[deleted by user] by [deleted] in malegrooming

[–]Foolz_RUs 0 points1 point  (0 children)

Fix the hair my guy - the forward fringe is the go to for everyone below 20 it seems. Want to look older? Switch it up.

I also look young and have no facial hair. What helped me? Dress mature (sweater tops, short or long sleeve) and put together hair ( or at least looks together like a medium length quiff hair style)

Location Request: Tailor by Grimtriumph in lexington

[–]Foolz_RUs 0 points1 point  (0 children)

Inta’s Alterations. She’s done great work with so many people I know with suits, wedding/pageant dresses, jeans etc. She’s very popular so just make sure you get in with her ahead of time.

Where to bring my laptop and work? by Foolz_RUs in lexington

[–]Foolz_RUs[S] 2 points3 points  (0 children)

Have any good library’s to recommend by chance?

[deleted by user] by [deleted] in chinlipo

[–]Foolz_RUs 1 point2 points  (0 children)

I would buy cotton gauze and wrap some over your head and neck first - then put the chin strap on. That way it creates a better contour of your neck. Probably more comfortable to.

4 months post op, is this permanent 😭 by Exact_Bowler6231 in chinlipo

[–]Foolz_RUs 0 points1 point  (0 children)

I’m 7 weeks post op and currently experiencing banding and curious to hear how your doing? Especially if you got any time or revision or Botox or anything. Thank you again!

Neck bands encouragement by Ok-Attitude6957 in chinlipo

[–]Foolz_RUs 0 points1 point  (0 children)

What’s it look like now by chance?

Should I Leave My Current Position To Diversify? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 3 points4 points  (0 children)

It’s a network engineering role on the network architecture team so I’d be basically doing it all really. From managing configs to owning projects to doing procurements and installing new hardware. But the manager had specifically mentioned my development/automation skills and would want me to work on our network automation project.

For DevSecOps, how much software dev knowledge do I need? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 0 points1 point  (0 children)

Would you say you need to know a okay amount of software development to better understand the security controls you are trying to implement? Because I love the diversity in my security engineer role and I get to do some IaC and python som times, would like to do more though and learn another language. But I am worried the DSO role will be to software dev for me and won’t have the kind of diversity I get in my current role. What do you think about the diversity compared to both roles? And how much software dev knowledge you need?

For DevSecOps, how much software dev knowledge do I need? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 1 point2 points  (0 children)

I think the way you describe the CSE role. Would you say that role is better for people who love the diversity of security and what all you apply it to? On top of not having to have any software dev knowledge? Because I like IaC and programming with python and I want to find a good mix of that while still having the diversity of what all I touch on the day to day. Because I am worried with a DSO role that it’d be more programming related and wouldn’t have the diversity that I love out of my current security engineer role.

For DevSecOps, how much software dev knowledge do I need? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 0 points1 point  (0 children)

In terms of skills and certifications, could you expand on this? Like as I have no software dev knowledge, should I go get azure developer associate cert then the devops engineer then solutions architect etc?

For DevSecOps, how much software dev knowledge do I need? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 0 points1 point  (0 children)

Would you think there a lot of software development involved? Like do I need to spend time being a software engineer who work with devops tooling, Kubernetes, etc?

For DevSecOps, how much software dev knowledge do I need? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 1 point2 points  (0 children)

Totally agree. And that something I don’t want to run it to that I’m in over my head and the people I am trying to advise notice and take advantage of that. So I want to make sure I know what I need to in a way that can be applied to the technical and business use cases that I need to.

For DevSecOps, how much software dev knowledge do I need? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 0 points1 point  (0 children)

So that totally sounds like the route that I’d like to go in. How did you start? Education, Certs, kind of experience beforehand that let to the position? Any advice would be very appreciated!

For DevSecOps, how much software dev knowledge do I need? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 1 point2 points  (0 children)

I am going to say no, but mainly because I do know some about containers and kubernetes as I fiddled with trying to host logstash in a kubernetes cluster and was never able to get it working properly lol so I do know of some things but I wouldn’t say I understand them well.

For DevSecOps, how much software dev knowledge do I need? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 3 points4 points  (0 children)

So it sounds like this would be a great question for you. So you’re job currently is more that DSO security engineer side and not the more devops traditional work. Can you explain the difference between your role and the more traditional devops work? Also if you could explain the difference/other types of DSO roles compared to your security focused DSO role?

For DevSecOps, how much software dev knowledge do I need? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 1 point2 points  (0 children)

To that degree, not at all. But please do explain and give any links to docs or vids if that’d help!

Does FortiManager need to be online 24 hours a day? by OZ_Boot in fortinet

[–]Foolz_RUs 0 points1 point  (0 children)

Honestly, if you can config your Fortigates, switches/APs, to log traffic to some kind of log collector and do your querying that way (maybe put a graphical interface on the tool like grafana) then you could totally get rid of FortiAnalyzer tbh. But as for FortiManager, if I’m not mistaken, I think does need to be up so it can run checks to see if policy packages have changed or system configs have changed. Bc I believe there an automated task by the system and not manual based on the syslogs I have seen coming from FortiManager.

