,
10 tweets,
2 min read
Read on Twitter
Having just spent the last 5 hours interviewing for a security engineer role (cloud) it became clear how bad our skills shortage is.
The cloud is more than just another persons network/computer and virtualisation. If your world has been traditional security such as physical fw/routers/proxies etc, then this new world is vastly different.
The concepts are too. Gone are the days of monolithic architecture. Today’s stack is a mix of micro services such as kubernertes/docker etc. Then linkerd/istio and co
Patch management? Why? Your instances should have a minimal lifespan. Tear down frequently. Build from a constantly updated template. Terraform is epic in this regard
Add infrastructure as code, along with AWS/Azure/GCP and you start to see a whole gap of much-needed security skills.
Just finding a security engineer who knows popular CI/CD pipelines and how a build process/sprint works is becoming harder and harder.
I guess what I’m trying to say is if you are looking at gaining new skills in preparation for modernising, today’s cloud, this is where I expected good security engineers to be today and tomorrow.
The security engineer role in my mind is changing rapidly. I’ve seen more need for code exp/exposure, good dev ops principles and people who love writing test cases and executing them.
Also I’ve had the immense pleasure of working with some stupendous engineers in the last few years. People like @pdp who is an epic hacker but an even better engineer.
If this does excite you, maybe come and join asto.io/careers/securi… design/build/break
