You're building an Information Security team. What qualities should you look for in a potential hire?

In my experience, technical expertise is essential for analysing security logs, network traffic, system events, and other data sources to identify potential security incidents, anomalies, or indicators of compromise. This requires knowledge of relevant tools, protocols, and forensic techniques. There is no running away from this one :D

Como muitas vezes o óbvio precisa ser dito, é essencial que o time de segurança da informação tenha sólido conhecimento de conceitos, ferramentas e frameworks para propor um ecossistema resiliente. Além disso, uma qualidade desejada é a busca constante por atualização, mantendo o ambiente seguro mesmo que novas ameaças possam surgir.

Ensure your team possesses a solid understanding of core information security domains, including: Network security (firewalls, intrusion detection/prevention systems) Cryptography (encryption, hashing, digital signatures) Malware analysis (identifying and understanding malicious software) Incident response (handling security incidents effectively) Penetration testing (identifying vulnerabilities in systems)

A primeira coisa que eu procuro é o skill da raiz da palavra Hacker! Pessoas curiosas e que buscam sempre alternativas rápidas e simples para solucionar os problemas do dia-a-dia entendo que é fundamental para trabalhar com segurança.

When building an Information Security team, prioritizing candidates with a blend of technical expertise, analytical skills, and adaptability is crucial. Look for individuals with a deep understanding of cybersecurity principles and technologies, coupled with a proactive mindset to stay ahead of emerging threats. Strong communication skills are essential for effectively conveying complex security concepts to diverse stakeholders, while a collaborative attitude fosters teamwork and knowledge sharing within the team. Additionally, candidates who demonstrate a commitment to continuous learning and staying updated with industry trends will contribute significantly to the team's success in navigating the ever-evolving landscape of cybersecurity.

Technical expertise is vital for analyzing security data, like logs and network traffic, to detect potential incidents. In my previous role as a Security Analyst, I used SIEM tools for in-depth analysis, requiring knowledge of protocols and tools like Wireshark. Incident response experience was crucial; I successfully contained a malware outbreak by isolating systems swiftly. Translating technical insights into action is key – it's about not just identifying threats but understanding their broader impact on an organization's infrastructure and coordinating effective responses.

Although the security area has several branches, in all of them a balance is necessary between technical knowledge, analytical thinking and correct communication and resilience. Knowing technical concepts is important so that a professional can deal with demands from different areas on a daily basis, such as development, infrastructure, networks, among others. Knowing that technically a professional can evolve, I understand that some other skills can be even more important for hiring than technical knowledge.

Ao formar uma equipe de Segurança da Informação, é crucial buscar candidatos com experiência sólida e conhecimento técnico abrangente, habilidades analíticas e de resolução de problemas, capacidade de comunicação clara e eficaz, foco em resultados e orientação para soluções, ética e integridade, além de habilidades sólidas de trabalho em equipe. Essas qualidades garantem que a equipe seja capaz de identificar e mitigar ameaças de segurança, comunicar efetivamente os riscos e colaborar com sucesso com outras partes interessadas na organização.

Security analysts often encounter complex security issues and incidents that require logical reasoning and problem-solving skills to resolve effectively. In all the cyber security teams ive been a part of, a critical skill we always encouraged and tried to develop was analytical thinking. It enables analysts to break down complex problems into smaller, manageable components, identify root causes, and develop appropriate solutions. Analytical thinking helps you identify patterns, anomalies, and indicators of compromise in large volumes of data, such as security logs, network traffic, and system events. In any information security interview you attend, this is a crucial skill the interviewers are looking for!

Analytical thinking enables your team to break down problems, identify root causes, and navigate interconnected systems to develop effective solutions to issues neon the job.

Analytical thinking along with resilience are the two most important aspects of a professional's hard skills. Knowing how to work in times of crisis and making the right decisions will enable the professional to deliver more assertively. Having a vision beyond reach will allow you to prevent future situations and reduce the risks in any execution.

analytical thinking is crucial in cybersecurity. As a Security Analyst, I consistently applied analytical skills to break down complex security issues. For instance, during a phishing attack, I traced vectors, assessed potential impacts, and devised proactive solutions. Analytical thinking also played a key role in vulnerability assessments, where scrutinizing system configurations and code identified weaknesses. In incident response, it helped evaluate breach extents, assess compromised systems, and develop strategies. In summary, analytical thinking is pivotal in deconstructing problems, assessing risks, and devising effective security strategies, making it indispensable in the dynamic landscape of information security.

By cultivating a team with strong communication skills, you create an IS team that is not just technically proficient but also adept at engaging with stakeholders, building trust, and ultimately enhancing your organization's overall security structure.

O skill de comunicação deve estar na massa do sangue para que as pessoas que tem interação com ela, sempre consigam ter senso de urgência e entendimento do que está sendo tratado, bem como importância e gravidade dos riscos que tratamos.

Na minha experiência uma contratação chave para o time, é o profissional que possui habilidades de comunicação e se dispõe a aprender conhecimentos técnicos básicos, necessários para que possam criar conteúdos, relatórios e procedimentos precisos. Assim como apoiar o time técnico na gestão voltada para segurança da informação ou até mesmo para integrar o time de conscientização.

Nessa área o amor pelo tema é tão importante quanto a curiosidade (raiz da palavra hacker), pois em diversos momento de dificuldades essas duas skills são confrontadas fortemente.

By fostering a culture that embraces curiosity and passion, you'll cultivate an IS team that is not just technically proficient but also highly motivated, engaged, and adaptable.

By recruiting and cultivating individuals with strong integrity and ethical values, you create a team that operates with a strong moral compass.

Integridade e ética são condições básicas para as pessoas que trabalham com segurança. Como sempre digo: o dono da chave do cofre tem que ser a pessoa mais confiável para todos da empresa.

A liderança para esses times tem que ter conhecimento técnico, pois os integrantes tem que enxergar nesses líderes como pessoas de skill nas diversas áreas que a compõem. Além disso é fundamental que essa pessoa possua skill de liderança natural para que os liderados tenham sempre alguém para contar e tomar decisões assertivas.

Muito importante a habilidade de trabalho em equipe. O time de segurança da informação deve trabalhar em conjunto para aumentar a maturidade da empresa, com habilidades que se complementam e convergem para o mesmo objetivo de mitigar riscos e proteger as informações.

The three key elements that are core to every information security initiative are also desirable attributes in any potential hire who might work on those information security initiatives. These three attributes are those of the CIA triad: - Confidentiality: the ability to know what to share with whom, what not to share with whom, and the wisdom to know the difference - Integrity: knowing what is right, what is wrong, and the wisdom to know the difference - Availability: being available to the right people, not being available to the wrong people, and the wisdom to know the difference