If you're looking for infosec employment today, I have a tip for weeding out potential employers. It's 2018 and the US is changing. If the potential employer requires drug testing (marijuana specifically), the culture is probably not infosec friendly. 1/n
BTW, I know some of you are going to unfollow me before I finish this thread, and I'm okay with that. 2/n
Marijuana is legal in a ton of areas now, including all of our biggest national conference venues. I'd be surprised if you can go to most DEFCON parties without coming into contact with it this year. That's not to mention the myriad other events in weed legal areas. 3/n
But drug testing as a corporate policy in. 2018 means that the org is slow to adapt to change, even when that change is slapping them in the face. If they can't get with the program here, how well do you think they'll adapt to infosec change? Yeah, that. 4/n
Also, you won't be working with the best at your new employer. You'll be working with the best who don't mind applying 1970's policies to 2018. Good luck with that. This is particularly true when the employer hires remote workers in weed friendly states. Tone-deaf. 5/n
There's so much more to say about this, but it's really about adapting to change. Orgs that adapt poorly to change in one area tend to do so in other areas. Please note, this thread has nothing to do with weed. At all. Period. It's about adapting to new realities. That's all 6/6
