MAINSAIL Group’s Post

Yowza... $30-40k for a jr. engineer in Colorado. $60-70k for an analyst role requiring a CISSP or equivalent cert in Florida. Shame on y'all. I've been talking to a number of qualified folks that are in the hunt for IT/sec/dev jobs and trying to encourage, coach, and connect in whatever capacity I have. The two examples above are from conversations last week that I had with two folks I've been trying to help land gainful employment. Granted, this is a sample size of two, but these rates are 30-50% lower than what we were seeing two years ago... and honestly, $30-40k for a jr. engineering job? Really? In Colorado?

I challenge you to list top 4 Skills for #SOC detection engineers other than bellow… I’ll start. 1) Risk Management - Risk Identification, Threat Identification, Assets Ownership, Defense Strategy, Compensatory/Protective Controls, Residual Risk. 2) Software Engineering - Threat Modelling, Software Archtecture, Requirements Management, Use Case Diagrams, Data Flow Diagrams, Agile/Waterfall Development Models, Code Versioning, Testing, Software Quality and Control, Maturity Model. 3) Cyber Threat Intelligence - Attack Vectors, Attack Surfaces, Tatics, Techniques, Procedures, Indicators of Attack, Indicators of Compromise, Course of Actions, Threat Mitigation and Response. 4) Information Asset Core Skill - Hardware, Software Development, Operating Systems, Networking. If you don’t understand those, you can’t defend you business information systems.

No company seems to care about process, security by design, or a coherent security approach. They only care about security tools. I see a ton of job openings for engineers to run tools and no openings for people to architect the security of the entire company. Something is wrong with that picture.

"More teams are going to have to go towards engineering first, they’re going to have to. The environment is changing and the nature of security engineering and security operations are changing. It’s scaling to the point where you can’t hire enough people anymore to do all the work, you have to get smarter about it and engineer for security." - Kenneth Kaye of JupiterOne https://lnkd.in/gFE-XGMQ #SecOps #Terraform #DetectionAsCode #DetectionEngineering

Too many false positives, challenges securing cloud-centric infrastructures, and lean teams... Do these challenges sound familiar? Learn how JupiterOne's security team addressed them with Panther. Here's what the customer had to say: "More teams are going to have to go towards engineering first, they’re going to have to. The environment is changing and the nature of security engineering and security operations are changing. It’s scaling to the point where you can’t hire enough people anymore to do all the work, you have to get smarter about it and engineer for security." Learn more in the JupiterOne customer case study: https://lnkd.in/eCrwCf2e

As an infrastructure analyst/tech support engineer, one of the greatest disappointments in work is being unable to resolve a users' IT issue that stops them from continuing their work at first level. Clients who have important meetings/work to do soon will be easily frustrated by such unexpected issues. In these situations, the role of a support engineer becomes critical. Analysts should try all possible ways to find some backup option for users to continue some work.(For e.g.: If a company laptop is dead, help them setup teams/outlook on their phone/other devices so that they can attend important meetings or view important emails). Once escalation is done, proper communication should be given to next level teams handling the issue to make things faster if the user needs a fix ASAP. Some users might be annoyed by the fact that they need to contact their manager to inform them about these unable to work IT issues. In this situation, too, the analyst can become helpful by sending a short email to their manager giving them a very brief idea about the issue the user is facing, the present status of the case and steps taken to fix the problem soon. #customersatisfaction #supportengineer

CISO Desires checklist I can't grant desires like Lucifer but maybe I can help. DM me. Contact me to hear how we helped H**C reduce CWE density by 90%, P*****e to hit PCI audit goals while reducing CWEs 89% & F****v reduce Mean Time To Remediate (MTTR) by over 50% through real-time training in their commonest vulnerabilities. Our Customer Desires: Comprehensive and tailored security training programs for developers. Seamless integration of security into the software development lifecycle. Access to actionable threat intelligence and incident response capabilities. Collaboration and knowledge sharing among security professionals and developers. Adoption of secure coding frameworks and automated security testing tools. Clear governance and accountability for security responsibilities within the organization. Proactive identification and mitigation of security risks throughout the development process. Continuous monitoring and improvement of security posture across the organization. Investment in cutting-edge security technologies and solutions. Alignment of security objectives with business goals and priorities.

There are Security Architects and there are Security Architects. They seem to look quite similar, don’t they? That’s because the job title can be a little ambiguous. Different employers have different perceptions of what makes a Security Architect. In some companies, Security Architecture involves only assessment or governance work. In others, there may be some governance and solution design. Then there are those doing mostly solutions and design work - i.e. evaluating, selecting, designing and overseeing the implementation of security solutions. It’s important that both internal and external recruiters know exactly the role they are recruiting, otherwise, you’ll get swamped with a mountain of hopeful, but inappropriate, CVs. And none of us want that.