Cyber Work

Today on Cyber Work Hacks, my guest is Infosec Skills author and teacher Cicero Chimbanda. Chimbanda's Skills path concerns building the soft skills needed to succeed as a Cybersecurity Manager. For today’s Hack, Chimbanda tells us his best tip for Security Managers to keep their security teams fulfilled and connected. As we speak, many companies are entering their Q2, and Chimbanda has great advice for taking Q1’s successes (or not) and using the framework to reinforce the connection between the team and leadership, as well as being a conduit moving between each.Here is some excellent advice for today's cybersecurity managers and those yet to come in today’s Cyber Work Hack. 0:00 - Succeeding as a cybersecurity manager2:48 - One great tip for cybersecurity managers6:14 - Implementing change as a cybersecurity manager8:56 - Meeting calendars and managing cybersecurity roles11:05 - Outro – Get your FREE 2024 Cybersecurity Salary Guide: https://www.infosecinstitute.com/form/cybersecurity-salary-guide-podcast/ – View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.

We’ve all been there — 200 pages into your Security+ study guide reading, and your eyes are crossing from exhaustion. Does any of this even connect with the real world? One of the best ways to apply your learning is to try it out for yourself, and my guest today, Infosec Skills author professor Robert McMillen, has a host of suggestions for low-cost, low-danger security tasks that you can try for yourself and determine whether you have what it takes to keep it going in cybersecurity. As a bonus, McMillen gives some pretty outstanding advice for taking these hands-on experiences and interjecting them into your first job interviews! 0:00 - Cybersecurity projects and tasks1:53 - Beginner cybersecurity projects7:49 - Elevating your cybersecurity projects11:38 - Document cybersecurity projects16:31 - Outro – Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free– View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.

Get a job! No, seriously, get a job. Cyber Work Hacks wants to help you find the job of your dreams, and your guide to learning how to search for Cybersecurity jobs is Professor Robert McMillen, one of Infosec’s Skills authors. McMillen knows that there’s a disconnect between the skills gap that guests espouse and the commenters who are still looking. But McMillen has some actionable advice for you, and you absolutely do not want to miss this, no matter what level of job you’re looking for. Please take copious notes and enjoy this week’s Cyber Work Hack. 0:00 - Beginning your cybersecurity career1:36 - Why you can't get a cybersecurity job8:50 - Common mistakes young pros make11:50 - What to learn from Infosec Skills13:42 - Outro – Get your FREE 2024 Cybersecurity Salary Guide: https://www.infosecinstitute.com/form/cybersecurity-salary-guide-podcast/  – View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.

Cyber Work Hacks is dedicated to furthering and strengthening your cybersecurity education and learning, but today’s episode is specifically focused on learning. Professor Robert McMillen guides you through all of the different ways you can learn, both in certification training and education options, and helps you understand which learning method is going to mesh with you and also which ones will attract your future employers. Put a bookmark in your cert study guide and lend us your attention for this week’s Cyber Work Hack! 0:00 - Start your cybersecurity career2:11 - Where to begin cybersecurity education8:09 - Acquiring beginner cybersecurity skills13:00 - Learn cybersecurity through Infosec Skills15:09 - Outro– Get your FREE 2024 Cybersecurity Salary Guide: https://www.infosecinstitute.com/form/cybersecurity-salary-guide-podcast/ – View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.

Join us for the June 2024 edition of Cyber Work Live! This episode is dedicated to answering questions about cybersecurity certifications, training, and careers. Our expert panel, including Confidence Stavely, Akyl Phillips, and Robert McMillen, share invaluable insights for newcomers and career changers in cybersecurity. Topics covered include navigating the certification landscape, overcoming imposter syndrome, transitioning from other careers, and the importance of networking. Tune in for actionable advice and strategies to kickstart your cybersecurity career!00:00 - Welcome to Cyber Work Live: June 2024 Edition00:40 - Meet the panel: Confidence Stavely01:48 - Meet the panel: Akyl Phillips02:37 - Meet the panel: Robert McMillen03:31 - Advice for cybersecurity newcomers03:53 - Common questions from cybersecurity students05:13 - Guidance for women in cybersecurity10:11 - Early career mapping in cybersecurity11:54 - Certifications and entry-level jobs17:07 - Physical requirements in cybersecurity18:37 - Learning how you learn: Education paths22:01 - Cyber girls program: Structure and insights28:38 - Self-paced learning options30:05 - Live boot camps overview31:42 - Immersive boot camps32:31 - The importance of continuous learning33:46 - Staying updated in cybersecurity40:30 - Networking and community building49:23 - Transitioning to cybersecurity careers59:19 - Final thoughts and resources– Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free– View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.

