Hi guys, I need your input on this.
Which one gives more weightage on long run.
1) Penetration test
2) Architecture reviews, threat modelling
3) Reviewing DAST and SAT reports.

I know penetration test is pure technical. But I am looking something for a longer run. Like after getting promotions, which level to move.
TIA

like
Posting as :
works at
You are currently posting as works at

Any leads?

What do you mean, combination of all the skills are required, even in pentest / red team engagements you may need to review code sometimes

Having an offer with these skillset in different company. I need to choose based on skillset which will be useful for me in a longer run. Basically I am a pentester.

I that case go for penetration tests, because no one just hires for threat modelling if you apply for a lead or manager job

In some companies web / mobile app testing can be part of application security. But offensive security/ red Teaming is totally different

I am interested

First read the post well

Related Posts

What are the Top MBAs outside of M7 to land an MBB role?

like

Hi, been stuck in the contract analysis/review cycle. I have asked a few recruiters how to make a lateral move into in-house. They told me to focus on contract management, which I have been doing for the past year. Now that I have, are there any sites besides “jobscan” that I can use to make sure my resume fits the job descriptions? Does anybody know any recruiters that could help me, as well?

like

Any directors jump to make P? How did it go? Tips to share?

Those who moved from MBB to Strategy& , why did you do it? Pros and cons?

like

Hey everyone - applying in R2 this year to Harvard, Stanford, Booth and Kellogg.

Graduated in 2017 from a top state school, GPA 3.88 and GRE 321 (quant 162, verbal 159) w/ 5.5 writing score. Asian female at a Big 4, worked in healthcare consulting and was fast track promoted in 1 year before switching into strategy/innovation consulting. Trying to pivot to VC and eventually raise my own VC firm targeting underrepresented founders.

What are my chances? Thanks!

like

1/2 Not sure this is the best Bowl, if not please let me know.
I’ve been working in algo-trading for 3 years and I hate it here. I feel like I’m not learning anything and I don’t trust my managers to know how to generate revenues (no strategic revenue growth in 3y) and I don’t even work in the math models or finance topics that seemed interesting when I joined.
I would like to pivot to Equity Research because they seem to know what they’re talking about and

I am in a tech IC position. One of friends switched to FAANG by converting the profile to consultant profile. The friend who might have less tech knowledge than me is now in FAANG and earning more. If the end goal would be that the friend might one day be a product manager and me an engineering manager taking instructions from the same friend, isn't consultant profile an easier path to growth. I had been practising DSA for years and the competition is only ever growing.

My employer has a sponsorship program that the CFA qualifies for. They sponsor 100% but only after 6 months of full-time permanent employment; thus I will qualify in may 2023 (I just started). Should I wait for may for them to pay, or pay the initial costs myself to avoid delaying my career longer? I'm 26 & 1/4th and just graduated college. My new role and future career aspirations are finance / computer engineering hybrid. Current employer is in private banking.

like

If I want to transition into M&A from audit, what are some basic things I should consider?

like

Can anyone be a Data Analyst ?

I mean is it worth trying to become one, specially if you have no knowledge whatsoever of what Data Analyst is and no mathematical background plus having decade of experience in other field.

like

Anyone tried the new Sanctions Certificate (CGSS) offered by ACAMS? Trying to see how difficult it is considering I don't have a lot of experience with sanctions compliance. I have CAMS & work in AML

like

I am an Audit S1 that wants to work in a B4 Forensics practice. Would it be best for me to accept an offer in Forensics at a much smaller firm (local, 150ish total employees) to gain experience and then try to move to B4 Forensics? Or should I stay in Audit and wait for B4 Forensics positions to open up? Please let me know your thoughts!

like

Just began studying for the CFE exam. I have access to past editions of the ACFE Fraud Examiners Manual. Does anyone have recommendations on where to get good practice questions? I’d like to avoid spending a fortune on the ACFE kit.

like

Really confused with choosing careers-
Product management as next step or Remain in Strategy Consulting of an IT organisation and switch to pureplay strategy firms?

Could anybody please guide what factors would you deliberate on and what kind of personality would suit for these roles?
I come from Research, Financial analysis background and recently moved into Consulting. I love deliberating on macro solutioning and solving business problems. My current skillsets are more aligned to Financerole

What are some good companies to grow as a customer success manager?

like

Why did you pick accounting as a major? I picked it because it was a safe choice and I just wanted a decent job after college.

like

I’ve been reading a lot of FIRE books lately and want somewhere to discuss. What are the biggest takeaways from your FIRE journey/ research?

like

Any teachers here who changed careers? What was the change?

like

Advice when looking for Tech Consulting internships in Chicago or DC Metro? My GPA (3.04) has disqualified me from most major companies. I've opted to focus my efforts into my student organizations and helping others reach their goals, in doing this I compromised for a B average. Are there any firms that will accept recommendation letters with the application? The networking route is also something I am exploring, but haven't had much success thus far. Any help is welcome! Have a great day!

like

More Posts

Does EY provide a cell phone or has tie ups with wireless providers for discounted phone and services? EY

like
like

For those of you who faked having children during this WFH period to establish some sort of WLB or whatever other reason… how are you going to spin it when we go back to the office/ client site?

like

Have you used go education or other screen capture software?

I received a job offer from company A and am currently negotiating salary. I have an interview with company B next week and know that they offer a higher base pay. There’s no guarantee that I will be offered a job at company B but my gut is telling me that company B would be a better fit for me. Should I accept the offer from company A, continue interview process with company B and then rescind my offer with company A if company B offers me a job? Will I be burning bridges?

like

What’re UX designers making at big tech?

likesmart

What will be my in hand salary??
Can anyone explain what is BOB and how it's works?Larsen & Toubro Infotech Mindtree L&T Technology Services Tata Consultancy

Post Photo
like

I was asked to recreate this stock image from online and have no idea how to start. I tried using merge shapes with a circle and a rectangle but things were coming out looking funny. Any help would be appreciated!

