SlideShare une entreprise Scribd logo
1  sur  15
EXPLOITING THE RECRUITMENT
PROCESS
Jason Frank
Director, Adaptive Threat
Division
Veris Group, LLC
Doug Munro
Director of Recruiting
Veris Group, LLC
AGENDA
• The Recruitment Process
Resumé
Recruitment Screen
Technical Challenges
Technical Screen
Management Screen
Cultural Fit Test
• Summary and Wrap-Up
Resume
Recruitment
Screen
Technical
Challenges
Technical
Screen
Management
Screen
Cultural Fit
Test
Hire
Decision
THE FULL RECRUITMENT PROCESS
THE RESUMÉ – WHAT WE ARE LOOKING FOR
Main Criteria: Do you have the passion to be
successful?
Have you presented anywhere?
What projects are you working on?
Do you have a blog?
Are you attending meetups and conferences?
• Do you have a relevant technical foundation?
• Are you well-rounded?
• Are you current with your tools?
• Can you express methodologies?
• Do you have relevant meaningful certifications?
(OSCP, OSCE, OSEE)
Shannon Lucas
Former Drummer
for Black Dahlia
Murder
THE RESUMÉ – THE FINER POINTS
Clean, Easy-to-Read Resumé
• Arial, Helvetica, Verdana
• Align text left
• Strategic use of italics, bold, CAPS, and
bullets
• Tailor your keywords
• Use Grammarly or LanguageTool to avoid
mistakes
THE RESUMÉ – TELL US A STORY
• Show a progression
• You have 1/3 of a page to capture attention
• Align your online profiles to your resume
• Social media follows you to the grave
RECRUITMENT SCREEN
Purpose: To determine if we are going to be able to accommodate the job and
lifestyle requirements
• Motivations for Change?
• Certifications
• Clearance or Clearable?
• Experience Levels – Penetration Tester
Senior – 5 to 8 Years of Experience
Mid – 3 to 5 Years of Experience
Junior - 0 to 3 Years of Experience
• Travel Requirements – 25%
TECHNICAL/WRITING CHALLENGES
Purpose: To assess the candidate’s ability for critical thinking,
resourcefulness, and written communication
• Scripting Challenges – Problem Solving
• Online CTF Exercises
• Technical Write-up of Thought Process
• Report Corrections
Missing Details
Clarity
Grammar
TECHNICAL SCREEN
Purpose: To determine the candidate’s technical
depth
• Review the technical challenges – ensure full
understanding
• Know the tools and technical resources
highlighted on your resume
• You will be asked
• Looks better if you admit your knowledge
is limited
• Tools and Methodologies
• Deep dive into concepts and technical
details
• Evaluates depth of understanding
MANAGEMENT SCREEN
Purpose: Determine how you fit within the team
• Complete overview of company and team
direction
• Are you onboard?
• Is this a medium term commitment versus a near
term solution?
3-5 year option versus monthly
In services, longer term direction is dependent on
people
• Address questions, concern, or compensation
ONSITE INTERVIEW
Purpose: To determine if you are a cultural fit within the team
• Every team has a persona, do you mesh?
• Interface with multiple people at various levels on the team
• Discussions occur for every potential hire
• Red Flags
Attitude
Excessive Ego
Closed Mentality – Knowledge Sharing
PROCESS SUMMARY
Potential
Candidate
Passion
Written
Communicat
ion
Verbal
Communicat
ion
Technical
Depth
Cultural
Fit
ADDITIONAL TIPS
• You are more than your resume, prove it
• Be responsive to requests during the recruitment process
• Create and contribute
• Ask questions
• Participate in the industry
• Show your passion
• “10 Things That Require Zero Talent” -
https://www.linkedin.com/pulse/10-things-require-zero-talent-donn-carr
• “10 TIPS FOR ASPIRING SECURITY PROFESSIONALS” -
https://enigma0x3.net/2015/04/15/10-tips-for-aspiring-security-
professionals/
RESOURCES – DO YOUR HOMEWORK!
• Figure out the message of your target and review their content
• Company Blogs and Personal Blogs of Employees
• http://blog.harmj0y.net/
• http://www.exploit-monday.com/
• http://www.sixdub.net/
• https://enigma0x3.net/
• https://implicitdeny.org/
• http://www.rvrsh3ll.net/blog/
• http://xorrior.com/
• http://invoke-ir.com/
QUESTIONS?

