twitter.com/JF0LKINS" rel="nofollow" target="_blank">https://twitter.com/JF0LKINS</a> Ep20 - Leron Gray:<a href="https://twitter.com/mcohmi" rel="nofollow" target="_blank"> https://twitter.com/mcohmi</a> Getting Into Infosec: <ul> <li> Twitter: <a href="https://twitter.com/coffeewithayman" rel="nofollow" target="_blank">https://twitter.com/coffeewithayman</a> </li> <li> YouTube: <a href="https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A" rel="nofollow" target="_blank">https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A</a> </li> <li> Book: <a href="https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/" rel="nofollow" target="_blank">https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/</a> </li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

BONUS - CliffsNotes To The First 20 Episodes!

Syntax, an internal pentester for a large organization, had an interesting ride into infosec, filled with pitstops, detours, and countersteering along the way. At an early age, he was influenced by his father, got started hacking, and was wrongfully arrested for reporting a vulnerability in his High School. Hear his exciting journey into infosec, filled with life lessons. Shownotes  Was arrested in High School for disclosing a vulnerability in the school IT system Went to college for computer science, but dropped out Inspired by the movie hackers His first computer had a 1MB hard drive (yes, not a typo!) Still went to Defcon even when he was not in IT or working in security Was a professional motorcycle racer Kept all his rejection letters as a way of motivation to keep going Had some business and entrepreneurial experience in the past, which helped him get back into the field Got back into security through… IT!  Quotes  "A lot of our time is spent arguing with the other departments and justifying our findings." [2:58] "Is this cross-site scripting really a problem?" "I get stuck a lot… it's kind of the nature of the beast." [5:17] "I'm not going to work in tech again." [12:21] "You're a motorcycle mechanic… why should we hire you?"[19:07] "It's my hacker family. These are my people. Everyone in security, they make sense to me, cause they're all kinda like me." [19:41] "I kept getting [these] projects coming my way and I constantly said, 'YES.'" [22:07] "Have you done this before? … no, but I'll learn!" [25:06]" "Because I had that mindset… I was seeing [from a] different [perspective] than other analysts." [26:00]  Links  Syntax on Twitter:  https://twitter.com/syntax976 DCZIA: http://dczia.net/ Queercon: https://www.queercon.org/ Outro Music: "Pure Decking" by Patient Zero from the album "Screen Saviour" her link is http://patientzero.bandcamp.com and she is @DoctorKraft on the Twitter  Getting Into Infosec  Breaking IN: A Practical Guide to Starting a Career in Information Security: https://www.amazon.com/dp/B07N15GTPC/ T-Shirts, Mugs, and more: https://gettingintoinfosec.com/shop/ Sign up for sneak peeks, updates, and commentary: https://pages.gettingintoinfosec.com/subscribe See omnystudio.com/listener for privacy information.

Syntax, an internal pentester for a large organization, had an interesting ride into infosec, filled with pitstops, detours, and countersteering along the way. At an early age, he was influenced by his father, got started hacking, and was wrongfully arrested for reporting a vulnerability in his High School. Hear his exciting journey into infosec, filled with life lessons. Shownotes <ul> <li>Was arrested in High School for disclosing a vulnerability in the school IT system</li> <li>Went to college for computer science, but dropped out</li> <li>Inspired by the movie hackers</li> <li>His first computer had a 1MB hard drive (yes, not a typo!)</li> <li>Still went to Defcon even when he was not in IT or working in security</li> <li>Was a professional motorcycle racer</li> <li>Kept all his rejection letters as a way of motivation to keep going</li> <li>Had some business and entrepreneurial experience in the past, which helped him get back into the field</li> <li>Got back into security through… IT!</li> </ul> Quotes <ul> <li>"A lot of our time is spent arguing with the other departments and justifying our findings." [2:58]</li> <li>"Is this cross-site scripting really a problem?"</li> <li>"I get stuck a lot… it's kind of the nature of the beast." [5:17]</li> <li>"I'm not going to work in tech again." [12:21]</li> <li>"You're a motorcycle mechanic… why should we hire you?"[19:07]</li> <li>"It's my hacker family. These are my people. Everyone in security, they make sense to me, cause they're all kinda like me." [19:41]</li> <li>"I kept getting [these] projects coming my way and I constantly said, 'YES.'" [22:07]</li> <li>"Have you done this before? … no, but I'll learn!" [25:06]"</li> <li>"Because I had that mindset… I was seeing [from a] different [perspective] than other analysts." [26:00]</li> </ul> Links <ul> <li>Syntax on Twitter:  <a href="https://twitter.com/syntax976" rel="nofollow" target="_blank">https://twitter.com/syntax976</a></li> <li>DCZIA: <a href="http://dczia.net/" rel="nofollow" target="_blank">http://dczia.net/</a></li> <li>Queercon: <a href="https://www.queercon.org/" rel="nofollow" target="_blank">https://www.queercon.org/</a></li> <li>Outro Music: "Pure Decking" by Patient Zero from the album "Screen Saviour" her link is <a href="http://patientzero.bandcamp.com/" rel="nofollow" target="_blank">http://patientzero.bandcamp.com</a> and she is @DoctorKraft on the Twitter</li> </ul> Getting Into Infosec <ul> <li>Breaking IN: A Practical Guide to Starting a Career in Information Security: <a href="https://www.amazon.com/dp/B07N15GTPC/%5C%5D(https://www.amazon.com/dp/B07N15GTPC/)" rel="nofollow" target="_blank">https://www.amazon.com/dp/B07N15GTPC/</a></li> <li>T-Shirts, Mugs, and more: <a href="https://gettingintoinfosec.com/shop/%5C%5D(https://gettingintoinfosec.com/shop/)" rel="nofollow" target="_blank">https://gettingintoinfosec.com/shop/</a></li> <li>Sign up for sneak peeks, updates, and commentary:<a href="https://pages.gettingintoinfosec.com/subscribe%5C%5D(https://pages.gettingintoinfosec.com/subscribe)" rel="nofollow" target="_blank"> https://pages.gettingintoinfosec.com/subscribe</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Syntax - Arrested Teenager to Motorcycle Racer To Pentester

MC OHM-I (Leron Gray) talks about his next project about tabs in the browser, trap music, and some background on his awesome song, "Domain." Getting Into Infosec   Twitter: https://twitter.com/coffeewithayman   YouTube: https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A   Book: https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/  See omnystudio.com/listener for privacy information.

MC OHM-I (Leron Gray) talks about his next project about tabs in the browser, trap music, and some background on his awesome song, "Domain." Getting Into Infosec <ul> <li> Twitter: <a href="https://twitter.com/coffeewithayman" rel="nofollow" target="_blank">https://twitter.com/coffeewithayman</a> </li> <li> YouTube: <a href="https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A" rel="nofollow" target="_blank">https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A</a> </li> <li> Book: <a href="https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/" rel="nofollow" target="_blank">https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/</a> </li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

BONUS - MCOHMI New Song, Trap Music, and Domain Song Background

Hello! Wanted to let you know I'm creating daily (almost) videos on YouTube called Getting Into Infosec BITES: https://www.youtube.com/c/gettingintoinfosec Please like, subscribe, and spread the word. The best thing you can do to support this media is to spread the word and let others know. Thanks! Links:  Site: http://gettingintoinfosec.com/ Book: http://breakingintoinfosec.com/ Twitter: https://twitter.com/coffeewithayman See omnystudio.com/listener for privacy information.

