Adventures in Pentester Recruitment - Judging Weak Sauce from Fu in the Age of Experts

No ratings

Presented at InfoSecSouthWest 2014 by

Kevin Dunn

Jessey Bullock

Adventures in Pentester Recruitment - Judging Weak Sauce from Fu in the Age of Experts In this lecture we will discuss our ongoing efforts in trying to answer one simple question - "are they any good?" When hiring a new member of staff in any profession the decision is fraught with pitfalls. But how do you hire a good Security Consultant? Consultants are by nature excellent talkers, making understanding their ability during an interview tricky. Do they really know that or are they just convincing based on what they've studied before coming to the interview? Conversely, some of the most technically gifted people have the reverse problem - they can't articulate themselves well enough to sell it at the interview. Did we pass up a genius because we couldn't understand them on interview day? For our team in Austin we wanted to really test people, allowing for maximum confidence going into the hiring decision. To us that meant hands-on- challenges that reflect the actual work that we do. Can they do it or can't they? Join us for this session and we'll show you what we learned with our challenges, the patterns we could see and the surprises we had along the way!