Today’s Cyber Work Hacks is for security novices, people just getting started in learning cybersecurity and looking for their career path. Professor Robert McMillen is an Infosec Skills path author, and he gives you some fantastic advice for making the decisions at the very beginning to help you steer your career to all the places you want to go! To get your cybersecurity career started, make sure to check out today’s Cyber Work Hack. 0:00 - First starting out in cybersecurity1:28 - Cybersecurity career map5:41 - Advice for career road mapping9:11 - Leaning into your interests via education12:28 - Advancing your cybersecurity career15:56 - Cybersecurity skills to learn 17:21 - Outro– Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free– View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.

Today on Cyber Work, Jonathan Gill, CEO of Panaseer, joins me to talk about the stress-filled role of the Chief Information Security Officer. Jonathan notes that the most challenging part of a CISO’s role, especially the CISO of a large, complex company, is the lack of full view of the organization’s assets and points of vulnerability. Jonathan tells us how Panaseer is working to create a trusted and validated system of record to ensure accurate and good faith recording of actions, strategies, and decisions to accept or mitigate business risks. All this, and a discussion of the CISO as one of the story-makers in the C-suite, today on Cyber Work! 0:00 - Firing CISO's after cybersecurity breaches4:23 - First interest in cybersecurity and tech7:41 - Working with cybersecurity leaders across the world11:17 - International sales work19:12 - Stave off burnout as a CISO 28:20 - Notion of asset detection 32:06 - Culture of sacking CISOs 43:06 - Better CISO involvement 49:09 - Cybersecurity career mapping strategies57:13 - Learn more about Jonathan Gill and Panaseer59:09 - Outro– Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free– View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.

Today on Cyber Work, I’m introducing you to Dr. Georgianna, or “George” Shea, the chief technologist at the Foundation for Defense of Democracies’ Center on Cyber and Technology Innovation. Shea finds new and developing technologies and develops pilot programs for implementation in a variety of locales, including DoD, the government sector and critical infrastructure. We talk about Shea's first taste of security, learn what it’s like to be knowledgeable in several dozen connected security spaces rather than being the all-knowing authority in one (and the knowledge that outside of the dozens you know, there are hundreds more to learn) and we answer the burning question: “Why don’t any of my interns know what NIST is?” All this, and some more talk about the security of the U.S. water supply (because you know I’m never going to stop asking about that), on today’s episode of Cyber Work! 0:00 - Cyber resilience5:19 - George Shea's early cybersecurity interest6:41 - How has cybersecurity changed in two decades?8:53 - Learning cybersecurity in the early days14:22 - Chief engineer at MITRE21:00 - Work with the Foundation for Defensive Democracies28:48 - Technology's pace versus policy31:25 - Cyber-informed engineering34:02 - Cybersecurity on old systems35:29 - Cyber resilience and defense41:41 - Working in cyber resiliency 44:01 - Why do so few know what NIST is?48:36 - The current state of state security 54:33 - Best career advice56:11 - Outro– Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free– View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.

Infosec and Cyber Work Hacks are helping train the red teamers and blue teamers of tomorrow with our boot camps and study materials for the CEH exam. But how does ethical hacking proficiency translate into a satisfying career? Infosec’s CEH boot camp instructor Akyl Phillips has plenty of strategies to help you get focused and stay focused on your studies, some excellent tips for keeping on top of the latest security changes and innovations, and how you’re going to push past uncertainty and into the work of putting one foot in front of another in your quest to become a bona-fide, in-demand ethical hacker! Keep the enthusiasm up when you check out today’s Cyber Work Hack. 0:00 - Ethical hacker career1:57 - Testing for the CEH certification2:55 - Career paths to pursue with CEH certification5:08 - Working in pentesting or ethical hacking7:55 - Unglamours side of ethical hacking 9:49 - How to keep up with new tech11:39 - Switching careers to ethical hacking12:45 - Preparing for a CEH role interview13:23 - Don't fear a cybersecurity career15:03 - Outro– Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free– View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.

Today on Cyber Work, I talked with Etay Maor, Chief Security Strategist with Cato Networks. Etay is a founding member of the Cato Cyber Threats Research Lab, or CTRL — see what they did there? — and he joins me to talk about their first CTRL report on attack patterns and methods. We’re going to talk about the most common attack vectors, why Log4J still rules the roost even against newer and flashier exploits, and we go deep into the many paths you can take to become a threat researcher, threat analyst, reverse engineer, and lots more. That’s all on today’s episode of Cyber Work! 0:00 - Intro4:10 - First interest in cybersecurity and tech5:15 - Becoming chief security strategist8:15 - Working in cybersecurity project management12:07 - Hacker targets and AI15:04 - The dark web and security access16:03 - The CTRL report in brief20:23 - Health care cybersecurity 22:49 - Different cyberattacks in different industries25:10 - Using security tools as a gateway27:03 - AI-enabled cyberattacks33:14 - Careers as a cybersecurity threat researcher36:09 - Figuring out where to specialize in cybersecurity41:31 - Important cybersecurity skills and experience45:58 - Hiring in cybersecurity49:30 - Future changes in AI and cyber tools55:38 - What is Cato Networks?57:13 - Outro– Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free– View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.