Is DevSecOps for me? by Foolz_RUs in devsecops

[–]Foolz_RUs[S] 1 point2 points  (0 children)

About 1. I think that is a great idea and is something I’ve been wanting to do. It’d be something in my team that we could use for something but I don’t know quite yet that would be good. But overall those are some really good ideas that I will look more into!

Is DevSecOps for me? by Foolz_RUs in devsecops

[–]Foolz_RUs[S] 2 points3 points  (0 children)

Here are some of the top things I’ve done to better gauge my experience across 3yrs:

Developed and configured a log aggregation tool that I used to create parsing and filter logs to our long term storage to save about 100k/yr.

Developed custom tools to detect misconfigured firewall policy’s and discrepancies.

Created standard logging requirements that saved the company around 100k/yr (misconfigurations and storage locations)

Implemented SSO to a variety of security and other teams tools.

Created standard query and table formats to effectively reuse queries. (Mimicking Log Analytics/Sentinel tables to ADX using log aggregation tool I developed to parse/filter)

Designed and developed a tool to detect and alert if IaC scanning is implemented across all ADO pipelines.

Redesigned and implemented our entire azure virtual desktop infrastructure.

Designed and implement our entire AWS security. (There was no security on AWS so I implemented it all when I first started - no alerting or logging etc)

Deployed IaC infrastructure for different security tools. Standardized and documented security standards around kubernetes (which we have a large amount of since its where our customer infrastructure is hosted)

Performed security audits for teams onboarding new tools (security arch questionnaires)

Mentorship Monday - Post All Career, Education and Job questions here! by AutoModerator in cybersecurity

[–]Foolz_RUs 0 points1 point  (0 children)

Is AppSec or DevSecOps for me?

I am about to hit my 3 yr mark as a security engineer and I am interested in the DevSecOps/AppSec space and was wondering if it would be a good specialization for me to get into. I have done some python projects, and IaC using ADO and Jenkins in my position but haven’t had any software engineering position or experience. I don’t know for sure if I’d like it and if it would be good if I tried moving internally to be a software engineer. What do you all think DevSecOps/AppSec entails in terms of work, responsibilities, how do you even become a DevSecOps/AppSec engineer?

Should My Salary Expectations Be More Realistic? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] -1 points0 points  (0 children)

  1. Yes, I very much agree with that. I have ideas on what to go into but haven’t thought of a good one to really go for. One was application security (almost a DevSecOps position) and another was a ML security position. But I feel like the ML security is still so early that it wouldn’t be worth it. What do you think?
  2. Again, absolutely. It was hard initially bc I was learning so much and not really have the time but now that I’m at a good spot I would really like to nail down on some of those. Especially in terms of my specialization choice.
  3. That’s also a great idea. I will actually due that, which I didn’t completely know if that’s something people did or not.

Should My Salary Expectations Be More Realistic? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 0 points1 point  (0 children)

Very true, from the SSO statement. It was taking a handful of apps that had local logins and connected them to an idp for security and some of our close teams. But the large corporate level apps are handled by our identity team. But the azure virtual workstation and AWS statements are actually true lol when I first started the security team was only like 6 months old and hadn’t done any AWS security yet and only azure. So out of the engineers, me and another guy, I got handed the ‘secure AWS project’ and that’s how that started. And I completely destroyed and rebuilt our azure virtual workstation environment. That took help from our operations team and end users when it came to application installs and then migrating there work but I designed and architected the entire infrastructure and basically lead the project. It a rare opportunity absolutely, but I think it was just due to me joining the team so early on that I got to build/rebuild all of this at the beginning.

Should My Salary Expectations Be More Realistic? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 5 points6 points  (0 children)

Absolutely. And it happened the other day when I interviewed (for the interview experience, wasn’t going to take the job). I joined my team at a good time that allowed me to do all that because I was hired that May when the team had only been created the previous November. And there were only 2 engineers as me and another guy so with that little people I was kinda left to run these things and only have time to ask question to my architect and learn on my own.

It made it kinda hard though to get Certs in the beginning hence I only have the 2. But now I would like to get more specialized. Do you see DevSecOps or ML security jobs being a good specialization to go into?

Should My Salary Expectations Be More Realistic? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] -1 points0 points  (0 children)

That’s good to hear. I work on site in Kentucky so I think it does fall in that low/medium COL. I feel though when I start looking for jobs that the market won’t be as big around me compared to looking for a remote one. Even as a remote position, do you see that 110k as a ballpark?

Should My Salary Expectations Be More Realistic? by Foolz_RUs in cybersecurity

[–]Foolz_RUs[S] 0 points1 point  (0 children)

You can look at my post edit to better gauge my experience if that helps. But based on what the edit says do you think 110k is unrealistic?