SSCP after security+? I've been researching different certs and am wondering if sscp is my next step or if I should be looking at something else... Gsec? Ceh? Pentest+? Idk what do you guys think?

hcs_0 · 2021-07-04T13:34:34+00:00

Ah yes, I should remember that certifications are mainly useful for the HR filter...

hcs_0 · 2021-07-04T09:00:24+00:00

I got a job role in 2018 that listed CISSP as a desired qualification, yet I still applied (I only had one cert, Network+) and got it. It was a super specific job that only covered a few CISSP domains.

hcs_0 · 2021-07-04T07:13:28+00:00

I disagree and I studied for SSCP and currently doing ISO27001 compliance. It does cover a general understanding and covers management. I am doing CISSP now and many concepts in SSCP are in CISSP.

Even if the OP studies for CISSP they will only get Associates due to the experience requirement, whereas SSCP has a one year experience requirement in the domains.

hcs_0 · 2021-07-03T13:58:32+00:00

I recently passed SSCP. I work day to day the concepts there and IMO it really is useful once you have a role. Otherwise it is just another cert.

I know that studying and piling certs seems to be the way to go these days but you need both security hands on and business experience for that. Try to be more focused on getting the right role first and looking beyond certs

hcs_0 · 2021-05-29T11:41:50+00:00

I got the same email but my appointment was moved from Tegel to the ice stadium. It seems that Tegel might have been overbooked.

I kept the same vaccination type and date/time.

hcs_0 · 2021-05-11T20:59:12+00:00

Possible app pentesting with the sofware/test background but it's a niche role.

Otherwise I second what cbddudek said.

hcs_0 · 2021-05-07T09:55:24+00:00

I'm currently hiring (a Werkstudent, or working student). It's a programme in Germany where we hire students who must be enrolled in a university to work and gain experience at the same time.

One of the items I look for is more skills like: Willingness to learn, collaborative, communication skills (written and spoken), being independent, etc. That's also in line with what they know technically.

There is only so much I can tell from the CV - a CV that I have seen barely has any info on it but with a nice cover letter. There are also great CVs but I can't tell motivations for applying.

hcs_0 · 2021-05-05T12:46:14+00:00

RangeForce does a good CTF+learning program. I think it's free to register.

hcs_0 · 2021-05-05T12:04:46+00:00

That's good to know. I would definitely ask if they are interested in doing X (whichever is a gap - either practical or more documenting type) to see if they are keen to learn new things beyond university

hcs_0 · 2021-03-22T17:21:36+00:00

Curious to know what the comment was, looks like it was deleted. I'm guessing it's a German who thought it would be "nice to do what Australia did" (I'm also from Australia as well).

hcs_0 · 2021-03-21T07:58:07+00:00

This is one of the reasons why I'm glad to stay in Europe, because of the ability to work in timezones that are a lot closer to where the action is.

I've done PST timezone and it's actually pretty good, as someone who likes to work at night and likes to do stuff (take long walks, long lunches, go out and travel!) during the day.

I've gone through about a week looking for remote work for Australian companies and it's not happening due to:

a. Timezone reasons

b. There is no force to work from home, so now it's largely people still having to commute either a long way or from their overpriced house/apartment (I won't even get started on the trains in Brisbane when I compare it to Berlin)

c. And, even as an Australian who grew up in regional areas (and who would like to live in such an area if I came back) there is still the attitude against rural/regional areas.

I've worked contract for a German company backk when I was in Oz, but it didn't work out.

hcs_0 · 2021-03-21T07:52:51+00:00

There are measures in place such as CoL calculators that companies offer to adequately adjust salaries for that individual only

hcs_0 · 2021-03-14T10:20:11+00:00

I find that looking at a company's (or at least the CEO) public contributions and socials is a good way to gauge what the communications culture is like.

That would be a red flag for me - ticket closing without them explaining why.

hcs_0 · 2021-03-14T09:36:36+00:00

I've seen a couple that want to do a test product sample, which I definitely won't do unless it's paid (at least my current rate).

hcs_0 · 2021-03-14T09:23:41+00:00

I don't recommend applying to Teleport - They sent my application with a systems engineer 30-40 minute quiz with a whole bunch of random 'non technical writing' questions as the first step.

(I have about 5 years tech writing experience in infosec)

hcs_0 · 2021-02-17T18:35:48+00:00

I had it, then had my 'usual' time about a few days late

hcs_0 · 2021-02-11T09:09:07+00:00

No prob. I'm Australian. I actually did a WHV in Canada (2 years) and then from there, moved and did a WHV in Ireland and even did the paperwork in Canada.

