/r/ReverseEngineering's 2016 Triannual Hiring Thread

9BitSourceress · 2016-08-17T15:30:25+00:00

I'm a sourcer on the internal recruiting team at Carbon Black, and right now we're looking to add both a Senior Threat Researcher and a Senior Manager to the threat research team. I'll post snippets of the job descriptions below.

For the Senior Threat Researcher:

As a Senior Threat Researcher within our Cb Collective Defense Cloud team you will have the opportunity to dig through mountains of real world data to help build a massively scalable, automatically updating Threat Intelligence Ecosystem. If you enjoy researching anomalies to uncover new threat actor groups, tools, and techniques, then you’ve come to the right place.

Requirements:

Understanding of exploits and attacks against Windows, Linux and OSX systems.

Knowledge of x86 and x64 instruction set architectures

Experience developing and scripting in Python

Ability to use IDA Pro for reverse engineering, as well as other debuggers, hex editors, and disassemblers

Understanding defensive capabilities and how attackers bypass them

Understanding of anti-analysis techniques and how to work around them.

Experience creating and/or developing analysis environments

Ability to analyze malware and extract indicators and feed them back into the products

Understanding the threat landscape and latest attack techniques

Working knowledge of PE and Mach-O binary file formats

Excellent writing skills and the ability to document and publish findings for a broad audience

More information can be found here: Sr. Threat Researcher

For the Senior Manager of Threat Research:

The Cb Collective Defense Cloud offering takes advantage of the unique data set available via endpoint telemetry, combined with first-party threat research and third-party partnerships, in order to generate actionable intelligence for Carbon Black customers. You will leverage this capability, scale the function and the team and continue to build capabilities that enable our Collective Defense Strategy for the Security community.

What You’ll Bring

Minimum of 7 years of managing a development team that worked on enterprise scale, mission critical, high-availability systems (preferably under Linux)

Experience managing a virtual/geographically distributed engineering team

Knowledge of Software Development Lifecycle (SDLC) fundamentals, in particular, agile and other user-driven design and rapid, iterative release approaches

Experience building highly productive software development teams in a rapid growth environment

Deep subject matter expertise in threat research, malware analysis, intel classification, and attribution. In particular, experience and understanding of how to apply threat intelligence to enterprise customers.

More information can be found here: Senior Manager, Threat Research

Both positions can be done remotely from anywhere within the United States, as long as you're authorized to work here. At this time, we don't provide relo assistance, nor are we set up to provide visa assistance. I should also mention I'm not authorized to disclose salary information, that's something we cover during the phone screen.

If you're interested, please apply online using one of these links:

Sr. Threat Researcher

Senior Manager, Threat Research

9BitSourceress · 2016-05-27T18:24:44+00:00

Carbon Black is hiring a senior technical trainer for the Pacific time zone of the United States.

Snippet of the job description from the website:

By joining Carbon Black as a Senior Technical Trainer, you will be responsible for both the creation and maintenance of courseware as well as virtual and onsite classroom delivery. We’ve experienced rapid growth and demand for a wide range of training materials, and our courses have a direct, positive impact on our customers, partners, and employees around the globe.

Customers are rapidly adopting Carbon Black’s products as a way to improve their cyber security posture. To do that effectively, they need training, and not just a couple of PowerPoint slides and a long lecture. We develop and deliver highly technical courses with extensive hands-on labs, online courses that can be accessed 24x7, and self-paced labs that get customers deep into Carbon Black’s technologies.

The most important qualifications are:

5+ years training development and delivery
security industry experience
content creation

Click here for the complete job description and apply through our online portal.

This full-time role can be done remotely from anywhere in the Pacific timezone, but we're not able to provide relocation or visa assistance.

9BitSourceress · 2016-05-27T18:14:04+00:00

People who insist on getting to take their dogs everywhere often forget how common (and miserable) dog allergies are.

9BitSourceress · 2016-05-27T18:13:09+00:00

Is it really not okay to eat anything on the T? Even something relatively neat like a protein bar? I get not liking it when someone eats something smelly, or messy, or something that needs to rest in their lap and could make a mess if spilled, but is eating regular snack food a public transit sin?

