Stephen Hamilton

Happy Wednesday LinkedIn!    Thought it was about time that I make another post reaching out to all my Michigan #cybersecurityprofessionals. I think we can all agree that the job market this year hasn't been the kindest, but we are still seeing roles! Our MI clients love an on-site presence, whether that be hybrid or 5 days a week and 100% remote roles are becoming fewer and far in between. I am keen to connect with individuals in the field that are on the market or would like some insights on the current market trends. I work on positions in all different skillsets under the Security umbrella; IAM, GRC, SecOps, and the list goes on.   If you find yourself on the job market or are simply wanting to get a feel for how things have been looking this year, please feel free to reach out to me! I would be happy to be a resource to you on a local capacity.   Email: [email protected] Or message me on LinkedIn! 😊 #hiring #cybersecurity #ITjobs #RiskandSecurity

26

4 Comments

100% REMOTE ROLE. Though locals are preferred but not mandatory.  Position: Azure Cloud Cyber Security SME- Location: Chicago, IL Duration: 12 Months Identity and Access Management – Entra ID RBAC, Conditional Access Policies, Active Directory ID, PIM/PAM, Active Directory Connect, AD FS, ID Protection, MFA Security monitoring includes log aggregation/centralization, correlation, and alerting of security events and incidents. Hands-on experience with Azure policy design, policy exemption, compliance and non-compliance dashboard understanding, remediation task for non-compliance. Experience in Cloud adoption framework, well architected framework, security solution design. Expertise in cybersecurity solutions like Microsoft Defender for Cloud, Defender for endpoint, SOC, MDR, SIEM, SOAR, DAM, etc.  Knowledge of MS purview, DLP, Insider risk policies etc. Configure rules for real-time alerting in SIEM tool for events, analytic rules, automation rules, hunting queries & Playbook. Knowledge of 3rd party tools CrowdStrike, LogRhythm, Netspoke, semperis, Illumio Participates in the incident response and investigation process. Knows about network architecture and protocols like TCP/IP, HTTP, etc. Security Services - Security Operation Center, Key Vault, Log Analytics, Monitor Apply and implement cloud security technologies.  Review existing cloud security measures and processes.  Implement security as a core part of all design and development of the client’s cloud solutions.  Recommend best practices based on leading industry insights.  Map security controls to compliance requirements for cloud environments.  Provide incident response support as a key stakeholder.   Identify, triage, and remediate security detections and anomalies.  Assess vulnerabilities and attacker tactics, techniques, and procedures (TTP) and provide defensive action to locate and prevent threats.  Work creatively and analytically in a problem-solving environment.

3

1 Comment

Hi, network!! I am seeking to fill a Cyber Security SOC L2 Analyst role onsite in Sterling Heights, MI (relocation provided/this role is only for those already in US and authorized). Feel welcome to repost or share with your inner circle. Permanent, full-time direct hire. Base up to 113K, bonus is 7.5%, benefits. 2-3 years minimum with SOC and Incident response experience that can lead a team to investigate events and incidents with a third-party SOC. Familiar with handling phishing emails, compromised accounts, malware on devices, etc. Can work within the NIST IR framework including lessons learned. How the hiring manager portrays the role: The primary function of the role is a mid-level Security Operations Center (SOC) analyst that can take information reported from the tier one and tier two teams to independently validate the reported information, while not having access to the same tools as the SOC. This involves looking into possible compromised accounts, figuring out what compromised accounts did while compromised, investigate changes the threat actor may have made while the account was compromised, review some failed login attempts to see why they failed (wrong password or blocked by MFA), investigate malware on devices without having access to the sample.   The secondary function of the role is to triage, investigate, and remediate potential phishing emails. This includes breaking down attached files or links in emails (in VMs the analyst maintains) to understand not just what they’re doing, whether they are malicious, where they’re making callouts to, and explaining the goal of the attack. We do have a lot of BEC-style emails that make it past our email controls. We also fill out reports to third parties about potential attacks. Examples include Google’s Email Abuse form for BEC attacks. Sharing IOCs with select other companies.   The third part of the role is being able to write up after action reports as needed. That include how the observed goal of the attack, how the attack happened, what controls failed, possible additional controls to add to the environment to monitor for repeated attacks of the type being reported on.   As time permits, review the external footprint of the company and conduct internal threat hunting ,looking for potential adversary actions or non-alerting events.   They will meet with the SOC/NOC vendor roughly twice a week for touchpoints on event/incident alerting and project reporting. We offer bonuses for successful referrals! Kind regards, Sergii Kovalenko Director, Talent Solutions [email protected]

12

5 Comments

Local cybersecurity professionals (Indiana): What organizations, groups, forums are most helpful to you as you work on securing your organization? Looking to get connected to some local groups but not sure which groups to start with. I'll be limited in which groups I'm a part of so will have to be selective. #cybersecurity #networking #learningeveryday

I know you all are probably wondering why I'm working so hard on brining you all IT support/help desk content and that's because there is a gap in the market. When I researched what I could expect from working a help desk job, I found very old and outdated videos. I wanted to bring the conversation back to life and give a real life view from someone who is living it. In this video I share my experience on the interview process and how I got my government job. I also provide links in the description where you can find your own government job. If you like seeing my journey, please take a moment to comment and let me know! #itsupporttech #itsupport #helpdeskjobs #governmentjobs #informationsecurity #techsupportjobs #remotetechsupportjobs

