Cyber Security Bowl

Does anyone have experience with cyber risk quantification tools like balbix, safe security? I run risk management at my company. Is it comprehensive enough for risk identification etc?

So just found out someone stole my parents identity and filed their taxes. Not sure what the ramifications are, can yall provide possible scenarios on how they would use the tax return.

Unpopular opinion: mandatory security awareness training is mostly pointless. Employees just retake the quiz until they get the right answer. Better solutions out there?

What cert’s or key attributes would help you to move up into ciso. I was looking at SANS leadership as i think that would extend on my knowledge whilst cissp, cism i already have 10 years of effective… more

Be honest, have you ever reused the same password for a personal and work account?

For in-person SANS trainings, do they ship the books and hardware (esp the hardware!) ahead of time, or have you pick it up the first day before class? Im taking SEC617 in Austin which is supposed to … more

Hi. Looking for guidance advancing in Cybersecurity

Background:
- 7+ years w/ IAM projects at ACN and Deloitte, primarily in functional roles

Issue:
- Lack Security+, CISSP or other cyber certs
- Feeling stagnant and bored with I… more

Where do you guys go after consulting? I’ve been jumping between different types of projects for the last 2-3 years and it’s feels like I’ve just become cyber generalist who has technical coding skill… more

Remember that time the CEO clicked on a phishing email that looked like it came from his golf buddy? Yeah, neither does he. But do any of you have similar 'executive oops' stories?

I’m a staff 2 in Cyber Consulting. If I wanna stay in consulting but go somewhere outside of Big4 what are my options?

Do you guys know any good way to remember all the port numbers and protocols needed for the sec plus exam do we really use them all the time in the real world?

Just an FYI- I’m hiring at different levels within a Cyber practice for consulting roles.
- Consultant
- Senior Consultant
- Principal Consultant
- Sr ITAM Consultant - Governance & Operationalisation
- NYC

Feel… more

That one client who thinks they're too small or unimportant to be a target... makes my eye twitch. How do you deal with stubborn companies who refuse to prioritize security?

We all have that one incident that made us totally rethink our approach to security. What was yours, and how did you learn from it?

Thinking about doing a career shift to cloud. I have a risk management background. Anyone give insight on current market for jobs in cloud, career growth, salary, WLB? Also, any certifications? I saw … more

Do true entry level positions exist in cyber security anymore?

Hi, this is for Indians
Requesting you all to contribute to this list of good companies we cyber folks can target.

Deloitte
PwC
EY
AWS
Google
Amazon
JP Morgan
Goldman Sachs

Please continue in the comments sect… more

Are companies still hiring for Cyber Security managers?

Or just primarily security engineers and analysts. I used to be a cloud security engineer and then moved into security consulting. I have been s… more

"Just change your password to Password1!" The cringeworthy security advice I still hear from non-tech people. What tops your list of terrible tips?

7 year cybersecurity consultant exp. Burnt out of doing cyber work and want to get into cyber sales. Can you please offer some tips on how to get into it, or better yet, any leads?

Anyone ever implemented a supply chain risk management program? How? What steps did you take?

Hello,

I'm looking for a referral at Skechers.
Any assistance would be greatly appreciated.

Thank you.

Is it possible to learn cybersecurity as a hobby? It’s already hard enough to get a job anywhere… so might as well enjoy it on free time

Forget being 'realistic' for a second...if you could wave a magic wand, what's the salary that would make you feel truly valued for your work?

Hey everyone I am about to be interviewed for early career soc position in Boston I have sec+ and Google cyber security certification in Coursera what should be my salary expectation given I need to be spon… more

What consulting companies are still hiring for cyber/cloud security? Are the other Big 4 and boutiques still frozen?

I know PwC is in a hiring freeze except for specific niche areas. I have connected … more

Okay, maybe this is a bit of a brag, but I finally got an offer that smashed my expectations. It got me thinking - when did you realize you were actually being paid pretty well? Did it change anything… more

Why's it's so hard getting job in cybersecurity roles these days. I have the qualifications, I have a little experience which I'm eager to expand through employment, I have Certificates. Though not th… more

Anyone from Apple here willing to provide a referral please?

I’ve been working in IT Compliance for the past 6 years at a Big 4 and have my CISSP. I want to try something new, maybe more technical and definitely more range in salary growth. Any suggestions on c… more

Why is it always a power struggle trying to get other departments to follow basic security protocols? It shouldn't be this hard to get people to use strong passwords! Anyone have strategies for m… more

Are cyber industry roles paying better than consulting these days? Or maybe it’s always been that way?

I haven’t been able to find anything higher than $105K for 5+ years of consulting experience. It … more

Hi, looking for referrals from the following companies regarding Cyber consulting, information assurance, it business analysis, security consultants. I have 2-3 years in Cyber/IT GRC, security+, and a cyber masters degree.more

What do folks think about moving from Big4 to a small boutique consulting firm? In cyber. For someone that is mid-career is this a good move? It is not forced through a riff or anything, but a volunt… more