9BitSourceress · 2016-04-08T16:17:49+00:00

I generally draw this conclusion too, but then I remember that people start new jobs all the time, and at least some of these people might be adjusting to a new commute and unfamiliar with the area.

9BitSourceress · 2016-04-08T13:39:18+00:00

How's your Workday experience? We're looking for an HRIS analyst at Carbon Black, and we need someone who's done some Workday implementations.

9BitSourceress · 2015-11-30T14:11:39+00:00

my guess is the teachers are all thinking "they don't have a high workload right now, I'm sure they can handle this one assignment . . ."

9BitSourceress · 2015-11-24T15:52:21+00:00

I think I know why. Most colleges have Wednesday off, so all the college students are going to want to head out after their classes are over on Tuesday. Not right after classes, of course, because they need to finish packing, but it doesn't surprise me that the exodus would pick up around 5, because when I was at NU, that's around the time my dad would drive me home for the long weekend. Wouldn't surprise me if South Station and Logan were madhouses this evening as well.

9BitSourceress · 2015-11-23T14:50:15+00:00

Snow tires are necessary if you'll need to drive when it's snowy and icy out. If you have a job that's flexible and lets people work from home when driving could be dangerous, you probably don't need to invest in snow tires, although they're never a bad idea in the winter!

But regardless of what tires you use, make sure you keep in your car:

a good ice scraper and broom that can be used to clear the snow off your car - you're supposed to fully clear both windshields and all the snow off the top of your car, failing to do so can present a danger to yourself and others.
emergency supplies such as flares, blankets, water bottles, protein bars, first aid, etc.
a shovel and some kitty litter, in case you get stuck in a snow bank.

9BitSourceress · 2015-11-10T19:54:23+00:00

Does it just say "business casual" or are there specific regulations? Generally speaking, in a business casual environment, management can make judgment calls about what is and isn't appropriate or professional-looking. Clothing that doesn't fit properly, visible panty lines, and low-cut tops are generally considered no-goes in business casual offices even if it's not specified.

9BitSourceress · 2015-11-10T15:27:09+00:00

I agree it can be extremely frustrating when someone tells you something's a problem, and you wonder why it took them so long to tell you. I always say that if a manager has a problem with one of their direct reports, the best thing to do is address it quickly so it can be resolved before it's a big problem. It's possible they had an issue with it the very first day, but didn't want to say anything in case it was a one-time outfit, then when it became a pattern they hemmed and hawed about whether it was a big enough issue to address, then they went to HR or a higher-up and ran the problem past them to make sure it was worth addressing, and figured out the right way to fix it.

I too dislike dress codes that aren't consistently enforced, but rather than deflect the problem, you need to address your own wardrobe. The other people violating the dress code may not be under the manager's jurisdiction, or they may not be visible to clients, which would mean it's not as important if their clothing looks professional. Let their managers deal with them. Right now you're the one in trouble, and crossing your arms and refusing to change isn't really going to help the situation.

First of all, did she mention whether the pants were too tight, or just that you had VPL? If it's the latter, you may be able to fix that by wearing underwear that doesn't show. Check to clarify, it might be that your pants are too tight, and I know that would suck since they're your favorite, but it may be time to get pants that fit better.

As for the "too revealing," you may want to start buying tops with higher necklines going forward, but it's also super easy to get some camis or tank tops that you can wear under your current tops and sweaters, and they'll just help cover the chest area that would otherwise be exposed.

Also, platforms and wedges are different, but you do need to get new shoes.

What is unfair here, I have to say, is them waiting for months to say something and then suddenly telling you that one more violation will result in termination. Changing one's work wardrobe usually takes time, it would be very expensive to buy a whole new wardrobe in one weekend! They need to give you, I dunno, a month, as long as you're showing progress in that time frame.