Hello! Wanted to let you know I'm creating daily (almost) videos on YouTube called Getting Into Infosec BITES: <a href="https://www.youtube.com/c/gettingintoinfosec" rel="nofollow" target="_blank">https://www.youtube.com/c/gettingintoinfosec</a> Please like, subscribe, and spread the word. The best thing you can do to support this media is to spread the word and let others know. Thanks! Links: <ul> <li>Site: <a href="http://gettingintoinfosec.com/" rel="nofollow" target="_blank">http://gettingintoinfosec.com/</a></li> <li>Book: <a href="http://breakingintoinfosec.com/" rel="nofollow" target="_blank">http://breakingintoinfosec.com/</a></li> <li>Twitter: <a href="https://twitter.com/coffeewithayman" rel="nofollow" target="_blank">https://twitter.com/coffeewithayman</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

BONUS - Announcing Getting Into Infosec BITES

Steph is brand new to the infosec field! We go over her interesting and eventful path into Information Security, reflections on her role today, and some fascinating war stories! BIO: Steph is a Security Analyst for a retail company makes up the team of one. She has a background in journalism and web hosting. She is the creator and editor of StephAndSec.com, a blog focused on technology, inclusion, and lifetime learning. Stephanie's life work is to encourage and fight for more diversity and inclusion in tech spaces for more innovative and original collaboration. She spends her time mentoring high school students, hosting virtual labs via Women In Tech-a-thons, and learning as much as she can about anything and everything. Stephanie believes that giving back to the community at every stage is very important. In addition to technology, Stephanie has a secondary passion for Psychology, so don't be frightened if you hear her discuss cognitive distortions or attachment styles. She hopes to develop research that explores the dichotomy between human beings and technology. She is currently on a mission to speak at three events in 2019 and has already been booked for one event. Notes:   Dreams of Creative Writing, but chose Journalism for practicality   Encouraged to Computer Science by her mom   Had her eye on Security, through IT or Web Hosting... eventually.   A story of being so close, yet so far   Was very close to giving up on the whole industry due to the difficulty and lack of encouragement... but was NOT comfortable with quitting.   Quotes:   "You have to talk to strangers about their story... you want me to walk up to a complete stranger as an introvert? Uh.. what?"   "The type of person I am, I can't fully commit to something without getting my hands dirty."   "The way that I learn is situational."   "We had a vulnerability scan tool and so I just tried to work with that."    "It's kind of like what doctors have to do before they [can] become a doctor."   "So many people are trying to get into the industry and facing the same issue. I've done all these things people have told me to and it hasn't gotten me anywhere."   "Just do a bunch of stuff until it sticks!"   "Twitter was one of the best... decision I made."   "Get a champion that is more senior than you."   "Don't count yourself out, before someone else has counted you out."   "The lessons that are best learned are the ones that resulted in catastrophic failure."   "When you want to be a lawyer, you go to law school, you sit for the bar. There ya go! There's a plan."    Links:   Steph's Website: https://stephandsec.com/   Speaking engagement next year: https://2019.tabgeeks.com/speakers#steph   Steph's Tech a Thon's: https://mailchi.mp/70c8010c3320/tech-a-thon-comeback   WISP - Women in Security and Privacy: https://www.wisporg.com/   Intro - Cascadia by Trash 80: https://trash80.com/#/content/133/weeklybeats-2012-week5   Outro - That Night In Your Car - Spazz Cardigan: https://www.youtube.com/watch?v=1yzuoAOd238   Resources:   HackEDU: https://hackedu.io/   Open Bug Bounty.org: https://www.openbugbounty.org/   Getting Into Infosec:   Twitter: https://twitter.com/coffeewithayman   YouTube: https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A   Book: https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/  See omnystudio.com/listener for privacy information.

Steph is brand new to the infosec field! We go over her interesting and eventful path into Information Security, reflections on her role today, and some fascinating war stories! BIO: Steph is a Security Analyst for a retail company makes up the team of one. She has a background in journalism and web hosting. She is the creator and editor of <a href="http://StephAndSec.com" rel="nofollow" target="_blank">StephAndSec.com</a>, a blog focused on technology, inclusion, and lifetime learning. Stephanie's life work is to encourage and fight for more diversity and inclusion in tech spaces for more innovative and original collaboration. She spends her time mentoring high school students, hosting virtual labs via Women In Tech-a-thons, and learning as much as she can about anything and everything. Stephanie believes that giving back to the community at every stage is very important. In addition to technology, Stephanie has a secondary passion for Psychology, so don't be frightened if you hear her discuss cognitive distortions or attachment styles. She hopes to develop research that explores the dichotomy between human beings and technology. She is currently on a mission to speak at three events in 2019 and has already been booked for one event. Notes: <ul> <li> Dreams of Creative Writing, but chose Journalism for practicality </li> <li> Encouraged to Computer Science by her mom </li> <li> Had her eye on Security, through IT or Web Hosting... eventually. </li> <li> A story of being so close, yet so far </li> <li> Was very close to giving up on the whole industry due to the difficulty and lack of encouragement... but was NOT comfortable with quitting. </li> </ul> Quotes: <ul> <li> "You have to talk to strangers about their story... you want me to walk up to a complete stranger as an introvert? Uh.. what?" </li> <li> "The type of person I am, I can't fully commit to something without getting my hands dirty." </li> <li> "The way that I learn is situational." </li> <li> "We had a vulnerability scan tool and so I just tried to work with that."  </li> <li> "It's kind of like what doctors have to do before they [can] become a doctor." </li> <li> "So many people are trying to get into the industry and facing the same issue. I've done all these things people have told me to and it hasn't gotten me anywhere." </li> <li> "Just do a bunch of stuff until it sticks!" </li> <li> "Twitter was one of the best... decision I made." </li> <li> "Get a champion that is more senior than you." </li> <li> "Don't count yourself out, before someone else has counted you out." </li> <li> "The lessons that are best learned are the ones that resulted in catastrophic failure." </li> <li> "When you want to be a lawyer, you go to law school, you sit for the bar. There ya go! There's a plan."  </li> </ul> Links: <ul> <li> Steph's Website: <a href="https://stephandsec.com/" rel="nofollow" target="_blank">https://stephandsec.com/</a> </li> <li> Speaking engagement next year: <a href="https://2019.tabgeeks.com/speakers#steph" rel="nofollow" target="_blank">https://2019.tabgeeks.com/speakers#steph</a> </li> <li> Steph's Tech a Thon's:<a href="https://mailchi.mp/70c8010c3320/tech-a-thon-comeback" rel="nofollow" target="_blank"> https://mailchi.mp/70c8010c3320/tech-a-thon-comeback</a> </li> <li> WISP - Women in Security and Privacy: <a href="https://www.wisporg.com/" rel="nofollow" target="_blank">https://www.wisporg.com/</a> </li> <li> Intro - Cascadia by Trash 80: <a href="https://trash80.com/#/content/133/weeklybeats-2012-week5" rel="nofollow" target="_blank">https://trash80.com/#/content/133/weeklybeats-2012-week5</a> </li> <li> Outro - That Night In Your Car - Spazz Cardigan: <a href="https://www.youtube.com/watch?v=1yzuoAOd238" rel="nofollow" target="_blank">https://www.youtube.com/watch?v=1yzuoAOd238</a> </li> </ul> Resources: <ul> <li> HackEDU: <a href="https://hackedu.io/" rel="nofollow" target="_blank">https://hackedu.io/</a> </li> <li> Open Bug <a href="http://Bounty.org" rel="nofollow" target="_blank">Bounty.org</a>: <a href="https://www.openbugbounty.org/" rel="nofollow" target="_blank">https://www.openbugbounty.org/</a> </li> </ul> Getting Into Infosec: <ul> <li> Twitter: <a href="https://twitter.com/coffeewithayman" rel="nofollow" target="_blank">https://twitter.com/coffeewithayman</a> </li> <li> YouTube: <a href="https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A" rel="nofollow" target="_blank">https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A</a> </li> <li> Book: <a href="https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/" rel="nofollow" target="_blank">https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/</a> </li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

InfoSteph - From Journalism to IT Support to Security Analyst

Kavya Pearlman

Kavya Pearlman is an award-winning cybersecurity professional with a deep interest in immersive and emerging technologies. Kavya is the founder of the non-profit XR Safety Initiative (XRSI). XRSI is the first global effort to promote privacy, security, ethics, and develop standards and guidelines for Virtual Reality, Augmented Reality, and Mixed Reality (VR/AR/MR), collectively known as XR. Kavya is constantly exploring new technologies to solve current cybersecurity challenges. Quotes:  "Money, money, money. How much money [are] you going to make? I was so put off. No, it's not about money. I really just want to learn."  "What would you become when you grow up? I would be a D.I.G. (Deputy Inspector General)." "This country needs me. This world needs me." "You owe it to yourself to explore this little itch, and figure out whether this is your passion or not."  "You will inevitably make (sometimes) bad decisions." "Technical support IS security."  "I don't think anyone read that [report], but then it gave me some satisfaction that this is awesome. I can actually take what I'm learning and apply it to the job."  "Believe in yourself. Not just for information security."   Links:  Kavya Pearlman - https://twitter.com/KavyaPearlman XRSI - https://www.xrsi.org/ Caroline Wong - https://twitter.com/carolinewmwong Steve Hunt [22:17] - https://twitter.com/Steve_Hunt  Getting Into Infosec:  Breaking IN: A Practical Guide to Starting a Career in Information Security: https://www.amazon.com/dp/B07N15GTPC/ T-Shirts, Mugs, and more: https://gettingintoinfosec.com/shop/ Stay in touch and sign up for sneak peeks, updates, and commentary: https://pages.gettingintoinfosec.com/subscribe See omnystudio.com/listener for privacy information.

