InfoSec Journeys

We had an enormous amount of fun talking with Ashish about his journey in #InfoSec, the focus he has around #Cloud Security and how he became a specialist in that area. We really loved how passionate Ashish is both about developing knowledge and also sharing that knowledge with the wider InfoSec #community. Ashish oozes passion for the industry and also hosts his own Cloud Security Podcast and YouTube Channel - both of which you should definitely check out as they're packed full of fantastic content.

Want to get started in the industry? Want to re-train, upskill and transform an organisation? Here Ashish's insights into how to accomplish just that.

LINKS

=====

https://www.youtube.com/c/AshishRajan

https://www.linkedin.com/in/ashishrajan/

https://www.cloudsecuritypodcast.tv

https://www.kaizenteq.com

https://twitter.com/hashishrajan

SHORTCUTS

==========

Intro & Background - 00:58

Identifying Cloud as the future - 03:00

Business challenges of moving to the Cloud - 07:25

Shadow IT in the Cloud - 11:43

Azure or Azure - 13:00

Why configuring Cloud services can be tricky - 13:40

Four Identities in AWS - 19:38

Re-training for the Cloud - 20:50

Getting certified in Cloud - 24:58

Keeping pace with poly-cloud environments - 27:15

How Ashish got started in technology - 32:30

Indian culture within technology - 35:38

The impact of COVID on remote working - 40:00

Where Ashish's passion for InfoSec comes from - 42:19

Entry-gates within Cyber Security - 45:25

Skills shortage within the industry - 51:10

Pay within the industry - 52:30

Closing comments - 01:00:55

This episode has a wealth of insights for candidates looking to break into the #InfoSec industry and for organisations #recruiting across the landscape also. James is a highly experienced InfoSec head-hunter and we hear his industry insights, find out what it's like to work in such a saturated and competitive recruitment sector, how best to showcase your transferrable skills during interviews and ultimately stand out from the crowd. We also covered topics around salary benchmarking, London salary weighting, the impact of COVID and we also talked about the perceived #cyber skills shortage across the UK.

This was a really enjoyable episode and a unique insight into the world of InfoSec recruitment. Thank you James for taking the time out to share your knowledge with our audience.

SHORTCUTS

==========

Intro - 00:48

The appeal of working in recruitment - 02:00

The role of a recruitment agency - 04:30

Learning about InfoSec as a recruiter - 06:00

HR job sifting & transferrable skills - 08:54

Building relationships & adding genuine value - 11:24

Benchmarking salaries in InfoSec - 14:12

Defining job specifications - 16:44

Cyber Skills Shortage - 20:00

The importance of CISSP and certificates - 22:38

North / South salary divide - 27:00

Impact of COVID on recruitment - 32:50

How to sell your transferable skills - 35:30

Making a Video CV / Interview - 39:40

Having confidence on camera - 42:25

The most recruited InfoSec role - 45:13

Women in InfoSec - 46:40

Top Tips for candidates and businesses - 50:00

Tips to add value as an InfoSec recruiter - 52:09

Closing thoughts - 56:00

USEFUL LINKS

============

https://www.linkedin.com/in/james-mor...

GET MORE

=========

Join in the conversation at https://linkedin.com/company/infosec-...

HOSTS

======

InfoSec Journeys is brought to you by

Colin Hardy - https://twitter.com/cybercdh

Ashley Pierre - https://twitter.com/AshersPierre

THANKS FOR WATCHING!

=====================

If you like the video, please hit the THUMBS UP

If you loved it, please SUBSCRIBE for more content!

Enjoy your journey.

A must watch for any aspiring Coders, Security Researchers and #BugBounty enthusiasts. We had the absolutely pleasure to interview @TomNomNom who earned the accolade of Most Valuable Hacker (MVH) during a #HackerOne live hacking event in London in 2019. The MVH club is highly exclusive, consisting of super-talented individuals who are able to find high-impact bugs in global household-name companies, help them understand complex attack-scenarios and also contribute back to the wider security community.

Tom has had a fascinating journey into the world of #InfoSec. Developing a career as a Software Engineer and training others how to write code and develop complex systems, whilst in his lunch hour hacking on his company's bug bounty program to help pay for his wedding. Fast forward to 2020, Tom now leads a team of Security Researchers at Detectify, who in turn help secure some of the worlds biggest organisations from cyber attack.