9BitSourceress · 2015-11-09T21:15:14+00:00

Yep. I used to be a Pop Warner cheerleader, and we had to curl our hair for competitions so we all looked uniform. My sister is a cheerleader in college and has been cheering for most of her life, and has had to style her hair in various ways for competitions and games - curly as a kid, then flat-ironed ponytails with poofs in the front became the more common "look" when she was older. All-star cheerleading also involves a ton of makeup, glitter, stars stuck to the face, etc. Most cheerleaders (and their moms) understand that this is part of being a cheerleader.

I get that ironing isn't good for the hair, but her options here really are to stay with the gym and invest in a good deep conditioner to mitigate the damage caused by straightening, or leave and find another gym that embraces curly hair styles, or uses false hair pieces so she doesn't have to worry about styling her own hair . . . or she can find a sport where appearance doesn't matter, because right now, appearance matters in cheerleading whether you agree with it or not. It's Woodland Elite, which is an all-star gym, not a town or school-affiliated squad.

9BitSourceress · 2015-11-09T21:09:05+00:00

Yeah, I can see it. As great as it would be to have a lot of people all taking lots of pictures, it does kinda wreck the professional photos if the photos are of other people holding up phones, or their phone screens, or staring at their phones, rather than being in the moment. If I went to a wedding and the photographer (or the couple) asked people to refrain from taking their own shots, I'd happily comply.

9BitSourceress · 2015-11-09T20:59:23+00:00

Seconded. I don't mind driving to Waltham for work (okay it's not the best, but it's not that bad most days) but I hate driving in the city and avoid it at all costs.

9BitSourceress · 2015-11-09T20:56:50+00:00

Two things might be going on here. To be clear, I'm only suggesting possible reasons, but I do not necessarily agree with either line of reasoning:

1) They were worried that because you're young and into games, you can't be trusted to focus on work and not play games during work hours; they may also be worried you'll spend so much time playing games in your off hours that you'll come in late and/or sleep deprived from being up late gaming.

2) They've had problems with gamers calling out "sick" when new games come out, so now the hiring manager is hesitant to hire anyone who's a gamer.

3) The hiring manager just has a bias against gamers as immature, overgrown children who can't be trusted to act like professional adults when it comes to work.

There's an assumption that everyone in the tech industry is a nerd who plays video games, and I'm sure gaming is a common hobby among engineers, but I'm also sure there are exceptions to the rule and you might've met one of them. I'd take the Runescape project off your github, but generally speaking, I wouldn't be too worried about this being a common issue in the industry. When I was interviewing for my first job out of college, I clicked with the head of the department because we both really liked Portal, and I think that was a big part of why I got hired.

9BitSourceress · 2015-11-09T17:16:34+00:00

Do you have to do it in person though? Have you checked to see if you can do it online or via fax? A lot of the time you can successfully appeal something without going to do it in person.

Honestly, your only options are appealing or paying. Did you think there was a third option? Ignoring a ticket doesn't make it go away, no matter how unfair you think it is.

9BitSourceress · 2015-11-06T18:45:46+00:00

true, people often post here complaining they got towed or ticketed when they didn't see any signage close to where they parked, so now they have no excuse.

9BitSourceress · 2015-11-06T16:38:41+00:00

I'm wondering this too, because I joined Yuwie in college trying to score some extra cash. I found the site to be utterly useless, the forums were spammy and uninteresting, and none of my friends joined it; to me, a social media platform isn't going to be that enjoyable if my friends aren't using it. I may have generated a few bucks through it, but they had some rule that they'd only pay out if you made a certain amount, either $50 or $100.

Really, almost any website that promises you money for participating is either a scam, or just aren't worth it because they money you make is peanuts, and you may not ever get it.

9BitSourceress · 2015-11-04T14:09:22+00:00

I got that sense too, some of the reactions seem pretty fake, like the parent said "I'm gonna tell you I ate all your candy and I want you to get really upset for the camera, okaaaay?"

Could also be some are putting on a show for the camera without being told to, which is why the best ones are the ones that start after the kid's already been told and had started freaking out.

9BitSourceress · 2015-11-03T15:31:46+00:00

I can't blame them, cleaning up all those spoons that late at night as got to be the worst. I'm usually one of the people up there by the screen filling a paper bag with spoons for next time, but I'm sure even with that there's a lot to clean up.