Contenu connexe

Tendances (11)

Chap021
Chap021Chap021
Chap021
 
Scoring rubric for academic presentation
Scoring rubric for academic presentationScoring rubric for academic presentation
Scoring rubric for academic presentation
 
SML Webinar - Facilitating High Impact Virtual Meetings
SML Webinar -  Facilitating High Impact Virtual MeetingsSML Webinar -  Facilitating High Impact Virtual Meetings
SML Webinar - Facilitating High Impact Virtual Meetings
 
Empathy map
Empathy mapEmpathy map
Empathy map
 
effective communication
effective communication effective communication
effective communication
 
Soft Skills & the Future of Work
Soft Skills & the Future of WorkSoft Skills & the Future of Work
Soft Skills & the Future of Work
 
To P.E. or not to P.E. Is that the Question? Discussion of the Technical Gap ...
To P.E. or not to P.E. Is that the Question? Discussion of the Technical Gap ...To P.E. or not to P.E. Is that the Question? Discussion of the Technical Gap ...
To P.E. or not to P.E. Is that the Question? Discussion of the Technical Gap ...
 
Presentation skills
Presentation skillsPresentation skills
Presentation skills
 
presentation skill
presentation skillpresentation skill
presentation skill
 
Sson open house 5 disciplines of great transition teams
Sson open house   5 disciplines of great transition teamsSson open house   5 disciplines of great transition teams
Sson open house 5 disciplines of great transition teams
 
Paresh jadav
Paresh jadavParesh jadav
Paresh jadav
 

En vedette

Millones
MillonesMillones
Millones
c_oby17
 
ข้อสอบนายสิบทหารบกปี 2553
 ข้อสอบนายสิบทหารบกปี 2553 ข้อสอบนายสิบทหารบกปี 2553
ข้อสอบนายสิบทหารบกปี 2553
Pongsatorn Promwan
 

En vedette (13)

Millones
MillonesMillones
Millones
 
CV_17012016
CV_17012016CV_17012016
CV_17012016
 
Best Nail Salons in Dubai Area
Best Nail Salons in Dubai AreaBest Nail Salons in Dubai Area
Best Nail Salons in Dubai Area
 
แนวข้อสอบประชาสัมพันธ์ กองทัพอากาศ
แนวข้อสอบประชาสัมพันธ์ กองทัพอากาศแนวข้อสอบประชาสัมพันธ์ กองทัพอากาศ
แนวข้อสอบประชาสัมพันธ์ กองทัพอากาศ
 
The heart
The heartThe heart
The heart
 
Изучение лекарственных взаимодействий [Investigation of drug interactions]
Изучение лекарственных взаимодействий [Investigation of drug interactions]Изучение лекарственных взаимодействий [Investigation of drug interactions]
Изучение лекарственных взаимодействий [Investigation of drug interactions]
 
The Effect of Free Cooling on Reducing Total Energy Consumption for Telecommu...
The Effect of Free Cooling on Reducing Total Energy Consumption for Telecommu...The Effect of Free Cooling on Reducing Total Energy Consumption for Telecommu...
The Effect of Free Cooling on Reducing Total Energy Consumption for Telecommu...
 
Identidades vetoriais
Identidades vetoriaisIdentidades vetoriais
Identidades vetoriais
 
Auditory visualreflexes
Auditory visualreflexesAuditory visualreflexes
Auditory visualreflexes
 
Social inclusion through European School Sport Day
Social inclusion through European School Sport Day Social inclusion through European School Sport Day
Social inclusion through European School Sport Day
 
Corrections for practice questions
Corrections for practice questionsCorrections for practice questions
Corrections for practice questions
 
ข้อสอบนายสิบทหารบกปี 2553
 ข้อสอบนายสิบทหารบกปี 2553 ข้อสอบนายสิบทหารบกปี 2553
ข้อสอบนายสิบทหารบกปี 2553
 
05 Social life of small urban spaces
05 Social life of small urban spaces05 Social life of small urban spaces
05 Social life of small urban spaces
 

Similaire à Exploiting the Recruitment Process

College Program - I Want an Upgrade - Veronica Nelson
College Program - I Want an Upgrade - Veronica NelsonCollege Program - I Want an Upgrade - Veronica Nelson
College Program - I Want an Upgrade - Veronica Nelson
Career Communications Group
 

Similaire à Exploiting the Recruitment Process (20)

Preparing for an interview
Preparing for an interviewPreparing for an interview
Preparing for an interview
 