Tom is very humble, hugely insightful and very inspiring. He also has written some of the most popular tools used by the top Bug Bounty researchers, all of which you can find on his GitHub. He even drops tips on which ones he likes best, so check this out.

SHORTCUTS

==========

Intro - 00:33

Current Role at Detectify - 02:04

Translating Technical Information - 04:59

Explaining CORS - 09:23

Learning to Code - 12:40

Origins of Tom's Mindset - 19:40

Academia vs. Real World InfoSec - 23:56

Becoming a Trainer - 30:09

Hacking and Bug Bounty - 33:30

Getting Noticed by HackerOne - 42:25

Getting Invited to a HackerOne Live Event - 43:32

Dealing with Imposter Syndrome - 45:15

Developing a Profile in the Bug Bounty Community - 47:05

Being HackerOne's Most Valuable Hacker (MVH) - 48:35

Finding a $40,000 Bug and Splitting The Winnings - 52:40

Writing Tools for Bug Bounty Community - 54:45

Keeping the Output Simple - 58:38

Tom's Favourite Tool - 01:00:50

Replacing Meg with Comb and FFF - 01:04:50

What's Next for Tom - 01:06:04

USEFUL LINKS

============

https://github.com/tomnomnom

https://twitter.com/TomNomNom

GET MORE

=========

Join in the conversation at https://linkedin.com/company/infosec-...

HOSTS

======

InfoSec Journeys is brought to you by

Colin Hardy - https://twitter.com/cybercdh

Ashley Pierre - https://twitter.com/AshersPierre

THANKS FOR WATCHING!

=====================

If you like the video, please hit the THUMBS UP

If you loved it, please SUBSCRIBE for more content!

AJ Yawn is SUPER-INSPIRING! If you want to break into #InfoSec, or you want to develop your mindset to progress, definitely check out this episode as it is PACKED full of insights, guidance and tips that you can put into practice today to enhance your career.

AJ has a rich industry background, with an enormous passion for #Cloud Security and we learn what drove AJ to build this knowledge, how he conquers Imposter Syndrome, how he built his network, transitioning from military life to working in a civilian organisation, taking tactical pauses, balancing family life, enhancing the mindset, what motivates and drives him every day and more importantly about how vital it is to share information and your journey with the wider #community.

I absolutely LOVED the 90/90/1 rule. Want to know what it is? Give this a listen.

SHORTCUTS

===========

AJ's Intro - 00:44

How Meditation Helps - 03:58

Balancing Family Life - 06:00

90/90/1 Technique - 07:40

Being a Veteran in InfoSec - 09:44

Education Background - 16:57

Making your Resume/CV Stand Out - 18:24

First role in InfoSec - 21:26

First Oh Sh*t Moment - 23:09

Why he focused on AWS - 24:50

Dealing with Imposter Syndrome - 26:10

Importance of Sharing Information - 31:44

Handling Challenging DMs - 35:16

Diversity in InfoSec - 38:27

Top 3 Tips to Succeed in InfoSec - 44:08

We were so delighted to have Jessica Barker join us for this episode and share her unique InfoSec Journey with us. Jessica is so well respected in InfoSec and highly inspirational to others; the co-CEO and Co-Founder at Cygenta and also Chair of ClubCISO - an awesome community for Information Security leaders. Jessica has a fascinating background, with a PhD to her name and has a unique take on the human element of Cyber Security and what that means for modern business.

Jessica has worked with countless organisations helping them achieve their strategic goals and has recently authored a book entitled "Confident Cyber Security: How to Get Started in Cyber Security and Futureproof Your Career" as part of the Confident series from Kogan Page. You can get your hands on it here:

https://www.amazon.co.uk/Confident-Cy...

We talk about how managing people, business politics and the art of communication can really help you progress in your career, about how Jessica juggles the wide range of priorities she has with running a business and her top three skills to demonstrate when breaking into InfoSec, namely:

1) Keep learning - this is a fast-paced industry

2) Communications - at all levels

3) Problem Solving - approaching issues from different angles

A fantastic episode, full of industry insights that hopefully inspire you to consider more about the human element of Security and also the key skills you need to break into the landscape and progress once you're here.