Kavya Pearlman is an award-winning cybersecurity professional with a deep interest in immersive and emerging technologies. Kavya is the founder of the non-profit XR Safety Initiative (XRSI). XRSI is the first global effort to promote privacy, security, ethics, and develop standards and guidelines for Virtual Reality, Augmented Reality, and Mixed Reality (VR/AR/MR), collectively known as XR. Kavya is constantly exploring new technologies to solve current cybersecurity challenges. Quotes: <ul> <li>"Money, money, money. How much money [are] you going to make? I was so put off. No, it's not about money. I really just want to learn." </li> <li>"What would you become when you grow up? I would be a D.I.G. (Deputy Inspector General)."</li> <li>"This country needs me. This world needs me."</li> <li>"You owe it to yourself to explore this little itch, and figure out whether this is your passion or not." </li> <li>"You will inevitably make (sometimes) bad decisions."</li> <li>"Technical support IS security." </li> <li>"I don't think anyone read that [report], but then it gave me some satisfaction that this is awesome. I can actually take what I'm learning and apply it to the job." </li> <li>"Believe in yourself. Not just for information security." </li> </ul> Links: <ul> <li>Kavya Pearlman - <a href="https://twitter.com/KavyaPearlman" rel="nofollow" target="_blank">https://twitter.com/KavyaPearlman</a></li> <li>XRSI - <a href="https://www.xrsi.org/" rel="nofollow" target="_blank">https://www.xrsi.org/</a></li> <li>Caroline Wong - <a href="https://twitter.com/carolinewmwong" rel="nofollow" target="_blank">https://twitter.com/carolinewmwong</a></li> <li>Steve Hunt [22:17] - <a href="https://twitter.com/Steve_Hunt" rel="nofollow" target="_blank">https://twitter.com/Steve_Hunt</a></li> </ul> Getting Into Infosec: <ul> <li>Breaking IN: A Practical Guide to Starting a Career in Information Security: <a href="https://www.amazon.com/dp/B07N15GTPC/%5C%5D(https://www.amazon.com/dp/B07N15GTPC/)" rel="nofollow" target="_blank">https://www.amazon.com/dp/B07N15GTPC/</a></li> <li>T-Shirts, Mugs, and more: <a href="https://gettingintoinfosec.com/shop/%5C%5D(https://gettingintoinfosec.com/shop/)" rel="nofollow" target="_blank">https://gettingintoinfosec.com/shop/</a></li> <li>Stay in touch and sign up for sneak peeks, updates, and commentary: <a href="https://pages.gettingintoinfosec.com/subscribe%5C%5D(https://pages.gettingintoinfosec.com/subscribe)" rel="nofollow" target="_blank">https://pages.gettingintoinfosec.com/subscribe</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Kavya Pearlman - From Hairstylist to CISO to XR Superhero

Robin Stuart

Robin Stuart is a debut author in cybercrime fiction with a short story called "SegFault" in the Sisters in Crime NorCal anthology Fault Lines, which is due in early 2019!!! Notes  Wrote her first full-length mystery in the mid-'90s! Pitching is basically a job interview Honing your pitch You only get one shot at that first impression She has a backlog of stories to tell... Stay Tuned!!! (So Excited!)  Links  The New York Pitch Fest: http://newyorkpitchconference.com/ Mystery Writers: https://mysterywriters.org/ Sister in Crime Northern California Chapter: http://www.sincnorcal.org/ Paula Munier, Robin's Literary Agent: http://talcottnotch.net/index.php/agents/paula-munier Robin Stuart Full Interview: https://gettingintoinfosec/robin-stuart-from-paralegal-to-malware-researcher-and-cyber-crime-author See omnystudio.com/listener for privacy information.

Robin Stuart is a debut author in cybercrime fiction with a short story called "SegFault" in the Sisters in Crime NorCal anthology <a href="http://www.sincnorcal.org/wp/faultlines/" rel="nofollow" target="_blank">Fault Lines</a>, which is due in early 2019!!! Notes <ul> <li>Wrote her first full-length mystery in the mid-'90s!</li> <li>Pitching is basically a job interview</li> <li>Honing your pitch</li> <li>You only get one shot at that first impression</li> <li>She has a backlog of stories to tell... Stay Tuned!!! (So Excited!)</li> </ul> Links <ul> <li><a href="http://newyorkpitchconference.com/" rel="nofollow" target="_blank"></a><a href="http://newyorkpitchconference.com/" rel="nofollow" target="_blank">The New York Pitch Fest:</a><a href="http://newyorkpitchconference.com/" rel="nofollow" target="_blank"> http://newyorkpitchconference.com/</a></li> <li><a href="https://mysterywriters.org/" rel="nofollow" target="_blank">Mystery Writers</a>: <a href="https://mysterywriters.org/" rel="nofollow" target="_blank">https://mysterywriters.org/</a></li> <li><a href="http://www.sincnorcal.org/" rel="nofollow" target="_blank"></a><a href="http://www.sincnorcal.org/" rel="nofollow" target="_blank">Sister in Crime Northern California Chapter: </a><a href="http://www.sincnorcal.org/" rel="nofollow" target="_blank">http://www.sincnorcal.org/</a></li> <li><a href="http://talcottnotch.net/index.php/agents/paula-munier" rel="nofollow" target="_blank">Paula Munier</a>, Robin's Literary Agent: <a href="http://talcottnotch.net/index.php/agents/paula-munier" rel="nofollow" target="_blank">http://talcottnotch.net/index.php/agents/paula-munier</a></li> <li>Robin Stuart Full Interview: <a href="https://gettingintoinfosec/robin-stuart-from-paralegal-to-malware-researcher-and-cyber-crime-author" rel="nofollow" target="_blank">https://gettingintoinfosec/robin-stuart-from-paralegal-to-malware-researcher-and-cyber-crime-author</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

BONUS: Robin Stuart - Road to Becoming a Cyber Crime Author

These are quick hallway conversations with recent graduates discussing the difficulties they've faced in their job search. I did not know any of these people before interviewing, and it's the first time I'm asking them these questions. This was recorded at RSA Conference 2020.Getting Into Infosec:Breaking IN: A Practical Guide to Starting a Career in Information Security: https://www.amazon.com/dp/B07N15GTPC/T-Shirts, Mugs, and more: https://gettingintoinfosec.com/shop/Sign up for sneak peaks, updates, and commentary: https://pages.gettingintoinfosec.com/subscribeSee omnystudio.com/listener for privacy information.

These are quick hallway conversations with recent graduates discussing the difficulties they've faced in their job search. I did not know any of these people before interviewing, and it's the first time I'm asking them these questions. This was recorded at RSA Conference 2020.Getting Into Infosec:<ul><li>Breaking IN: A Practical Guide to Starting a Career in Information Security: <a href="https://www.amazon.com/dp/B07N15GTPC/" rel="nofollow" target="_blank">https://www.amazon.com/dp/B07N15GTPC/</a></li><li>T-Shirts, Mugs, and more: <a href="https://gettingintoinfosec.com/shop/" rel="nofollow" target="_blank">https://gettingintoinfosec.com/shop/</a></li><li>Sign up for sneak peaks, updates, and commentary: <a href="https://pages.gettingintoinfosec.com/subscribe" rel="nofollow" target="_blank">https://pages.gettingintoinfosec.com/subscribe</a></li></ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Bonus - Cyber Security Job Search Frustrations (Zoe)

These are quick hallway conversations with recent graduates discussing the difficulties they've faced in their job search. I did not know any of these people before interviewing, and it's the first time I'm asking them these questions. This was recorded at RSA Conference 2020. Getting Into Infosec:  Breaking IN: A Practical Guide to Starting a Career in Information Security: https://www.amazon.com/dp/B07N15GTPC/ T-Shirts, Mugs, and more: https://gettingintoinfosec.com/shop/ Sign up for sneak peeks, updates, and commentary: https://pages.gettingintoinfosec.com/subscribe See omnystudio.com/listener for privacy information.