10

1 Comment

We had a new hire starting on Monday morning. I get the ticket on Friday afternoon by HR. Those last minute new hires on Friday that start Monday. Helpdesk/IT Support knows what I mean lol 😕. Do we have a phone for him? Yes Does he have a number? let me check call manager. Yes he has a number. Does he have a pc for Monday? Yes, I build extra pcs just in case for new hires. Do we have monitors? Yes, I ordered extra ones just in case. Be prepared for anything is important. I would have extra equipment just in case we have new hires or if I need to swapped out someone bad pc. It's better to be over prepared instead of having nothing. I hope everyone has a great Monday! #itsupport #helpdesk #desktopsupport #servicedesk #systemadmin #desktopsupporttechnician #careers #careeradvice #helpdesktechnician #systemadministration #itsupportservices #itsupportspecialist

2,585

188 Comments

This was definitely an intro level quiz, but it forced me to really dive deep into OWASP API Security Top 10. I am motivated by having to take a timed exam, but even if you don't want to pay the money APISec University has free content that covers the OWASP API Security 10 Ten https://lnkd.in/eX936iaD.

21

1 Comment

I’m seeing more “I’m Hiring” posts in cybersecurity over the last 30 days than I’ve seen in the last two years. (Anecdotal data, sure, but I’m pretty perceptive.) Here’s what I’m noticing: - SaaS companies that froze in place are thawing and hiring again. - Consulting and services firms—especially in DFIR and Business Continuity—are seemingly crushing it. - AI companies are maturing, creating net-new security roles as they scale. - And FAANG? They’re hiring more. Let’s be honest—50% of a company’s business strategy is often just “follow FAANG. 😂 What does this mean? Stay open, but stay sharp Keep an ear out for new opportunities, but be mindful. Think about how companies have navigated the last two years and factor that into your decision-making process. Hiring is about to get tougher (again). If you’re a company, what worked for your hiring strategy in 2023 or early 2024 may not cut it in 2025. Movement is at the IC and mid-management level—for now. Most of this hiring boom is happening below the leadership level. That said, I expect (and hope) leadership hiring will pick up more fluidly in 2025. Watch out for AI-generated resumes. This is the first hiring upswing since tools like ChatGPT became mainstream. Your “perfect” candidate might require deeper vetting beyond “Wow, they did the exact same thing at a competitor” on paper. I’m glad the market is warming up. It’s been a tough couple of years, seeing so many great people struggle to find work or feel stuck in roles they’re miserable in. Of course, I have a vested interest in a more active hiring market. But beyond that, I truly want everyone in this ecosystem to find what they want and deserve. Here’s to (hopefully) better days on the horizon.

176

12 Comments

I see a lot of early-stage cybersecurity vendors mess up the interview process. Why? Because they don’t own one. It’s important you have some form of interview structure like: - Recruiter screen - Hiring manager screen - C-Level interview  - On-site/ sales assessment But what is key is the detail at each stage. Do your interviewers know their role in the process? Or do they just turn up to the call and ask generic questions? You need to assign people to cover very specific topics in the interview process so they can get really good at assessing for these core competencies. Top Tip: Assign them two core competencies to address and have them prove to you how they will test for these. You’ll create folks who will be very good at interviewing and reduce your staff churn. Details matter.

8

Big things are in the works... I got some really good news today, hoping to share that soon! In other news... I will be presenting @ DevUp (https://www.devupconf.org) in St. Louis just after DEFCON this year, if you are in the St. Louis area my sessions: - SEBCAK – Security Exists Between Chair and Keyboard: An Intro to DevSec - Unveiling Hard Truths in Application Security: Navigating the Realities for Resilience https://lnkd.in/gHDy7EpT #appsec #cybersecurity #talk

19

Advice for Cybersecurity Job Seekers w/ Ivan Fonseca Top 8 Tips: 1. Cyber Degree (optional) 2. CompTIA Sec+ & Net+ Certs 3. Create Open Source Projects 4. Be Active in the Cyber Community 5. Start on the Helpdesk 6. Be Open to Onsite Jobs 7. Post Your Work on Socials 8. Attend Meetups / Conferences Great advice, Ivan! 🤘

79

4 Comments

Let’s see how fast companies adopt this!

16

Please tag recruiters or hiring managers in the cybersecurity space, I’m looking for input ⬇️ I want to leave a LinkedIn Recommendation for someone in the cybersecurity field that I’ve personally worked with before. To help it provide the most value, what do recruiters and hiring managers in that industry want to see in the recommendations? Appreciate any feedback (plus any engagement on this post to help exposure 🫶🏼), thanks! #cybersecurity

38

2 Comments

Before I dive into this, I would like to send out love to the people of Cleveland Ohio. While this is a cyber-attack on the City Hall, it can create anxiety in the hearts of the people. So, stay encouraged. Cleveland City Hall recently announced a temporary closure following a significant "cyber incident" that impacted the city's systems. While the source of the attack remains undisclosed, it prompts important questions for discussion: - How did this occur? - Who dropped the ball? - Where was the gap? - What lessons can be learned during and after investigations? - What safeguards and countermeasures should be implemented to avoid a reoccurrence? Stay tuned for updates as the city addresses these critical cybersecurity concerns. #CyberSecurity #CityHall #DataProtection #cyberawareness

2

EMOTIONAL INTELLIGENCE

1