CYBERSECURITY JOB HUNTING GUIDE
Understand THE company
Author: Stefan Waldvogel
To write an effective resume understand the company.
Let us say you wrote the first draft but you do not feel very confident about it. You can do a lot more! Try to understand the company. The starting point is the web page. What is your first impression? Here you see bright colors and blue. The website is friendly, but you can get more out of it. This company works with two tools: Lexico and DNSense. I never heard these names before, but if I want this job, I have to know more about it. Maybe they are OpenSource or offer a free trial and I can test it? If you cannot find information about them, ask employees maybe there is a similar product and you can brush up on your skills.
This company is a consulting company and the customer is the center. If you go into an interview, you have to know this.
What else can you get? Install the browser extension Netcraft. You get details about how old the site is and other details. The site report is very useful if you are not sure about a web page. You want to see a hidden thing:
This company is a consulting company and the customer is the center. If you go into an interview, you have to know this.
What else can you get? Install the browser extension Netcraft. You get details about how old the site is and other details. The site report is very useful if you are not sure about a web page. You want to see a hidden thing:
Former Hackers, Fighting Hackers. This is a hidden gem. The Netcraft Risk Rating is 0 and smaller companies often have 1 or 2. Is this all? No! Install Wappalyzer to see more details.
If you get version numbers, google for vulnerabilities. A lot of companies use old jQuery versions with XSS vulnerabilities. Maybe this is a problem, maybe not, but if you see a 5-year-old Apache…. and this company sells security products? To me, this would be a huge red flag.
We can do more…
This company is small, but we can use google / LinkedIn to find some names. Remember, networking is big. Why can you not add some employees and the company to your professional network and start a talking to some of them?
If you do excellent research, you can find a lot of details about the people and the company. The web page does not mention a name, but most likely I know the author. One piece of advice: Do not dig too deep, business is business, but a full OSINT to get a private number is too much.
We can do more…
This company is small, but we can use google / LinkedIn to find some names. Remember, networking is big. Why can you not add some employees and the company to your professional network and start a talking to some of them?
If you do excellent research, you can find a lot of details about the people and the company. The web page does not mention a name, but most likely I know the author. One piece of advice: Do not dig too deep, business is business, but a full OSINT to get a private number is too much.
© 2021. This work is licensed under a CC BY-SA 4.0 license