These are quick hallway conversations with recent graduates discussing the difficulties they've faced in their job search. I did not know any of these people before interviewing, and it's the first time I'm asking them these questions. This was recorded at RSA Conference 2020. Getting Into Infosec: <ul> <li>Breaking IN: A Practical Guide to Starting a Career in Information Security: <a href="https://www.amazon.com/dp/B07N15GTPC/" rel="nofollow" target="_blank">https://www.amazon.com/dp/B07N15GTPC/</a></li> <li>T-Shirts, Mugs, and more: <a href="https://gettingintoinfosec.com/shop/" rel="nofollow" target="_blank">https://gettingintoinfosec.com/shop/</a></li> <li>Sign up for sneak peeks, updates, and commentary: <a href="https://pages.gettingintoinfosec.com/subscribe" rel="nofollow" target="_blank">https://pages.gettingintoinfosec.com/subscribe</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Bonus - Cyber Security Job Search Frustrations (Jayesh)

Nick Vissari

Nick Vissari went from being an engineering dropout (he didn't like creative writing) to a tech consultant to a math tutor. His penchant for fixing things homed him back into tech, where he is now responsible for security in a large school district. He recently went back to school and received his cybersecurity degree as well. Notes  At 10-years-old, his Dad had problems putting the computer together, so he helped his dad Family never stifled any inquisitiveness he had Started as a math tutor at the school system How he initially had the wrong attitude in security  Quotes:  "Once you get into a position somewhere, do whatever you can to make yourself invaluable. Find the things people don't want to do and do them. The hard problems are the ones most rewarding."  "If you're not automating right now, it's probably because you have more resources than you know what to do with."  "There are a lot of people that are security professionals, but they really don’t know about how a system works." "Just got to have that passion for wanting to learn and you can definitely jump into security." "My grandmother always said: 'Those who don't make mistakes, don't do much.' So get out there a make a bunch of mistakes." "Don't be that guy that says 'No' to everything."  Links  Nick on Twitter: https://twitter.com/nickadam sslstrip by Moxie: https://github.com/moxie0/sslstrip Firesheep plugin: https://en.wikipedia.org/wiki/Firesheep  Getting Into Infosec  Checkout My Book: Breaking IN: A Practical Guide to Starting a Career in Information Security: https://www.amazon.com/dp/B07N15GTPC/ T-Shirts, Mugs, and more: https://gettingintoinfosec.com/shop/ Sign up for sneak peeks, updates, and commentary: https://pages.gettingintoinfosec.com/subscribe See omnystudio.com/listener for privacy information.

Nick Vissari went from being an engineering dropout (he didn't like creative writing) to a tech consultant to a math tutor. His penchant for fixing things homed him back into tech, where he is now responsible for security in a large school district. He recently went back to school and received his cybersecurity degree as well. Notes <ul> <li>At 10-years-old, his Dad had problems putting the computer together, so he helped his dad</li> <li>Family never stifled any inquisitiveness he had</li> <li>Started as a math tutor at the school system</li> <li>How he initially had the wrong attitude in security</li> </ul> Quotes: <ul> <li>"Once you get into a position somewhere, do whatever you can to make yourself invaluable. Find the things people don't want to do and do them. The hard problems are the ones most rewarding." </li> <li>"If you're not automating right now, it's probably because you have more resources than you know what to do with." </li> <li>"There are a lot of people that are security professionals, but they really don’t know about how a system works."</li> <li>"Just got to have that passion for wanting to learn and you can definitely jump into security."</li> <li>"My grandmother always said: 'Those who don't make mistakes, don't do much.' So get out there a make a bunch of mistakes."</li> <li>"Don't be that guy that says 'No' to everything."</li> </ul> Links <ul> <li>Nick on Twitter: <a href="https://twitter.com/nickadam" rel="nofollow" target="_blank">https://twitter.com/nickadam</a></li> <li>sslstrip by Moxie: <a href="https://github.com/moxie0/sslstrip" rel="nofollow" target="_blank">https://github.com/moxie0/sslstrip</a></li> <li>Firesheep plugin: <a href="https://en.wikipedia.org/wiki/Firesheep" rel="nofollow" target="_blank">https://en.wikipedia.org/wiki/Firesheep</a></li> </ul> Getting Into Infosec <ul> <li>Checkout My Book: Breaking IN: A Practical Guide to Starting a Career in Information Security: <a href="https://www.amazon.com/dp/B07N15GTPC/" rel="nofollow" target="_blank">https://www.amazon.com/dp/B07N15GTPC/</a></li> <li>T-Shirts, Mugs, and more: <a href="https://gettingintoinfosec.com/shop/" rel="nofollow" target="_blank">https://gettingintoinfosec.com/shop/</a></li> <li>Sign up for sneak peeks, updates, and commentary: <a href="https://pages.gettingintoinfosec.com/subscribe" rel="nofollow" target="_blank">https://pages.gettingintoinfosec.com/subscribe</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Nick Vissari - Engineering Dropout to Math Tutor to Security Architect/Engineer

Tanya Janca

BIO Tanya Janca, also known as SheHacksPurple, is the author of ‘Alice and Bob Learn Application Security.’ She is also the founder of We Hack Purple, an online learning academy, community, and podcast that revolves around teaching everyone to create secure software. Tanya has been coding and working in IT for over twenty years, won numerous awards, and has been everywhere from startups to public service to tech giants (Microsoft, Adobe, &amp; Nokia). She has worn many hats: startup founder, pentester, CISO, AppSec Engineer, and software developer. She is an award-winning public speaker, active blogger &amp; streamer and has delivered hundreds of talks and trainings on 6 continents. She values diversity, inclusion, and kindness, which shines through in her countless initiatives. Founder: We Hack Purple (Academy, Community, and Podcast), WoSEC International (Women of Security), OWASP DevSlop, OWASP Victoria, #CyberMentoringMonday Notes  Part of security is teaching security Started in software development, then starting meeting hackers, and decided to switch to security. Tanya is extremely scholastically inclined She comes from a family full of women computer scientists, technologists, and mathematicians! Her aunt was the FIRST to graduate in CS from Ontario. Her mother was a mathematician. She had four uncles in computer science.    Tanya's Quick List For Getting Into Infosec  Responsibility of a mentee: [30:29] Have energy and time Respect your mentor's time Need to have already looked for the answer online before you ever ask them for something They are not a free consultant; you shouldn't ask them to do your work You shouldn't stand them up for meetings Recognize and have gratitude for the fact that this person has a crap-ton of knowledge in their brain that they're sharing with you for free. They're taking the time out. You're not their daughter or son. You're not their friend. You're a person in their industry, and they're trying to pay it forward. You want to actually do the exercises that your mentor gives you Choose your mentor wisely Do not expect your mentor to find you a job    Quotes  "We're graduating people who don't know how to make secure software, but they do know how to make software!  So that ends up being insecure software." [4:57] "So if I [were] going to teach a software security course at a university, they would pay me as an adjunct professor, and they would pay me almost nothing. It would almost be equivalent to volunteer work." [5:35] "I thought I really wanted to be a penetration tester until I discovered that there is this weird spot… in between red team and blue team." [10:17] "A lot of penetration testers get a little depressed."[11:07] "People just don't know how many super awesome cool things there are out there!" [15:11] "The people I liked the best are the people in my computer science class." [22:24] "Honestly, I just smoked a lot of weed and just showed up and would ace things." [22:12] "You don't have to spend money at the beginning necessarily." [31:58] "Which certification should I get so that I can be a good pentester?" [31:34] "I don't know enough to be a mentor." [31:50]  Links  Tanya Online Personal Site: https://dev.to/shehackspurple Twitter: https://twitter.com/shehackspurple Pushing Left Series: https://code.likeagirl.io/pushing-left-like-a-boss-part-1-80f1f007da95   NICE Framework: https://www.nist.gov/itl/applied-cybersecurity/nice/nice-cybersecurity-workforce-framework-resource-center OWASP: https://owasp.org/ WoSec: https://wearetechwomen.com/wosec-women-of-security/ Franziska Bühler https://twitter.com/bufrasch  Getting Into Infosec  Breaking IN: A Practical Guide to Starting a Career in Information Security: https://www.amazon.com/dp/B07N15GTPC/ T-Shirts, Mugs, and more: https://gettingintoinfosec.com/shop/ Sign up for sneak peeks, updates, and commentary: https://pages.gettingintoinfosec.com/subscribe See omnystudio.com/listener for privacy information.