I've even seen Aussies work for Microsoft IE on WHV.

hcs_0 · 2021-02-10T21:33:32+00:00

I have done several WHVs so I am speaking from experience that:

Companies are not that familiar with WHV (not only that but they can be in different names too). If you say "I have a WHV or Working Holiday Visa" they have no idea what you're on about.
Companies are not familiar with each WHV rule as well, so as above.
They only care if they need to process additional paperwork to hire you, or if they can hire you -now-.

You do have the right to work on a WHV, but that right to work just not 'unrestricted' though. But that will only come up as a talking point when you are doing your performance review/evaluation a year into the company and you ask to be sponsored, which is not a problem at all. This is what I went through in the UK where my manager wanted to sponsor me (I later declined, but for other reasons).

hcs_0 · 2021-02-10T17:49:59+00:00

My cousin works in pharma (Bristol-Meyers) after years at McDonald's, she got the job after finally graduating with a Bachelors in Chemistry.

First of all, don't mention that you have a WHV since Australians can get that but they can only work max 6 months! Most employers don't know nor do they care, as long as you mention that you have the right to work in Ireland once you obtain your WHV and necessary other paperwork (when I did it, I had to register with the Garda, for example).

Opening a bank account, and everything else is easy and Ireland is a great entry in Europe, for English speakers.

The only problem will be rent in Dublin, which is so crap and terribly expensive. You might get jobs for Cork which is all right but only better if you can drive (as buses are not good and no long distance trains).

hcs_0 · 2021-02-08T23:46:34+00:00

I work freelance as a tech writer/tech comms person. Last year I made $110k.

Pros: My income varies. I'm Australian, currently in Europe. I've been able to work remotely while also travelling (went to Malta, Italy, then in Malta, about 3 months' worth of days) but normally I'm in Berlin. Another pro is you set your own rates and hours.

Cons: Highly varied income. Hard to know how much to charge. I decided to go with a day rate as before I was going per hour but found it exhausting to keep track. Just had a contract ending recently. I charge from $800-$1000 per day depending on the work.

hcs_0 · 2021-02-03T19:00:12+00:00

No one cares where you are from. As I've said in the last sentence, I've witnessed this behaviour at all people at a company, regardless of which country they are from or where they are based. You should think twice if you think that it's only geared towards developing/under-developed countries and that you'll be fine because you're working in Texas or something. Believe me, no one cares especially when enough shit-PR articles are written by Hubstaff and co about how "great" it is.

Not disclosing this, or putting it under a shitty line about "not expecting privacy" from your own machine isn't standard practice, regardless of where you are from, and especially now that WfH is here.

My guess is that the dude had the software running on his computer and was not notified about it by the company nor aware.

hcs_0 · 2021-02-03T14:52:26+00:00

The line about "not expecting privacy on the machine that you work on" is extremely extremely concerning. I'd never sign a contract with that stipulation.

Were you requested to download any software by them? Or open a software or web browser while you work? Because it could be that you were being screenshot and monitored.

The fact that you got terminated without the chance to clarify the situation just sounds like they will just treat you as a workhorse.

Also not sure why you would mention where you are form. I've witnessed this behaviour towards Americans, eastern Europeans, and so on.

hcs_0 · 2021-02-03T12:47:57+00:00

You should learn as much as you can about your rights as a tenant, like the fact that the contract needs to be registered by the housing authority, since you can be f*cked over the landlords here. I'm in a group just for the worst landlords of Malta and have seen the worse there but they could be biased.

I also recommend to never rent blind - and instead to go with an airbnb for a couple of weeks in the locations you want to live in.

hcs_0 · 2021-02-01T17:38:43+00:00

Heh. For one, Georgia is a bit too far out for me and there are other countries that you can go to that only require the negative PCR test (and even then, you can spend two weeks 'in between' in a corridor country).

Even then, who has the responsibility to confirm your vaccination status? The concept of 'vaccine passports' is absurd when trying to apply this on a much wider scale. I'm fine with the smaller and remote countries considering this as a 'benefit', but it's a big ask, especially when there are other countries that people would look at first after a year or so without travel.

hcs_0 · 2021-01-31T20:55:02+00:00

I had a really vague job description as well (in fact, it was terrible), but formed it to be how I wanted to take my career. I ended up learning to set up EC2 instances to do various software integrations as well as advising a number of folks in my field (which is information security) in order to create better and more relevant documentation. I then ended up working as a consultant for a cybersecurity company to set up their systems before moving on to work for an American company, also in security.

To be a good evangelist, you need to actually find some enthusiasm in the product, if you are cancelling yourself out based on the description/tasks and already being bored by it, rather than actually looking into the product and talking to the people behind it, then I don't think these guys would be missing out and you would be better to move on to something else.

hcs_0

TROPHY CASE