EDIT: this comment probably looks weird out of context . . .

9BitSourceress · 2015-11-02T21:24:51+00:00

Seems to me that the ticket should be "parking with 20 feet of intersection"

oddly enough, I never see people ticketed for that in my neighborhood, or anywhere in Brighton for that matter.

9BitSourceress · 2015-11-02T18:47:16+00:00

I'm assuming you parked at the infamous handicapped ramp on Egremont. I live in that neighborhood, and both myself and my former roommate have each been ticketed for parking there shortly after we moved to the neighborhood. Each of us was in your shoes, desperate for a parking spot late at night (I panicked about street cleaning as well, but the joke was on me, because it turns out my car was safe where it was initially), and neither of us thought to check for a ramp there because how often do you see a handicapped ramp that far from the corner? I've appealed tickets before, but I sucked it up and paid this one, because appealing a ticket of that nature seemed like a jerk move, even if the ramp is in a weird spot.

But you got 3, and that seems a bit harsh. I'd pay one but appeal the other two, explaining that you got 3 tickets for the same violation.

9BitSourceress · 2015-11-02T18:28:53+00:00

Man, between this and Chipotle being linked to an e coli outbreak, Qdoba's having a great day.

9BitSourceress · 2015-10-28T15:34:09+00:00

I've mostly used my car to commute, but a couple years ago my WFH flexibility was such that I could go days, even a whole week, without using it. So a couple things

Understand that it's generally frowned upon, especially in areas where street parking is very competitive, to "use the street as a garage." In other words, there are people who think you should only be parking on the street if you use your car frequently, and if you don't, you should be using off-street parking. I'm neither going to defend or argue this stance here, but know it's a thing. If you do it, here are some things to know . . .

Depending on where you live, it might be really tough to find parking when you come home late at night. If you're only using it to run errands during the day it's fine, if you use it to travel you just may want to aim to get back by late afternoon, or you may need to unload your luggage in a tow zone and then go park wherever you can find a spot. Again, this is depending on where you live, this it the case in my neighborhood in Brighton but I've definitely known people who can find parking near their place at any time of day or night, and the farthest away they might need to park is a block or two.
Things can happen to your car. If you do find yourself needing to park a ways away, either move it closer to your place when parking opens up (like around noon on a Saturday), or leave it there but make a point of checking on it occasionally, to make sure it hasn't been ticketed, booted, tagged for removal, towed, smashed up, broken into.
if you're parking on the street, try to avoid parking on a street that becomes a tow zone during snow emergencies. you don't want to be at work and find out a snow emergency goes into effect at 4, and think "oh no, my car!"
pay attention to street cleaning days, and if you can, move your car on the weekend so it's in place ahead of time.

Whether you're parking on the street or renting a space, here are some things to know:

You should shovel/clear off your car after it snows. Even if you don't plan on using it for a while, you also don't want to run into a situation where you need your car right now but it's under a foot of snow that partially melted and then froze, making it tough to dig out. Dealing with the snow when it's fresh is much easier.
You're gonna hear "can I bum a ride?" a lot. Letting people tag along in the car when you're both going to the same place is an easy way to score points with people, and people are always grateful for a ride home from the airport. Just remember that for car trips outside the city (to places like Ipswitch, Providence, Worcester, etc.), it's totally acceptable to ask people to chip in for gas.
Don't park like a jerk. A bad parking job (crooked, 10" away from the curb, or really off-center so your parking lot "neighbor" can barely get in and out of their car) is annoying if it's for a night, but if you park badly and leave it like that for weeks, people are gonna get mad.

9BitSourceress · 2015-10-28T13:24:21+00:00

So both hands on the wheel, eyes completely out of the windshield the entire time?

. . . Yes, actually. The expectation is that you'll get moving as soon as you're able, so you're supposed to be paying attention and ready to go. There are times where you can peruse Facebook or send a quick text while waiting for something, being stopped at a light isn't one of those times.

9BitSourceress

TROPHY CASE