BIO Tanya Janca, also known as SheHacksPurple, is the author of ‘Alice and Bob Learn Application Security.’ She is also the founder of We Hack Purple, an online learning academy, community, and podcast that revolves around teaching everyone to create secure software. Tanya has been coding and working in IT for over twenty years, won numerous awards, and has been everywhere from startups to public service to tech giants (Microsoft, Adobe, &amp; Nokia). She has worn many hats: startup founder, pentester, CISO, AppSec Engineer, and software developer. She is an award-winning public speaker, active blogger &amp; streamer and has delivered hundreds of talks and trainings on 6 continents. She values diversity, inclusion, and kindness, which shines through in her countless initiatives. Founder: We Hack Purple (Academy, Community, and Podcast), WoSEC International (Women of Security), OWASP DevSlop, OWASP Victoria, #CyberMentoringMonday Notes <ul> <li>Part of security is teaching security</li> <li>Started in software development, then starting meeting hackers, and decided to switch to security.</li> <li>Tanya is extremely scholastically inclined</li> <li>She comes from a family full of women computer scientists, technologists, and mathematicians! <ul> <li>Her aunt was the FIRST to graduate in CS from Ontario.</li> <li>Her mother was a mathematician.</li> <li>She had four uncles in computer science.</li> </ul> </li> </ul> Tanya's Quick List For Getting Into Infosec <ul> <li>Responsibility of a mentee: [30:29] <ul> <li>Have energy and time</li> <li>Respect your mentor's time</li> <li>Need to have already looked for the answer online before you ever ask them for something</li> <li>They are not a free consultant; you shouldn't ask them to do your work</li> <li>You shouldn't stand them up for meetings</li> <li>Recognize and have gratitude for the fact that this person has a crap-ton of knowledge in their brain that they're sharing with you for free. They're taking the time out. You're not their daughter or son. You're not their friend. You're a person in their industry, and they're trying to pay it forward.</li> <li>You want to actually do the exercises that your mentor gives you</li> <li>Choose your mentor wisely</li> <li>Do not expect your mentor to find you a job</li> </ul> </li> </ul> Quotes <ul> <li>"We're graduating people who don't know how to make secure software, but they do know how to make software!  So that ends up being insecure software." [4:57]</li> <li>"So if I [were] going to teach a software security course at a university, they would pay me as an adjunct professor, and they would pay me almost nothing. It would almost be equivalent to volunteer work." [5:35]</li> <li>"I thought I really wanted to be a penetration tester until I discovered that there is this weird spot… in between red team and blue team." [10:17]</li> <li>"A lot of penetration testers get a little depressed."[11:07]</li> <li>"People just don't know how many super awesome cool things there are out there!" [15:11]</li> <li>"The people I liked the best are the people in my computer science class." [22:24]</li> <li>"Honestly, I just smoked a lot of weed and just showed up and would ace things." [22:12]</li> <li>"You don't have to spend money at the beginning necessarily." [31:58]</li> <li>"Which certification should I get so that I can be a good pentester?" [31:34]</li> <li>"I don't know enough to be a mentor." [31:50]</li> </ul> Links <ul> <li>Tanya Online <ul> <li>Personal Site: <a href="https://dev.to/shehackspurple" rel="nofollow" target="_blank">https://dev.to/shehackspurple</a></li> <li>Twitter: <a href="https://twitter.com/shehackspurple" rel="nofollow" target="_blank">https://twitter.com/shehackspurple</a></li> <li>Pushing Left Series: <a href="https://code.likeagirl.io/pushing-left-like-a-boss-part-1-80f1f007da95" rel="nofollow" target="_blank">https://code.likeagirl.io/pushing-left-like-a-boss-part-1-80f1f007da95</a></li> </ul> </li> <li>NICE Framework: <a href="https://www.nist.gov/itl/applied-cybersecurity/nice/nice-cybersecurity-workforce-framework-resource-center" rel="nofollow" target="_blank">https://www.nist.gov/itl/applied-cybersecurity/nice/nice-cybersecurity-workforce-framework-resource-center</a></li> <li>OWASP: <a href="https://owasp.org/" rel="nofollow" target="_blank">https://owasp.org/</a></li> <li>WoSec: <a href="https://wearetechwomen.com/wosec-women-of-security/" rel="nofollow" target="_blank">https://wearetechwomen.com/wosec-women-of-security/</a></li> <li>Franziska Bühler <a href="https://twitter.com/bufrasch" rel="nofollow" target="_blank">https://twitter.com/bufrasch</a></li> </ul> Getting Into Infosec <ul> <li>Breaking IN: A Practical Guide to Starting a Career in Information Security: <a href="https://www.amazon.com/dp/B07N15GTPC/" rel="nofollow" target="_blank">https://www.amazon.com/dp/B07N15GTPC/</a></li> <li>T-Shirts, Mugs, and more: <a href="https://gettingintoinfosec.com/shop/" rel="nofollow" target="_blank">https://gettingintoinfosec.com/shop/</a></li> <li>Sign up for sneak peeks, updates, and commentary: <a href="https://pages.gettingintoinfosec.com/subscribe" rel="nofollow" target="_blank">https://pages.gettingintoinfosec.com/subscribe</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Tanya Janca - From Insecure Developer to Appsec, Diversity/Inclusion Advocate, and Mentor

We are in the middle of a worldwide pandemic (COVID-19), a recession is here, a depression might be coming, and everyone is remote! Everything has changed. What can you do? How can you find a job in these crazy times? What are the challenges? How can you make yourself valuable? What's going through the company or hiring manager's mind?Please share or leave an awesome review if you found this helpful.See omnystudio.com/listener for privacy information.

We are in the middle of a worldwide pandemic (COVID-19), a recession is here, a depression might be coming, and everyone is remote! Everything has changed. What can you do? How can you find a job in these crazy times? What are the challenges? How can you make yourself valuable? What's going through the company or hiring manager's mind?Please share or leave an awesome review if you found this helpful.See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

BONUS - Pandemic and The Coming Recession / Depression

David Zeichick

So as I was at RSAC, I was trying to keep an eye out for those looking to get into the field. RSA is not usually the place for that, but I saw the NetWars tournament and figured that might be a good place to start. On my way there, I met David Zeichick, who had "College Day" on his badge. Intrigued, I asked about "College Day," and he told me all about it. I sat down with him for an impromptu interview on the topic. Links  David on Twitter: https://twitter.com/dzeichick  Getting Into Infosec:  Breaking IN: A Practical Guide to Starting a Career in Information Security: https://www.amazon.com/dp/B07N15GTPC/ T-Shirts, Mugs, and more: https://gettingintoinfosec.com/shop/ Sign up for sneak peeks, updates, and commentary: https://pages.gettingintoinfosec.com/subscribe See omnystudio.com/listener for privacy information.

So as I was at RSAC, I was trying to keep an eye out for those looking to get into the field. RSA is not usually the place for that, but I saw the NetWars tournament and figured that might be a good place to start. On my way there, I met David Zeichick, who had "College Day" on his badge. Intrigued, I asked about "College Day," and he told me all about it. I sat down with him for an impromptu interview on the topic. Links <ul> <li>David on Twitter: <a href="https://twitter.com/dzeichick" rel="nofollow" target="_blank">https://twitter.com/dzeichick</a></li> </ul> Getting Into Infosec: <ul> <li>Breaking IN: A Practical Guide to Starting a Career in Information Security: <a href="https://www.amazon.com/dp/B07N15GTPC/" rel="nofollow" target="_blank">https://www.amazon.com/dp/B07N15GTPC/</a></li> <li>T-Shirts, Mugs, and more: <a href="https://gettingintoinfosec.com/shop/" rel="nofollow" target="_blank">https://gettingintoinfosec.com/shop/</a></li> <li>Sign up for sneak peeks, updates, and commentary: <a href="https://pages.gettingintoinfosec.com/subscribe" rel="nofollow" target="_blank">https://pages.gettingintoinfosec.com/subscribe</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Bonus - David Zeichick - Cybersecurity College Professor

