On 19/05/2011 19:07, amoeba (at) amoebazone (dot) com [email concealed] wrote:
> There are always posts to the list on recommendations/skills/requirements for people looking to get into pentesting. How about some discussion from the hiring side: How are you finding your testers? While companies can go the usual Monster/Dice/etc route, where do you go to look for specific skill sets like pentesting to have a higher chance of hitting your target audience/job seekers without having to wade through a billion resumes that don't even come close to what you're looking for?
>
Hi all,
Recommendations of existing consultants are always considered and the
prime source of new starters.
Other than the above, at my company we hired some consultants by asking
for people with security expertise in Linux mailing lists and groups
(that's a matter of personal preference, I'm pretty sure there IS people
with security experience using other Operating Systems, don't blame me
for liking Linux and Linux people), then grinding on the individuals who
answer. So far that channel has been quite successful.
Occasionally I receive a resume because either:
a) someone knows me and submits it (I tend to be easy to find for people
who looks for me). Got in touch with some cool people this way, although
not always to work with them.
b) someone came upon our company page (not mentioned here so it's not
considered spam!) and uses the contact form. I must add that this is the
main channel which produces resumes far from what I'm looking for.
Regards,
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
> There are always posts to the list on recommendations/skills/requirements for people looking to get into pentesting. How about some discussion from the hiring side: How are you finding your testers? While companies can go the usual Monster/Dice/etc route, where do you go to look for specific skill sets like pentesting to have a higher chance of hitting your target audience/job seekers without having to wade through a billion resumes that don't even come close to what you're looking for?
>
Hi all,
Recommendations of existing consultants are always considered and the
prime source of new starters.
Other than the above, at my company we hired some consultants by asking
for people with security expertise in Linux mailing lists and groups
(that's a matter of personal preference, I'm pretty sure there IS people
with security experience using other Operating Systems, don't blame me
for liking Linux and Linux people), then grinding on the individuals who
answer. So far that channel has been quite successful.
Occasionally I receive a resume because either:
a) someone knows me and submits it (I tend to be easy to find for people
who looks for me). Got in touch with some cool people this way, although
not always to work with them.
b) someone came upon our company page (not mentioned here so it's not
considered spam!) and uses the contact form. I must add that this is the
main channel which produces resumes far from what I'm looking for.
Regards,
Miguel
------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board
Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.
http://www.iacertification.org
------------------------------------------------------------------------
[ reply ]