College Program - I Want an Upgrade - Veronica Nelson
College Program - I Want an Upgrade - Veronica NelsonCollege Program - I Want an Upgrade - Veronica Nelson
College Program - I Want an Upgrade - Veronica Nelson
 
Dietetics resume workshop
Dietetics resume workshopDietetics resume workshop
Dietetics resume workshop
 
Facebook's Official Guide to Technical Program Management Candidates
Facebook's Official Guide to Technical Program Management CandidatesFacebook's Official Guide to Technical Program Management Candidates
Facebook's Official Guide to Technical Program Management Candidates
 
The 21st Century Administrative Professional
The 21st Century Administrative ProfessionalThe 21st Century Administrative Professional
The 21st Century Administrative Professional
 
Marc Roginsky - How to Deliver Effective Client-facing Presentations
Marc Roginsky - How to Deliver Effective Client-facing PresentationsMarc Roginsky - How to Deliver Effective Client-facing Presentations
Marc Roginsky - How to Deliver Effective Client-facing Presentations
 
Interview Skills
Interview SkillsInterview Skills
Interview Skills
 
Skill vs. Attitude: What Makes the Best Candidate?
Skill vs. Attitude: What Makes the Best Candidate?Skill vs. Attitude: What Makes the Best Candidate?
Skill vs. Attitude: What Makes the Best Candidate?
 
Introduction to Professional Development 231112
Introduction to Professional Development 231112Introduction to Professional Development 231112
Introduction to Professional Development 231112
 
Effective Communication With Virtual Teams
Effective Communication With Virtual TeamsEffective Communication With Virtual Teams
Effective Communication With Virtual Teams
 
Managing High Performance Teams
Managing High Performance TeamsManaging High Performance Teams
Managing High Performance Teams
 
Managing High Performance Project Teams
Managing High Performance Project TeamsManaging High Performance Project Teams
Managing High Performance Project Teams
 
Interview preparation workshop
Interview preparation workshopInterview preparation workshop
Interview preparation workshop
 
International Students - Interview Skills and Assessment Centres
International Students - Interview Skills and Assessment CentresInternational Students - Interview Skills and Assessment Centres
International Students - Interview Skills and Assessment Centres
 
Cracking Interview: The Ultimate Cheat Sheet on Soft Skills
Cracking Interview: The Ultimate Cheat Sheet on Soft SkillsCracking Interview: The Ultimate Cheat Sheet on Soft Skills
Cracking Interview: The Ultimate Cheat Sheet on Soft Skills
 
Creative Research Environments
Creative Research EnvironmentsCreative Research Environments
Creative Research Environments
 
Training needs analysis, skills auditing and training
Training needs analysis, skills auditing and trainingTraining needs analysis, skills auditing and training
Training needs analysis, skills auditing and training
 
Open inclusion presentation at Zero project conference Feb2018
Open inclusion presentation at Zero project conference Feb2018 Open inclusion presentation at Zero project conference Feb2018
Open inclusion presentation at Zero project conference Feb2018
 
OD for Technical People
OD for Technical PeopleOD for Technical People
OD for Technical People
 
MATC Scholars Program: Dr. Ibibia Dabipi
MATC Scholars Program: Dr. Ibibia DabipiMATC Scholars Program: Dr. Ibibia Dabipi
MATC Scholars Program: Dr. Ibibia Dabipi
 

Dernier

Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
panagenda
 

Dernier (20)

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
 
Top 5 Benefits OF Using Muvi Live Paywall For Live Streams
Top 5 Benefits OF Using Muvi Live Paywall For Live StreamsTop 5 Benefits OF Using Muvi Live Paywall For Live Streams
Top 5 Benefits OF Using Muvi Live Paywall For Live Streams
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 
Boost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivityBoost PC performance: How more available memory can improve productivity
Boost PC performance: How more available memory can improve productivity
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost SavingRepurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
 
HTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesHTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation Strategies
 
Deploy with confidence: VMware Cloud Foundation 5.1 on next gen Dell PowerEdg...
Deploy with confidence: VMware Cloud Foundation 5.1 on next gen Dell PowerEdg...Deploy with confidence: VMware Cloud Foundation 5.1 on next gen Dell PowerEdg...
Deploy with confidence: VMware Cloud Foundation 5.1 on next gen Dell PowerEdg...
 
