devsecguy

7 ms·

1. 1.▲
   by devsecguy 8y ago

   He also said "With regards to what do I find interesting, honestly I would put offensive at the top of the list".
2. 2.▲
   by devsecguy 8y ago

   I never once said that certifications are required to do this work though did I?
3. 3.▲
   by devsecguy 8y ago

   Absolutely those are all important qualities but the idea that certs are completely worthless just doesn't hold any weight. Can I ask if you apply the same logic to the lawyers? Do you think the bar exam is pointless? What about charte
4. 4.▲
   by devsecguy 8y ago

   In the UK at least there has been a strong drive to regulate security companies through organisations like CREST and CHECK. The problem is that its an industry with a massive amount of hidden information. If somebody does a pen test on an c
5. 5.▲
   by devsecguy 8y ago

   Sorry but this "fuck certs" mentality just does not hold true for the security industry. It might be true in software but not here. The security industry is much more regulated than software, and with good reason - how is a compan
6. 6.▲
   by devsecguy 8y ago

   Hey, I'm about 8 months ahead of you, I quit my dev job and studied full time to get the OSCP and then took a job as a security consultant with the aim of being a full-time penetration tester. Now I'm going back into development.