Our company has grown to the size that we are looking to specialize in the roles within the cybersecurity function. At a high level, we are diving into offensive security employees- colloquially also known as red team to act similar to a penetration tester attempting to exploit security, and a Blue team focused on defensive security, controls engineering, and incident detection / response.
Currently the Security Operations team is almost entirely focused on defensive security. We are starting recruiting for new employees to work in the offensive security capability. Form my experience in cybersecurity, and interacting with my network members working in cyber, successful penetration testers / red team members are "future focused",and "think like a black hat" reading and educating themselves on vulnerabilities discovered and how an adversary can exploit them. To summarize, learning how to learn.
I realize evaluating candidates how they learn and keep abreast of news within the cybersecurity profession may be somewhat subjective, because learning styles are different for all individuals. Also, the importance of events are often also subjective. For example, some sectors may be exposed more to a particular event / breach.
Edit to respond to comments and close vote
@DarkCygnus - its not so much there is a clear "expectation" for off - work learning, but just that a lot of learning happens organically. For example, many of us on the team subscribe to / contribute to podcasts , professional journals, or attend non - mandatory cybersecurity conferences. For some colleagues, learning overlaps with hobbies so learning is just organic without a clear separation between work vs personal life.
As to the close vote on question being too broad, I am asking how to assess how candidates learn of industry happenings and how to best assess their method of learning commitment, so I think question should be answerable.
How can I best objectively assess a candidates learning commitment and how they learn of news within the industry within specialized field in IT?
Given a certain amount of learning may happened outside of work, is such a question fair to the candidate? Would candidates likely see it as "intrusion" into their work - life balance and be turned off therefore?