EP 61: Skills-based Certification and Training with John Strand

EP 61: Skills-based Certification and Training with John Strand

Author: Kip Boyle January 7, 2022 Duration: 37:46

https://www.yourcyberpath.com/61

In this episode, we talked with John Strand (Founder of Black Hills Information Security and Antisyphon InfoSec Training) about the importance of skills-based certification and training. John’s goal is the provide world-class skills-based training to everyone at an affordable price using a unique pay-what-you-can model.

Skills-based certification is different from traditional certifications in that they do not use multiple-choice exams to test your knowledge of the material and instead require candidates to prove their knowledge through real-world, work-related exercises. These skill-based certification courses are short in duration and extremely hands-on in nature.

During this discussion, we explain the differences between ANSI-based certifications and non-ANSI certifications. The importance of certifications in general to the hiring managers and human resources teams is also discussed because large organizations rely on these ANSI-based certifications. Smaller organizations, though, like Black Hills Information Security who has under 100 employees, don’t necessarily rely on certifications to find qualified candidates.

Cyber deception was also discussed, which is a way of setting up honey tokens in your domain servers to identify hackers, attackers, and penetration testers when they try to break into your system. John provides three quick tips to implement cyber deception in your network today!

What You’ll Learn

·     The importance of skills-based certifications

·     The difference between ANSI and non-ANSI certifications

·     How to use honeytokens and canary tokens to detect an attacker quickly


Relevant Websites For This Episode

·     Black Hills Information Security (https://www.blackhillsinfosec.com)

·     Antisyphon Training (https://www.antisyphontraining.com)

·     Canary Tokens (https://canarytokens.org)

·     Try Hack Me (https://tryhackme.com)

·     Hack the Box (https://www.hackthebox.com)

·     Holiday Hack Challenges (https://www.holidayhackchallenge.com)


Navigating a career in cybersecurity can feel like a maze without a clear map. Your Cyber Path: How to Get Your Dream Cybersecurity Job, hosted by Kip Boyle, cuts through the noise by focusing on the perspective of the people who actually make hiring decisions. This isn't just generic advice; it's a direct line to understanding what employers are truly looking for in candidates, from entry-level roles to advanced positions. Each episode delves into the practical, often unspoken, steps needed to build your skills, craft your resume, and ace interviews in this competitive field. You'll hear concrete strategies for bridging the gap between where you are now and that ideal job, all framed within the broader contexts of business, technology, and personal growth. Tune into this podcast for honest conversations that translate complex career pathways into actionable plans, helping you move forward with confidence. Whether you're considering a pivot or aiming to advance, the guidance here is rooted in real-world hiring dynamics, making it a valuable resource for anyone serious about building a future in cybersecurity.
Author: Language: English Episodes: 100

Your Cyber Path: How to Get Your Dream Cybersecurity Job
Podcast Episodes
EP 106:  All About Internships [not-audio_url] [/not-audio_url]

Duration: 38:00
https://www.yourcyberpath.com/106/ In this episode, we are discussing the much-anticipated topic of Internships! Internships are not that common in cybersecurity and that's because they are a huge long-term investment, w…
EP 105 : SDP 5 Work Factor [not-audio_url] [/not-audio_url]

Duration: 34:29
https://www.yourcyberpath.com/105/ In this episode, we are returning to the Security Design Principles series, this time with Work Factor. Work factor refers to how much work it’s going to take an adversary to attack you…
EP 104: Confidently Presenting with Meredith Grundei [not-audio_url] [/not-audio_url]

Duration: 49:43
https://www.yourcyberpath.com/104/ In this episode, our awesome host Jason Dion is back again with another episode of the Your Cyber Path podcast. This time, he’s accompanied by an amazing guest, Meridith Grundei. Meridi…
EP 103: SDP 4 Compromise Recording [not-audio_url] [/not-audio_url]

Duration: 30:43
https://www.yourcyberpath.com/103/ In this episode, we are back with our Security Design Principles series, this time discussing Compromise. In the constantly evolving tech world, we are constantly bombarded with new pro…
EP 102:  Passing CISSP and CISM exams with Ed Skipka [not-audio_url] [/not-audio_url]

Duration: 39:38
https://www.yourcyberpath.com/102/ In this episode, we are back with one of our favorite guests, Ed Skipka, to talk about his latest achievements, studying and passing both CISSP and CISM exams. To start, Ed goes on abou…
EP 101: SDP 3 Economy of Mechanism [not-audio_url] [/not-audio_url]

Duration: 23:58
https://www.yourcyberpath.com/101/ In this short episode, we are back discussing the Security Design Principles, with the third principle, Economy of Mechanism. Jason and Kip explain the principle of Economy of Mechanism…
Episode 100 - Best of YCP [not-audio_url] [/not-audio_url]

Duration: 1:43:42
https://www.yourcyberpath.com/100/ We're celebrating the 100th episode of Your Cyber Path podcast with a special edition episode. It's going to be a little different this time. We are going to sit back and reflect on all…
EP 99: How to use ChatGPT in your Job Search with Sean Melis [not-audio_url] [/not-audio_url]

Duration: 48:01
https://www.yourcyberpath.com/99/ In this episode, we are going over the latest trend in AI and NLP, ChatGPT, with our guest, Sean Melis, seasoned multi-modal developer and designer and the founder of bot•hello. In the b…
Episode 98: SDP2, Psychological Acceptability [not-audio_url] [/not-audio_url]

Duration: 28:47
https://www.yourcyberpath.com/98/ In this episode, we are back discussing Security Design Principles, and this time we are focusing on Psychological Acceptability. The Security design principles are crucial for your work…
EP 97:  Passwordless Authentication with James Azar [not-audio_url] [/not-audio_url]

Duration: 52:51
https://www.yourcyberpath.com/97/ In today’s episode, we discuss the emerging topic of passwordless authentication with our guest James Azar, CTO and CSO of AP4 group who are well known for their work in critical infrast…