Clay Wells

Clay Wells has been living in kernel/userland since Red Hat 4.0 Colgate. Worklife has primarily been in academia and has included programming, system administration, and information security. He's a point of contact for the DC215 group and one of the Blue Team Village coordinators at DEF CON. He also created unofficial CTF challenges for local hacker cons and organizers for the first annual WOPR Summit this March 2019 in Atlantic City. Clay, a security architect, musician, Defcon Blue Team Village Co-Organizer, and organizer of the first annual WOPR Summit, shares some really insightful tips on making it Information Security, as well as a fascinating recent war story. WOPR Summit is March 1st, 2019, in Atlantic City! Quotes:   "My heart was racing... that was a huge rush, and that's when I was like yea... blue side F*** rocks!!"   "Take a holistic approach to InfoSec, dive into the culture, different cons, music, people...volunteer, get out, get involved."   "Learn a little about everything, then find what really interests you... and go for it!"   "It's great to apt-get stuff... but try compiling a custom Linux kernel."   "I'm a strong believer in embracing that creative side."   "[Blue Team] certainly hasn't been the sexiest infosec job to have... yes, defense is what people want... there's a lot of defense work out there."   Links:  Clay Wells on Twitter: https://twitter.com/ttheveii0x Clay Wells on LinkedIn: https://www.linkedin.com/in/clayball/ Clay Wells Blog: http://www.cwells.org/ WOPR Summit 2019: https://www.woprsummit.org/ WOPR Summit Sponsorhip Prospectus: https://static1.squarespace.com/static/5b81b8f745776e48dcfb884d/t/5ba666dbf4e1fc68321a7a27/1537631964367/wopr-summit-2019-sponsor-prospectus.pdf DEF CON Blue Team Village: https://blueteamvillage.org/ Opensoc by Recon Infosec: https://opensoc.io/ Recon Infosec: https://reconinfosec.com/ BsidesDC: http://bsidesdc.org/ Graylog: https://www.graylog.org/ Kibana: https://www.elastic.co/products/kibana H.O.P.E Conference: https://hope.net/ No Starch Press: https://nostarch.com/ Outro Music by Clay: https://soundcloud.com/clayball/0x41-2-version-b See omnystudio.com/listener for privacy information.

Clay Wells has been living in kernel/userland since Red Hat 4.0 Colgate. Worklife has primarily been in academia and has included programming, system administration, and information security. He's a point of contact for the DC215 group and one of the Blue Team Village coordinators at DEF CON. He also created unofficial CTF challenges for local hacker cons and organizers for the first annual WOPR Summit this March 2019 in Atlantic City. Clay, a security architect, musician, Defcon Blue Team Village Co-Organizer, and organizer of the first annual WOPR Summit, shares some really insightful tips on making it Information Security, as well as a fascinating recent war story. <a href="https://www.woprsummit.org/" rel="nofollow" target="_blank">WOPR Summit</a> is March 1st, 2019, in Atlantic City! Quotes: <ul> <li> "My heart was racing... that was a huge rush, and that's when I was like yea... blue side F*** rocks!!" </li> <li> "Take a holistic approach to InfoSec, dive into the culture, different cons, music, people...volunteer, get out, get involved." </li> <li> "Learn a little about everything, then find what really interests you... and go for it!" </li> <li> "It's great to apt-get stuff... but try compiling a custom Linux kernel." </li> <li> "I'm a strong believer in embracing that creative side." </li> <li> "[Blue Team] certainly hasn't been the sexiest infosec job to have... yes, defense is what people want... there's a lot of defense work out there." </li> </ul> Links: <ul> <li>Clay Wells on Twitter: <a href="https://twitter.com/ttheveii0x" rel="nofollow" target="_blank">https://twitter.com/ttheveii0x</a></li> <li>Clay Wells on LinkedIn: <a href="https://www.linkedin.com/in/clayball/" rel="nofollow" target="_blank">https://www.linkedin.com/in/clayball/</a></li> <li>Clay Wells Blog: <a href="http://www.cwells.org/" rel="nofollow" target="_blank">http://www.cwells.org/</a></li> <li><a href="https://www.woprsummit.org/" rel="nofollow" target="_blank"></a><a href="https://www.woprsummit.org/" rel="nofollow" target="_blank">WOPR Summit 2019: </a><a href="https://www.woprsummit.org/" rel="nofollow" target="_blank">https://www.woprsummit.org/</a></li> <li><a href="https://static1.squarespace.com/static/5b81b8f745776e48dcfb884d/t/5ba666dbf4e1fc68321a7a27/1537631964367/wopr-summit-2019-sponsor-prospectus.pdf" rel="nofollow" target="_blank">WOPR Summit Sponsorhip Prospectus</a>: <a href="https://static1.squarespace.com/static/5b81b8f745776e48dcfb884d/t/5ba666dbf4e1fc68321a7a27/1537631964367/wopr-summit-2019-sponsor-prospectus.pdf" rel="nofollow" target="_blank">https://static1.squarespace.com/static/5b81b8f745776e48dcfb884d/t/5ba666dbf4e1fc68321a7a27/1537631964367/wopr-summit-2019-sponsor-prospectus.pdf</a></li> <li><a href="https://blueteamvillage.org/" rel="nofollow" target="_blank">DEF CON Blue Team Village</a>: <a href="https://blueteamvillage.org/" rel="nofollow" target="_blank">https://blueteamvillage.org/</a></li> <li><a href="https://opensoc.io/" rel="nofollow" target="_blank">Opensoc</a> by <a href="https://reconinfosec.com/" rel="nofollow" target="_blank">Recon Infosec:</a> <a href="https://opensoc.io/" rel="nofollow" target="_blank">https://opensoc.io/</a></li> <li>Recon Infosec: <a href="https://reconinfosec.com/" rel="nofollow" target="_blank">https://reconinfosec.com/</a></li> <li><a href="http://bsidesdc.org/" rel="nofollow" target="_blank">BsidesDC</a>: <a href="http://bsidesdc.org/" rel="nofollow" target="_blank">http://bsidesdc.org/</a></li> <li><a href="https://www.graylog.org/" rel="nofollow" target="_blank">Graylog</a>: <a href="https://www.graylog.org/" rel="nofollow" target="_blank">https://www.graylog.org/</a></li> <li><a href="https://www.elastic.co/products/kibana" rel="nofollow" target="_blank">Kibana</a>: <a href="https://www.elastic.co/products/kibana" rel="nofollow" target="_blank">https://www.elastic.co/products/kibana</a></li> <li><a href="https://hope.net/" rel="nofollow" target="_blank">H.O.P.E Conference</a>: <a href="https://hope.net/" rel="nofollow" target="_blank">https://hope.net/</a></li> <li><a href="https://nostarch.com/" rel="nofollow" target="_blank">No Starch Press</a>: <a href="https://nostarch.com/" rel="nofollow" target="_blank">https://nostarch.com/</a></li> <li><a href="https://soundcloud.com/clayball/0x41-2-version-b" rel="nofollow" target="_blank">Outro Music by Clay</a>: <a href="https://soundcloud.com/clayball/0x41-2-version-b" rel="nofollow" target="_blank">https://soundcloud.com/clayball/0x41-2-version-b</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Clay Wells - From SysAdmin to Security Architect to Con Organizer!

Rob Carson

Speaker Bio Rob Carson, the founder of Semper Sec, knows how to simplify the problem and deliver solutions. His clients base includes:  Fortune 200 Companies US Government Contractors State and Local Governments Fuel Retailers Software and hardware manufacturers  His distinguished career includes service as a Marine Corps Infantry Officer, as well as leading roles in IT and Security. Before devoting his work full-time to facilitating his client's success, he built highly successful information security programs for ISO 27001:2005/2013, PCI, HIPAA, NIST 800-171, GDPR. He also volunteers his time as the Chief Security Officer for BSIDES Las Vegas, a non-profit educational organization designed to advance the body of Information Security. Episode Highlights  Matt reveals how much he made when he got out of the Marines Matt hilariously talks about the nuances he had to deal with when going to the private sector: Not saying "Sir" and "Madame" Figuring out what to wear How being early is too early  Quotes  "I wasn't getting shot at... I was working in climate control, you know, so people be all stressed out, and I was like, 'Well, no one's going to die.'" "I like to call myself a 'lessons learned enthusiast.'" "The hardest job you'll ever get in infosec is that first step in." "A first sergeant told me your hobbies should reflect part of your career." "You can be outside the box, but you need to stay inside the room."  Links  Sempersec: https://sempersec.com/ Rob Carson's LinkedIN Profile: https://www.linkedin.com/in/robcarson1/ See omnystudio.com/listener for privacy information.