2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...2024: Domino Containers - The Next Step. News from the Domino Container commu...
2024: Domino Containers - The Next Step. News from the Domino Container commu...
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024Axa Assurance Maroc - Insurer Innovation Award 2024
Axa Assurance Maroc - Insurer Innovation Award 2024
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024The 7 Things I Know About Cyber Security After 25 Years | April 2024
The 7 Things I Know About Cyber Security After 25 Years | April 2024
 
Scaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organizationScaling API-first – The story of a global engineering organization
Scaling API-first – The story of a global engineering organization
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
 
Manulife - Insurer Innovation Award 2024
Manulife - Insurer Innovation Award 2024Manulife - Insurer Innovation Award 2024
Manulife - Insurer Innovation Award 2024
 
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, AdobeApidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 

Exploiting the Recruitment Process

  • 1. EXPLOITING THE RECRUITMENT PROCESS Jason Frank Director, Adaptive Threat Division Veris Group, LLC Doug Munro Director of Recruiting Veris Group, LLC
  • 2. AGENDA • The Recruitment Process Resumé Recruitment Screen Technical Challenges Technical Screen Management Screen Cultural Fit Test • Summary and Wrap-Up
  • 4. THE RESUMÉ – WHAT WE ARE LOOKING FOR Main Criteria: Do you have the passion to be successful? Have you presented anywhere? What projects are you working on? Do you have a blog? Are you attending meetups and conferences? • Do you have a relevant technical foundation? • Are you well-rounded? • Are you current with your tools? • Can you express methodologies? • Do you have relevant meaningful certifications? (OSCP, OSCE, OSEE) Shannon Lucas Former Drummer for Black Dahlia Murder
  • 5. THE RESUMÉ – THE FINER POINTS Clean, Easy-to-Read Resumé • Arial, Helvetica, Verdana • Align text left • Strategic use of italics, bold, CAPS, and bullets • Tailor your keywords • Use Grammarly or LanguageTool to avoid mistakes
  • 6. THE RESUMÉ – TELL US A STORY • Show a progression • You have 1/3 of a page to capture attention • Align your online profiles to your resume • Social media follows you to the grave
  • 7. RECRUITMENT SCREEN Purpose: To determine if we are going to be able to accommodate the job and lifestyle requirements • Motivations for Change? • Certifications • Clearance or Clearable? • Experience Levels – Penetration Tester Senior – 5 to 8 Years of Experience Mid – 3 to 5 Years of Experience Junior - 0 to 3 Years of Experience • Travel Requirements – 25%
  • 8. TECHNICAL/WRITING CHALLENGES Purpose: To assess the candidate’s ability for critical thinking, resourcefulness, and written communication • Scripting Challenges – Problem Solving • Online CTF Exercises • Technical Write-up of Thought Process • Report Corrections Missing Details Clarity Grammar
  • 9. TECHNICAL SCREEN Purpose: To determine the candidate’s technical depth • Review the technical challenges – ensure full understanding • Know the tools and technical resources highlighted on your resume • You will be asked • Looks better if you admit your knowledge is limited • Tools and Methodologies • Deep dive into concepts and technical details • Evaluates depth of understanding
  • 10. MANAGEMENT SCREEN Purpose: Determine how you fit within the team • Complete overview of company and team direction • Are you onboard? • Is this a medium term commitment versus a near term solution? 3-5 year option versus monthly In services, longer term direction is dependent on people • Address questions, concern, or compensation
  • 11. ONSITE INTERVIEW Purpose: To determine if you are a cultural fit within the team • Every team has a persona, do you mesh? • Interface with multiple people at various levels on the team • Discussions occur for every potential hire • Red Flags Attitude Excessive Ego Closed Mentality – Knowledge Sharing
  • 13. ADDITIONAL TIPS • You are more than your resume, prove it • Be responsive to requests during the recruitment process • Create and contribute • Ask questions • Participate in the industry • Show your passion • “10 Things That Require Zero Talent” - https://www.linkedin.com/pulse/10-things-require-zero-talent-donn-carr • “10 TIPS FOR ASPIRING SECURITY PROFESSIONALS” - https://enigma0x3.net/2015/04/15/10-tips-for-aspiring-security- professionals/
  • 14. RESOURCES – DO YOUR HOMEWORK! • Figure out the message of your target and review their content • Company Blogs and Personal Blogs of Employees • http://blog.harmj0y.net/ • http://www.exploit-monday.com/ • http://www.sixdub.net/ • https://enigma0x3.net/ • https://implicitdeny.org/ • http://www.rvrsh3ll.net/blog/ • http://xorrior.com/ • http://invoke-ir.com/