Post Photo
like

Looking for folks who can refer for Energy and Utilities space for Consultant/Senior Analyst designation. For BCG, McK, Bain for India location. Any leads are appreciated

like

Tonight we're meeting from 6:30–8 PM in Kobricks Coffee cafe side at 24th Ninth St, then heading downstairs to Troy Liqour Bar from 8pm–Onward located at 675 Hudson St.
Hope to see you all there!

Post Photo

Hello Fishers,

After how many days EY GDS releases the offer letter.. I have submitted the candidature form and had HR discussion..

Does that means I am selected?

Thanks.

like

I have submitted all the documents for pwc mumbai this Monday and today is Friday. Not recieved any call from HR till now? Anyone knows how much time it will take?

like

Do you ever conduct the hiring process for a research project? What do you look for in potential hires?

like

Hello Fishies can anyone from Deloitte refer me to the below job code / requisition id: 107655 . If you could DM would be great.

like

Anyone can help me with Navicat cracked version for Mac

like

www.pivotcitizenship.com A brighter future is aviating😃 Having a second passport is the best way to ensure a safe and flexible future for yourself and your family as well as securing a high paid job with low tax rate. Why be at the mercy of a single Government to control your destiny? As countries continue to close their borders to specific passport holders, dual citizenship is now necessary, and having two passports means always having more options. Visit our website today to get started.

Post Photo
like

TCS has given the BGV check to some vendor and today I got the message from that vendor to verify my Permanent address by clicking a link and then by enabling my location and taking selfie in front of house. I am not staying at my permanent address but I am at my present address. How can I take selfie and enable my mobile location and submit the form. Please someone suggest. @Tcs

Hi
Can anyone help me how should i explain my project on which i worked in my current company to the interviewer.would be very helpful if someone can help with the basic format from start to end or else can give example of their own project.

Thanks in advance

like

I am always looking for ways to integrate religion in my technology classes. I've done a scavenger hint, saint research, Catholic cathedral brochure...need some ideas for next year.

like

Anyone know of any stores in Chicago that buy used furniture? I have a massive and heavy executive desk I want to sell that will require movers to transfer, so I feel like I can’t go the usual routes of Facebook and Craigslist with much success. Any recs would be SO appreciated!

Post Photo
like

Additional Posts in Cyber Security Professionals

Hi All, which is best company to work for cyber security employees?

How are the salaries for infosec in India?
For a role of penetration tester/red team.
Please share this information according to your experience in the field and what you have been witnessing.
Need to know for these yoe:
1+ YOE
3+ YOE
5+ YOE
All types of companies, big4/product based/faang/ startups.

like

Sharks Plz suggest which to go for better growth and experience.
KPMG In. vs Aujus vs Paytm vs Upstox vs Eaton vs LRN vs Honeywell

Cyber Security and 1yr experience

like

Fishes profile ma kya likhu
Jo phle se likha hai vho bekar hai

Thanks in advance

Post Photo
like

Hello Folks,
Is it advisable for a person working in networking domain (YOE - 7.5) to move to information security?

like

Security Folks kindly advise please.!!
1. Is Comptia Security+ or Comptia Pentest+ certificate worth it.?
2. Should I prepare for CRTP or PNPT?
3. I should only focus on OSCP?

2yr experience in red teaming & preparing for my 1st switch in product based companies & FAANG

like

Hello fellow fishes, currently I am working as an Information Security Consultant and wanted to switch my career into Cloud Security.

I have around 6+ years of experience in Information Security which includes ISO 27001, NIST CSF, SOC 2 and PCI DSS.
I have also done some cloud certifications such as AZ-900, AZ-500, AWS Specialty Security and currently preparing for CCSK and CCSP.
Can anyone provide with any suggestions through which I can switch my career.

How much time do u need to prepare for ccsk?

Hi All
Which platform is best to connect with Palo Cortex XSOAR professionals in India

Hi all,

I am looking for a job switch and have 5 YOE as Information security analyst. Pls help me with any referrals.

like

Hello Fishies

I am currently working in an insurance firm for last 3.8 years as part of the senior SOC analyst.

Current CTC - 5.6 lpa
Skill sets - Incident Response, Threat Hunting
Currently based - Mumbai

This is my first company where I was hired as a fresher and moved up the ladder. While i am planning to move out, i realised i have no experience of the market standards for someone in the domain, How much are analysts in Blue Team SOCs being payed? How much should I expect?

like

Is anyone from Kroll or Security Brigade here?

like

What type of client mostly Aujas Cyber security have in VAPT?? How much percentage appraisal will happen there ? Aujas

like

Hey All,
With experience of 8 years all around the security domain. Which is the best role : A) Blue Team ( IR and Threat Hunting) B ) Security Architecture

What is the market range for a professional having 15+ yrs of experience into infosec? Location would be Bangalore.

What salary I can expect from advance auto parts and microfocus. Security Engineer, yoe 6

What’s the expected ctc for security analyst role with 6years of experience ?

like

Hey fishes,

I am working as a cloud engineer (managing enterprise cloud for the organisation), some common things I am working on right now are, setting up cloud governance framework, implementing guardrails, enforcing policy etc. I want to switch into cybersecurity expert (specially for cloud) can anyone guide me though the path, the dos and don’ts etc.

Thanks in advance 😀

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal