EP 61: Skills-based Certification and Training with John Strand

EP 61: Skills-based Certification and Training with John Strand

Author: Kip Boyle January 7, 2022 Duration: 37:46

https://www.yourcyberpath.com/61

In this episode, we talked with John Strand (Founder of Black Hills Information Security and Antisyphon InfoSec Training) about the importance of skills-based certification and training. John’s goal is the provide world-class skills-based training to everyone at an affordable price using a unique pay-what-you-can model.

Skills-based certification is different from traditional certifications in that they do not use multiple-choice exams to test your knowledge of the material and instead require candidates to prove their knowledge through real-world, work-related exercises. These skill-based certification courses are short in duration and extremely hands-on in nature.

During this discussion, we explain the differences between ANSI-based certifications and non-ANSI certifications. The importance of certifications in general to the hiring managers and human resources teams is also discussed because large organizations rely on these ANSI-based certifications. Smaller organizations, though, like Black Hills Information Security who has under 100 employees, don’t necessarily rely on certifications to find qualified candidates.

Cyber deception was also discussed, which is a way of setting up honey tokens in your domain servers to identify hackers, attackers, and penetration testers when they try to break into your system. John provides three quick tips to implement cyber deception in your network today!

What You’ll Learn

·     The importance of skills-based certifications

·     The difference between ANSI and non-ANSI certifications

·     How to use honeytokens and canary tokens to detect an attacker quickly


Relevant Websites For This Episode

·     Black Hills Information Security (https://www.blackhillsinfosec.com)

·     Antisyphon Training (https://www.antisyphontraining.com)

·     Canary Tokens (https://canarytokens.org)

·     Try Hack Me (https://tryhackme.com)

·     Hack the Box (https://www.hackthebox.com)

·     Holiday Hack Challenges (https://www.holidayhackchallenge.com)


Navigating a career in cybersecurity can feel like a maze without a clear map. Your Cyber Path: How to Get Your Dream Cybersecurity Job, hosted by Kip Boyle, cuts through the noise by focusing on the perspective of the people who actually make hiring decisions. This isn't just generic advice; it's a direct line to understanding what employers are truly looking for in candidates, from entry-level roles to advanced positions. Each episode delves into the practical, often unspoken, steps needed to build your skills, craft your resume, and ace interviews in this competitive field. You'll hear concrete strategies for bridging the gap between where you are now and that ideal job, all framed within the broader contexts of business, technology, and personal growth. Tune into this podcast for honest conversations that translate complex career pathways into actionable plans, helping you move forward with confidence. Whether you're considering a pivot or aiming to advance, the guidance here is rooted in real-world hiring dynamics, making it a valuable resource for anyone serious about building a future in cybersecurity.
Author: Language: English Episodes: 100

Your Cyber Path: How to Get Your Dream Cybersecurity Job
Podcast Episodes
EP 35: GRC Overview [not-audio_url] [/not-audio_url]

Duration: 1:01:52
Today, we’re going to focus on the Governance, Risk, and Compliance function. Also called “GRC” with help from our friend and expert Shan Sankaran. NEW: You can see us (and the slides) on YouTube: https://www.youtube.com…
EP 34: Security Engineering, Architecture, and Test Overview [not-audio_url] [/not-audio_url]

Duration: 44:49
What jobs are in the Security, Engineering, Architecture, and Test organizational unit? In this episode, Kip and Wes break it down with our guest, Brad Gobble, an experienced hiring manager for this org unit. NEW: You ca…
EP 33: Cybersecurity Organization Budget and Staffing [not-audio_url] [/not-audio_url]

Duration: 33:47
If you want to know where's the most opportunity in a typical cybersecurity organization, follow the money. In this episode, Kip and Wes unpack where the money is spent which will help you figure out where break-in. NEW:…
EP 32: Cybersecurity Service Catalog and your dream job [not-audio_url] [/not-audio_url]

Duration: 55:22
There are 23 different services performed by a typical large company cybersecurity department. Which ones are best for people who are new to the career field? Wes and Kip tell you in today's episode. NEW: You can see us…
EP 31: All the Jobs in a Large Cybersecurity Organization [not-audio_url] [/not-audio_url]

Duration: 38:41
Do you know all the different jobs inside a typical large company cybersecurity department? And, which ones are a good fit for you? In this first of a brand new series of episodes, Wes and Kip will take you on a grand to…
EP 30: A Cybersecurity Job That Fits You Like a Glove [not-audio_url] [/not-audio_url]

Duration: 45:40
Our guest hiring manager Anna-Lisa Miller shares her 4-point plan for how to get a cybersecurity job that really fits you. https://www.linkedin.com/in/anna-lisa-miller Can playing capture the flag also give you cybersecu…
EP 29: Job Hunting on LinkedIn [not-audio_url] [/not-audio_url]

Duration: 35:06
The best way to get your resume in front of a hiring manager often requires you to connect with that person, or a member of their team. Our guest Glen Sorensen tells us how to do that on LinkedIn in four easy steps. http…
EP 28: Five Principles to help you get your Dream Cybersecurity Job [not-audio_url] [/not-audio_url]

Duration: 34:51
“Do something you love, and you’ll never work another day in your life." Our guest hiring manager Jeffrey Jones says if you’re looking for your dream cybersecurity job, you need to keep these five principles in mind... h…
EP 27: Optimize your LinkedIn profile for job hunting [not-audio_url] [/not-audio_url]

Duration: 36:31
LinkedIn: How’s your profile? What are you putting out there about you? This is your personal brand, so you need to be thoughtful about what hiring managers are seeing when they look at it. Listen to find out what to do!…
EP 26: Job Application Rejection [not-audio_url] [/not-audio_url]

Duration: 32:20
You submitted your resume and job application but they never call you. Did you do anything wrong? It’s possible. Listen to find out what to check for... Want to get your dream cybersecurity job? Our highly rated mastercl…