Thank you again Jessica, we'd love to have you back!

Links

====

https://www.linkedin.com/in/jessica-b...

https://www.amazon.co.uk/Confident-Cy...

https://www.amazon.co.uk/Hyperfocus-W...

GET MORE

=========

Join in the conversation at https://linkedin.com/company/infosec-...

HOSTS

======

InfoSec Journeys is brought to you by

Colin Hardy - https://twitter.com/cybercdh

Ashley Pierre - https://twitter.com/AshersPierre

THANKS FOR WATCHING!

Another fantastic episode, full of industry insights from Becky Pinkard who has an extensive career within InfoSec and we hear exactly what it's like to work through a very male-dominated career path from Security Analyst right through to making it as a CISO for a leading Bank.

Becky has worked in some awesome roles within major global companies; having developed threat monitoring teams at Barclays, leading the Global Security Operations team at Blackberry, developing Operational Cyber Threat Intelligence teams at Digital Shadows and also spending over 14 years with SANS - helping train and develop others in the field.

I loved the key takeaway from this episode = PERSISTENCE. Becky has shown exactly what hard work, focus and persistence can achieve in this industry. And I also love the fact that even as a CISO, Becky still focuses on learning and development, constantly investing in her knowledge and inspiring others to do the same.

A really insightful episode, we thank Becky for taking the time to join us and share her mindset with you all! GET MORE

=========

Join in the conversation at https://linkedin.com/company/infosec-journeys

HOSTS

======

InfoSec Journeys is brought to you by

Colin Hardy - https://twitter.com/cybercdh

Ashley Pierre - https://twitter.com/AshersPierre

This is an amazing episode if you want to learn how to achieve high-performance as a Chief Information Security Officer (CISO). Nuno is an InfoSec industry-leader working for a global telecoms provider and is full of insight, inspiration and enormous amounts of passion for the community. In this episode we talk about what it looks like to work throughout the spectrum of the industry, both in technical and non-technical specialist roles and how to progress to senior levels without losing your technical mindset. A truly inspiring person to talk to and it was our pleasure to hear your insights and motivations - thank you Nuno!

GET MORE

=========

Join in the conversation at https://linkedin.com/company/infosec-...

HOSTS

======

InfoSec Journeys is brought to you by

Colin Hardy - https://twitter.com/cybercdh

Ashley Pierre - https://twitter.com/AshersPierre

Wow - what an episode to get us started. We talk to Ste Watts, an InfoSec high-flyer who shares with us his passion for Cyber Security, his motivations in the industry and how he stays positive and laser-focussed on achieving his goals. Ste has worked across the Cyber Security sector and cut his teeth in Critical National Infrastructure environments, protecting some of the countries most important assets. A super-inspirational industry-leader.

Ste is all about the passion, and makes passion his pay-check. I also loved his 6 P's philosophy:

People

Perseverance

Passion

Positivity

Puzzles

& Practice

I really hope you enjoy this Netcast as much as we did, and I'm excited for a part two with Ste as I know he has so much more to share.

GET MORE

=========

Join in the conversation at https://linkedin.com/company/infosec-...

HOSTS

======

InfoSec Journeys is brought to you by

Colin Hardy - https://twitter.com/cybercdh

Ashley Pierre - https://twitter.com/AshersPierre

In this episode, we talk to Rich Carpenter, an Information Security Manager who is responsible for ensuring the security of one of Europes largest media organisations.

Rich has a fascinating journey and is highly personable - which is a key attribute in building a network of trusted colleagues and delivering key strategies within a business, especially in Security. We also cover the personal side of information security, how to communicate with company peers and Rich's top tips for success. We also jump into a discussion about being a specialist vs generalist and the advantages of both industry approaches.

We hope you enjoy this episode, we certainly did and it was awesome to learn more about Rich and his journey.

GET MORE

=========

Join in the conversation at https://linkedin.com/company/infosec-...

HOSTS

======

InfoSec Journeys is brought to you by

Colin Hardy - https://twitter.com/cybercdh

Ashley Pierre - https://twitter.com/AshersPierre

In this SoundByte Eli talks about what moment changed him.