improving the quality of hires v0 - owasp · tech_stack: — and or elastic stack'elk — aws,...

40
Improving the Quality of Your Cyber Security Hires via Pre- Interview Challenges Dinis Cruz CISO Photobox Group, 25th Jan 2017

Upload: others

Post on 05-Jun-2020

13 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Improving the Quality of Your Cyber Security Hires via Pre-

Interview ChallengesDinis Cruz

CISO Photobox Group, 25th Jan 2017

Page 2: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

The CV inefficient workflow

Page 3: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

High Velocity hiring

Page 4: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

How do you hire 6x senior highly skilful and

motivated talent

Page 5: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

What we did

● We didn’t want to do the normal recruitment process ● Photobox Group values are about shaking things and being

innovative ● Opportunity to create a great experience for candidates and

ourselves ● Win-win experience for all ● Create talent inventory

Page 6: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Proof that it is working

Page 7: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 8: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 9: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

v1.0

v1.1

Page 10: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Next we created https://pbx-group-security.com

All content: All code:

Page 11: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Static website created by and hosted by

Page 12: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 13: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 14: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

CTO blog entry

Page 15: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

CISO blog entry

Page 16: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Security team blogs (this one on GDPR history)

Page 17: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 18: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 19: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 20: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 21: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Real work scenarios

Page 22: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Test candidate’s tech skills and CV claims

Page 23: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 24: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 25: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 26: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 27: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 28: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 29: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 30: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

All content in Markdown and managed at

Page 31: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 32: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

The challenge file (note the file name)

Page 33: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

The role file (note the content as metadata)

Page 34: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Challenges mapping is easy

Page 35: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Customised candidates page

Page 36: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Candidate answers provided via Hugo site

Page 37: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Using Netlify for Candidates website’s CI

Page 38: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:
Page 39: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat:

Latest research and capabilities on this repo

Page 40: Improving the Quality of Hires v0 - OWASP · tech_stack: — and or Elastic Stack'ELK — AWS, WAF, Lambda — Risk — Python, Bash — Kibana, Grafana or Naqios cha red : challenges_optionat: