Joe McCray Pentester training graduates into Job Hire?

[Tony Turner]

http://strategicsec.com/pentest-candidate-program/

This is a curious approach. Discuss.

-Tony

[L.T. Easterly]

Eh, I would have benefited from a class or two on designing a specific test for a specific (RHEL) environment, as I was recently asked to do for my group. I'm normally in incident response but needed to design a cursory test to actually evaluate the IDS at a remote site. 

We got through it but designing a better strategy for the test was something I could have benefited from. Price isn't as bad as I'd anticipated, but not sure I'd cough up the cash from my own pocket until I'd talked to some prior graduates ;-)

--
You received this message because you are subscribed to the Google Groups "DC407" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dc407+un...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

__________________________________________________________________________________________

AOR 8600 MKII/Alinco DJ-X11 :: RFSpace SDR-IQ :: Pixel Loop RF-1B  :: QTH KMLB/Eau Galilie Florida
SDR Captures/loggings posted to: http://youtube.com/uncorq when audio quality allows.
__________________________________________________________________________________________

[Willa Riggins]

I'm conflicted on this, as I know we do a similar training at LM. I think penetration testing, like many IT careers, requires a very tuned personality and mindset. Teaching that is hard and testing it even harder. Skills are helpful but really serve as a common denominator. 

Like corq mentioned, we often run into very specific test parameters. These tests aren't necessarily taxing standard skills or knowledge but rather require the tester to think like an attacker and really go outside their own knowledge. 

~ willa

[Pat O'Neil]

As a new guy in security, things like this appeal to me. I'm stuck in the need-experience-to-get-experience Catch-22. I've been considering doing the OSCP program, and I've heard good things about it. After shelling out for a GSEC my training budget is pretty much shot, so something like McCray's training becomes more appealing.

-Pat

On Sunday, November 16, 2014 1:26:52 AM UTC-5, Abyss Knight wrote:

I'm conflicted on this, as I know we do a similar training at LM. I think penetration testing, like many IT careers, requires a very tuned personality and mindset. Teaching that is hard and testing it even harder. Skills are helpful but really serve as a common denominator. 

Like corq mentioned, we often run into very specific test parameters. These tests aren't necessarily taxing standard skills or knowledge but rather require the tester to think like an attacker and really go outside their own knowledge. 

~ willa

On Saturday, November 15, 2014, L.T. Easterly <cor...@gmail.com> wrote:

Eh, I would have benefited from a class or two on designing a specific test for a specific (RHEL) environment, as I was recently asked to do for my group. I'm normally in incident response but needed to design a cursory test to actually evaluate the IDS at a remote site. 

We got through it but designing a better strategy for the test was something I could have benefited from. Price isn't as bad as I'd anticipated, but not sure I'd cough up the cash from my own pocket until I'd talked to some prior graduates ;-)

On Sat, Nov 15, 2014 at 11:35 PM, Tony Turner <> wrote:

http://strategicsec.com/pentest-candidate-program/

This is a curious approach. Discuss.

-Tony

--
You received this message because you are subscribed to the Google Groups "DC407" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dc407+unsubscribe@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--

__________________________________________________________________________________________

AOR 8600 MKII/Alinco DJ-X11 :: RFSpace SDR-IQ :: Pixel Loop RF-1B  :: QTH KMLB/Eau Galilie Florida
SDR Captures/loggings posted to: http://youtube.com/uncorq when audio quality allows.
__________________________________________________________________________________________

--
You received this message because you are subscribed to the Google Groups "DC407" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dc407+unsubscribe@googlegroups.com.