Thread by @carnal0wnage

Here are my prepared answers for the Offensive security panel today at #BSidesNoVA 🧵

Would add get pissed that I didn't have time to do any technical work to the Mgr one towards the end 😢

Every job spent doing defense has made me a better offsec person.
Highly recommend if you can swing it

Not every day is gonna be awesome but if it has been days/weeks hating life. You need to do some reflection on why.

2nd thing was it is ok to try something and see if you like it and if you don't...it's ok to move on.

Offsec lead needs to make friends with everyone. Goal is that everyone is happy your team exists, you're integral to the company, and that you found the $thing before someone bad guy did

Also your empathy and integrity are crucial in this field. You'll frequently yourself with access to sensitive things. You need to be trusted to safeguard and not abuse that info

You still need to make and keep those relationships with other teams. That's most likely gonna involve trips to home base to occasionally meet ppl in person. It's also harder to say no to ppl you know

#empathy. Also remember to spread the pain around when possible. Internal team? Try to submit PRs, researched recommendations, and suggested detections for your findings

Done 😊