Here are my prepared answers for the Offensive security panel today at #BSidesNoVA 🧵
Would add get pissed that I didn't have time to do any technical work to the Mgr one towards the end 😢
Every job spent doing defense has made me a better offsec person.
Highly recommend if you can swing it
Not every day is gonna be awesome but if it has been days/weeks hating life. You need to do some reflection on why.
2nd thing was it is ok to try something and see if you like it and if you don't...it's ok to move on.
Offsec lead needs to make friends with everyone. Goal is that everyone is happy your team exists, you're integral to the company, and that you found the $thing before someone bad guy did
Also your empathy and integrity are crucial in this field. You'll frequently yourself with access to sensitive things. You need to be trusted to safeguard and not abuse that info
You still need to make and keep those relationships with other teams. That's most likely gonna involve trips to home base to occasionally meet ppl in person. It's also harder to say no to ppl you know
#empathy. Also remember to spread the pain around when possible. Internal team? Try to submit PRs, researched recommendations, and suggested detections for your findings
Done 😊
Share this Scrolly Tale with your friends.
A Scrolly Tale is a new way to read Twitter threads with a more visually immersive experience.
Discover more beautiful Scrolly Tales like this.