Speaker Bio Rob Carson, the founder of Semper Sec, knows how to simplify the problem and deliver solutions. His clients base includes: <ul> <li>Fortune 200 Companies</li> <li>US Government Contractors</li> <li>State and Local Governments</li> <li>Fuel Retailers</li> <li>Software and hardware manufacturers</li> </ul> His distinguished career includes service as a Marine Corps Infantry Officer, as well as leading roles in IT and Security. Before devoting his work full-time to facilitating his client's success, he built highly successful information security programs for ISO 27001:2005/2013, PCI, HIPAA, NIST 800-171, GDPR. He also volunteers his time as the Chief Security Officer for BSIDES Las Vegas, a non-profit educational organization designed to advance the body of Information Security. Episode Highlights <ul> <li>Matt reveals how much he made when he got out of the Marines</li> <li>Matt hilariously talks about the nuances he had to deal with when going to the private sector:</li> <li>Not saying "Sir" and "Madame"</li> <li>Figuring out what to wear</li> <li>How being early is too early</li> </ul> Quotes <ul> <li>"I wasn't getting shot at... I was working in climate control, you know, so people be all stressed out, and I was like, 'Well, no one's going to die.'"</li> <li>"I like to call myself a 'lessons learned enthusiast.'"</li> <li>"The hardest job you'll ever get in infosec is that first step in."</li> <li>"A first sergeant told me your hobbies should reflect part of your career."</li> <li>"You can be outside the box, but you need to stay inside the room."</li> </ul> Links <ul> <li>Sempersec: <a href="https://sempersec.com/" rel="nofollow" target="_blank">https://sempersec.com/</a></li> <li>Rob Carson's LinkedIN Profile: <a href="https://www.linkedin.com/in/robcarson1/" rel="nofollow" target="_blank">https://www.linkedin.com/in/robcarson1/</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Rob Carson - From USMC Infantry Officer to Information Security Officer

Leron Gray

Leron Gray is a man of many talents. Although he didn't really get into infosec until much later in life, he always had a creative side. He now finds himself as a pentester working from home and a nerdcore rapper producing amazing beats! BIO Leron is a penetration tester and a ten-year Navy veteran with four years of experience as a Cryptologic Technician (Networks), focusing primarily on offensive cyber operations. He holds a Bachelor's degree from Dakota State University in Cyber Operations. With a passion for Python, he loves automating tedious daily routine tasks for efficiency and considers himself to always be in a position to learn more and pass on knowledge. He always enjoys competing in as many Capture-the-Flag events as possible and also often performs as a nerdcore rapper. Leron currently holds eCPPT, eWPT, GPYC, GPEN, GAWN, GCFE, and GICSP certifications. He also maintains a blog and maintains an active Twitter discussing music, information security, and wrestling. Notes   Went to a high school that made you choose majors   Grew up poor, was not allowed to go out much   Technological learning came from school   Didn't really get into computers until he was 25   Has been in music since Jr. High School (Marching band, jazz band, and concert band... all the bands)   Networking is the biggest thing that Leron says would help   Leron offers his passionate opinion on "aptitude" (it's a pet peeve of his)   Quotes   "I learned a lot... I made sure not to waste any opportunity for learning."   "Job searching, in general, is a pain."   "I don't think I would be where I am right now if I hadn't gone out and made that effort."   "One of the big deals that people had were degrees. I wasn't really sure why; I have 10 years of IT/Cyber experience."   "It turned out the company no longer owned that server. Their DNS was still pointing to it though."   "I took Java in high school and was really bad at it and I found out everyone is bad at Java, so it doesn't really matter."   "It's so much easier to learn when you have a problem to fix."   "It's not even just information security that learning Python could help... it could be anything you do... often enough to warrant not to do it [manually]."   "Nobody does a CTF and expects not to learn something by the time they leave."   "Job searches shouldn't be like that: they should be based on your merit."   "Maybe the person can't get OSCP, but maybe they have the skills or knowledge."   "The idea of aptitude... raises too many borders."   Links   Leron on Twitter: https://twitter.com/mcohmi   Leron's Blog: https://daddycocoaman.dev/   Leron's GitHub: https://github.com/daddycocoaman   Class that Leron Is Mentoring: https://www.sans.org/mentor/class/sec573-seattle-19mar2019-leron-gray   Visual Studio Code: https://code.visualstudio.com/   PyCharm: https://www.jetbrains.com/pycharm/   IPython Notebook: https://ipython.org/notebook.html   San Antonio's Hackers Association: https://satxhackers.org/wp/   MC OHM-I: https://www.mcohmi.com  Intro Music: Cascadia by Trash80 - https://trash80.com/#/content/133/weeklybeats-2012-week5 (Released under Creative Commons) Outro Music: https://soundcloud.com/mc-ohm-i/domain  Getting Into Infosec   Twitter: https://twitter.com/coffeewithayman   YouTube: https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A   Book: https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/  See omnystudio.com/listener for privacy information.

Leron Gray is a man of many talents. Although he didn't really get into infosec until much later in life, he always had a creative side. He now finds himself as a pentester working from home and a nerdcore rapper producing amazing beats! BIO Leron is a penetration tester and a ten-year Navy veteran with four years of experience as a Cryptologic Technician (Networks), focusing primarily on offensive cyber operations. He holds a Bachelor's degree from Dakota State University in Cyber Operations. With a passion for Python, he loves automating tedious daily routine tasks for efficiency and considers himself to always be in a position to learn more and pass on knowledge. He always enjoys competing in as many Capture-the-Flag events as possible and also often performs as a nerdcore rapper. Leron currently holds eCPPT, eWPT, GPYC, GPEN, GAWN, GCFE, and GICSP certifications. He also maintains a <a href="https://daddycocoaman.dev/" rel="nofollow" target="_blank">blog</a> and maintains an active <a href="https://twitter.com/mcohmi" rel="nofollow" target="_blank">Twitter</a> discussing music, information security, and wrestling. Notes <ul> <li> Went to a high school that made you choose majors </li> <li> Grew up poor, was not allowed to go out much </li> <li> Technological learning came from school </li> <li> Didn't really get into computers until he was 25 </li> <li> Has been in music since Jr. High School (Marching band, jazz band, and concert band... all the bands) </li> <li> Networking is the biggest thing that Leron says would help </li> <li> Leron offers his passionate opinion on "aptitude" (it's a pet peeve of his) </li> </ul> Quotes <ul> <li> "I learned a lot... I made sure not to waste any opportunity for learning." </li> <li> "Job searching, in general, is a pain." </li> <li> "I don't think I would be where I am right now if I hadn't gone out and made that effort." </li> <li> "One of the big deals that people had were degrees. I wasn't really sure why; I have 10 years of IT/Cyber experience." </li> <li> "It turned out the company no longer owned that server. Their DNS was still pointing to it though." </li> <li> "I took Java in high school and was really bad at it and I found out everyone is bad at Java, so it doesn't really matter." </li> <li> "It's so much easier to learn when you have a problem to fix." </li> <li> "It's not even just information security that learning Python could help... it could be anything you do... often enough to warrant not to do it [manually]." </li> <li> "Nobody does a CTF and expects not to learn something by the time they leave." </li> <li> "Job searches shouldn't be like that: they should be based on your merit." </li> <li> "Maybe the person can't get OSCP, but maybe they have the skills or knowledge." </li> <li> "The idea of aptitude... raises too many borders." </li> </ul> Links <ul> <li> Leron on Twitter: <a href="https://twitter.com/mcohmi" rel="nofollow" target="_blank">https://twitter.com/mcohmi</a> </li> <li> Leron's Blog: <a href="https://daddycocoaman.dev/" rel="nofollow" target="_blank">https://daddycocoaman.dev/</a> </li> <li> Leron's GitHub: <a href="https://github.com/daddycocoaman" rel="nofollow" target="_blank">https://github.com/daddycocoaman</a> </li> <li> Class that Leron Is Mentoring: <a href="https://www.sans.org/mentor/class/sec573-seattle-19mar2019-leron-gray" rel="nofollow" target="_blank">https://www.sans.org/mentor/class/sec573-seattle-19mar2019-leron-gray</a> </li> <li> Visual Studio Code: <a href="https://code.visualstudio.com/" rel="nofollow" target="_blank">https://code.visualstudio.com/</a> </li> <li> PyCharm: <a href="https://www.jetbrains.com/pycharm/" rel="nofollow" target="_blank">https://www.jetbrains.com/pycharm/</a> </li> <li> IPython Notebook: <a href="https://ipython.org/notebook.html" rel="nofollow" target="_blank">https://ipython.org/notebook.html</a> </li> <li> San Antonio's Hackers Association: <a href="https://satxhackers.org/wp/" rel="nofollow" target="_blank">https://satxhackers.org/wp/</a> </li> <li> MC OHM-I: <a href="https://www.mcohmi.com" rel="nofollow" target="_blank">https://www.mcohmi.com</a> </li> <li>Intro Music: Cascadia by Trash80 - <a href="https://trash80.com/#/content/133/weeklybeats-2012-week5" rel="nofollow" target="_blank">https://trash80.com/#/content/133/weeklybeats-2012-week5</a> (Released under Creative Commons)</li> <li>Outro Music: <a href="https://soundcloud.com/mc-ohm-i/domain" rel="nofollow" target="_blank">https://soundcloud.com/mc-ohm-i/domain</a></li> </ul> Getting Into Infosec <ul> <li> Twitter: <a href="https://twitter.com/coffeewithayman" rel="nofollow" target="_blank">https://twitter.com/coffeewithayman</a> </li> <li> YouTube: <a href="https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A" rel="nofollow" target="_blank">https://www.youtube.com/channel/UCg6gV_gdfc188HZdN8LUx4A</a> </li> <li> Book: <a href="https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/" rel="nofollow" target="_blank">https://www.amazon.com/Breaking-Step-Step-Starting-Information-ebook/dp/B07N15GTPC/</a> </li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Leron Gray - From Navy E6 to Pentester, SANS Mentor and Nerdcore Rapper!

