Search Results

I work as a security engineer / security analyst on the IT Security team at my workplace. … One of my core job duties is triaging , remediating / containing, and as necessary, escalating of security incidents. …

For several months now, I have working closely with our information security team to strengthen the security controls governing our PCI and SOX compliance efforts. … Last week, new security policies went live in the production environment. …

I am writing a report for a security review / audit that I completed of a business application used by my company. … This application stores and processes rather sensitive information which includes Personally Identifiable Information, including but not limited to social security numbers. …

My manager and senior management at my company has requested due diligence feedback on a prospective vendor our company is thinking of doing business with. It is the same company I asked about in this …

One of my duties at work is testing and verifying that necessary security requirements are in place before code and application updates are released to production environment. … Without additional manual testing, at least of what I feel would be high-impact vulnerabilities, I am not comfortable in signing off on security requirements testing results. …

I work in the cybersecurity field as a security analyst. As a part of my work I have gained decent experience with white hat penetration testing tools such as Snort, Burp Suite, MetaSploit etc. … I dont want to seem like a risky hire in terms of security. …

The CISSP certification is highly reputable and the most widely recognized certification amongst IT Security professionals. … I am updating my resume to reflect recent accomplishments and new responsibilities assumed in my changed job role, from an IT auditor to security analyst. …

and only with asset owner consent Given insider risk and vulnerabilities exploitation is a big , legitimate risk to businesses nowdays, my worry is that my side hobby of contributing to the white hat security …

I have recently joined the architectural review board (ARB) at the place where I work serving as the security representative. … As I am the sole representative of IT Security on the ARB, , I frequently request the opinions of team members on security controls design, risk management, and compliance verification. …

For National Cybersecurity Awareness Month in October, my employer is sponsoring a secure code warrior competition where teams who sign up are presented with software code with security vulnerabilities … As it turned out, none of the team members I was randomly assigned with had any prior application security experience or previous experience in related areas such as penetration testing, other than myself …

IA and Security departments are our most reliable allies. What are some practical ideas to improve tracking of electronic employe identities within a smaller company? …

I recently joined the information security team at my employer about a month ago. … Just this week, I started to participate in off hours on-call support as security must be available on a continuous basis. …

I work in IT Security as the team lead of the team. … For example, this week I was signing off on some code security reviews / new security implementation plans, and asked my team members why they thought these tasks being done and how the new security controls …

I work as the team lead on the IT Security team where I work. I have close to 8 years of experience in cybersecurity. Recently a junior engineer joined my team. … He has worked with some tools that are also widely used in security field such SonarQube or Nessus, but only in his previous role as a developer. …

I work as team lead of the IT Security team where I work. … Today we had a security incident (verified via tripped canary tokens / observed IOCs) and I had to coordinate all hands on deck meeting with the team with little notice. …