Elvis Chan

Elvis Chan is a Supervisory Special Agent Elvis Chan, who works cybersecurity matters for the FBI San Francisco Division. We discuss how we got into the FBI, Life in the FBI Cybersecurity Division, and how to get involved. The FBI is always looking for qualified applications for Special Agent and professional staff positions. Please see https://www.fbijobs.gov/ for more details. Notes:  There are three main roles in CyberSecurity at the FBI: Special Agent (Gun Carrying Badge) Intelligence Analyst Computer Scientist   It may be quiet on the outside, but you can bet the FBI is hard at work on the inside. Protection of the recent elections was discussed. The sheer number of people involved in protecting the elections from foreign actors couldn't be enumerated. Both the public sector and private sector are involved. In an incident response, there is often coordination with FBI headquarters and sometimes other 3 letter agencies. FBI San Francisco was the squad of record for investigating the 2014 Yahoo hack. Elvis goes into detail explaining more about Russian Hacking and how the FSB culture works. Placement in the FBI is based on a ranking system.  Quotes:  "There are a LOT of things behind the scenes I can't talk about." "If you see in the news that there is a hack, you can be sure that there is at least one, maybe two, maybe several, office mobilized to figure out what the heck happened." "On a regular day, I would love to just go through my email and have the scheduled meetings I'm gonna have." "Why are the Russians coming after us..." "Whatever happens to you... 'The Need of the Bureau'" "My current job, despite all the paperwork and meeting I don't want to go to is a 10 out of 10!" "People would not believe some of the stuff that we've seen or that we've gone through. They would make the worst movie plot because they would be so unbelievable!"  Links:  FBI Jobs: https://www.fbijobs.gov 2014 Yahoo Hack: https://www.justice.gov/opa/pr/us-charges-russian-fsb-officers-and-their-criminal-conspirators-hacking-yahoo-and-millions FSB: https://en.wikipedia.org/wiki/Federal_Security_Service InfraGard: https://www.infragard.org/ FBI Field Offices: https://www.fbi.gov/contact-us/field-offices See omnystudio.com/listener for privacy information.

Elvis Chan is a Supervisory Special Agent Elvis Chan, who works cybersecurity matters for the FBI San Francisco Division. We discuss how we got into the FBI, Life in the FBI Cybersecurity Division, and how to get involved. The FBI is always looking for qualified applications for Special Agent and professional staff positions. Please see <a href="https://www.fbijobs.gov/" rel="nofollow" target="_blank">https://www.fbijobs.gov/</a> for more details. Notes: <ul> <li>There are three main roles in CyberSecurity at the FBI: <ul> <li>Special Agent (Gun Carrying Badge)</li> <li>Intelligence Analyst</li> <li>Computer Scientist</li> </ul> </li> <li>It may be quiet on the outside, but you can bet the FBI is hard at work on the inside.</li> <li>Protection of the recent elections was discussed. The sheer number of people involved in protecting the elections from foreign actors couldn't be enumerated. Both the public sector and private sector are involved.</li> <li>In an incident response, there is often coordination with FBI headquarters and sometimes other 3 letter agencies.</li> <li>FBI San Francisco was the squad of record for investigating the 2014 Yahoo hack.</li> <li>Elvis goes into detail explaining more about Russian Hacking and how the <a href="https://en.wikipedia.org/wiki/Federal_Security_Service" rel="nofollow" target="_blank">FSB</a> culture works.</li> <li>Placement in the FBI is based on a ranking system.</li> </ul> Quotes: <ul> <li>"There are a LOT of things behind the scenes I can't talk about."</li> <li>"If you see in the news that there is a hack, you can be sure that there is at least one, maybe two, maybe several, office mobilized to figure out what the heck happened."</li> <li>"On a regular day, I would love to just go through my email and have the scheduled meetings I'm gonna have."</li> <li>"Why are the Russians coming after us..."</li> <li>"Whatever happens to you... 'The Need of the Bureau'"</li> <li>"My current job, despite all the paperwork and meeting I don't want to go to is a 10 out of 10!"</li> <li>"People would not believe some of the stuff that we've seen or that we've gone through. They would make the worst movie plot because they would be so unbelievable!"</li> </ul> Links: <ul> <li><a href="https://www.fbijobs.gov" rel="nofollow" target="_blank">FBI Jobs</a>: <a href="https://www.fbijobs.gov" rel="nofollow" target="_blank">https://www.fbijobs.gov</a></li> <li><a href="https://www.justice.gov/opa/pr/us-charges-russian-fsb-officers-and-their-criminal-conspirators-hacking-yahoo-and-millions" rel="nofollow" target="_blank">2014 Yahoo Hack</a>: <a href="https://www.justice.gov/opa/pr/us-charges-russian-fsb-officers-and-their-criminal-conspirators-hacking-yahoo-and-millions" rel="nofollow" target="_blank">https://www.justice.gov/opa/pr/us-charges-russian-fsb-officers-and-their-criminal-conspirators-hacking-yahoo-and-millions</a></li> <li><a href="https://en.wikipedia.org/wiki/Federal_Security_Service" rel="nofollow" target="_blank">FSB</a>: <a href="https://en.wikipedia.org/wiki/Federal_Security_Service" rel="nofollow" target="_blank">https://en.wikipedia.org/wiki/Federal_Security_Service</a></li> <li><a href="https://www.infragard.org/" rel="nofollow" target="_blank">InfraGard</a>: <a href="https://www.infragard.org/" rel="nofollow" target="_blank">https://www.infragard.org/</a></li> <li><a href="https://www.fbi.gov/contact-us/field-offices" rel="nofollow" target="_blank">FBI Field Offices</a>: <a href="https://www.fbi.gov/contact-us/field-offices" rel="nofollow" target="_blank">https://www.fbi.gov/contact-us/field-offices</a></li> </ul>See <a href="https://omnystudio.com/listener" rel="nofollow" target="_blank">omnystudio.com/listener</a> for privacy information.

Elvis Chan - From Making Computer Chips to FBI Supervisory Special Agent!

The best podcast episodes on parenting. Interviewing experts and talking through common issues surrounding parenting. This topic is filled with important lessons and insights for anyone listening. Add episodes you're interested into your queue below!

OwlTail

Best Parenting Podcasts

The best podcast episodes on physical health. Episodes talk about your diet, sleep, exercise and all the things that people do to improve their physical health and live a healthier life. This topic is for everyone, with applications in all of our everyday lives. Add episodes you're interested into your queue below!