From Sun Devil to math teacher to professional pentester, Mike Ostrowski’s keynote will lay out the groundwork for an unconventional career in cybersecurity. You’ll learn firsthand what it’s like to be a cybersecurity consultant at Bishop Fox. Expect to hear about Mike’s distinct path to security. He will share what helped him reach this point, his stories what it was that sold him on a cybersecurity career, and finally, what he looks for in potential consultants. This will include explaining why communication is so important, why pieces of paper aren’t everything, and what the mindset is that you need to embrace for success. Come prepared to understand the reality of what it’s like to “break in” for a living – and how you can make that your professional reality someday.

1. Breaking into
a career of
breaking in.
With Michael Ostrowski

2. Microsoft Windows [Version 10.0.14905]
(c) 2016 Microsoft Corporation. All rights reserved.
Z:DesktopC–20130201PSTools>WhoAmI
Mhnetworks184
Z:DesktopC–20130201PSTools>WhoAmI /loginid
ERROR: Invalid argument/option – ‘/loginid’.
Type “WHOAMI /?” for usage.
Z:DesktopC–20130201PSTools>WhoAmI /loginid
S–1–5–5–0–10619461
Z:DesktopC-20130201PSTools>
WHO
AM I?SOME BACKGROUND

3. WHERE I
AM NOWAND WHAT I AM DOING

4. MY PATH TO SECURITY
PAST TO PRESENT
Yes...No...Wait wait. Yeah..I am
Am I a Software Guy?

5. THE LOVE
OF TESTINGDEVELOPING MY CRAFT
ALL FOR
The Web Application
Hacker’s Handbook
SECOND EDITION
Authors:
Dafydd Stuttard
Marcus Pinto

6. BREAKING
THINGSAND FINDING MY PASSION
APOLLO GROUP

7. BREAKING
THINGS
KNOW WHAT’S FUN?
AN ADVENTURE IN SOMEONE ELSE’S DATABASE

8. FOUND
SQLi

9. BLOCKED
BY WAF

10. WE’LL FIND OUR OWN WAY AROUND
SUBVERTED
WAF

11. SLOW
EXTRACTIONMORE OBSTACLES ALONG THE WAY

12. THE HACKING
COMPULSIONAND THE NEED TO WIN

13. IT’S NOT
OVER YETPERSISTENCE IS KEY

14. HOW MIGHT
YOU GET THERETHE NECESSARY STEPS TO TAKE

15. MANY PATHS
TO SECURITYTHERE’S NO LINEAR PATH
CONSULTANT 01
English Degree
Worked as a
Project Manager
Chose consulting to
traveland work with
multiple industries
Former art dealer
Self-taught hacker
Earned numerous
certs on her own
Doctor turned
professional hacker,
although he had
been hacking for
years beforehand
Paramedic before
turning towards
the IT/Security route
Self-taught hacker
Never got a degree
Has advised
governments
and militaries
CONSULTANT 02
CONSULTANT 03
CONSULTANT 04
CONSULTANT 05

16. IT’S YOUR
MINDSETIT’S ALL IN YOUR HEAD

17. NO PIECE OF PAPER WILL GET YOU IN THE DOOR
DIPLOMAS ARE
NOT ENOUGH

18. COMPUTER
SKILLS
A STRONG FOUNDATION OF
COMPUTER SKILLS IS NECESSARY

19. EFFECTIVE
COMMUNICATIONCOMMUNICATE IN WAYS OTHER HUMANS CAN UNDERSTAND

20. TO HELP YOU ALONG THE WAY
AVAILABLE
RESOURCES
HACK THE BOX
https://www.hackthebox.eu/
OFFENSIVE SECURITY CERTIFIED PROFESSIONAL
https://www.offensive-security.com/information-security-
certifications/oscp-offensive-security-certified-professional/
PENTESTERLAB
https://pentesterlab.com/
RESOURCE LIBRARY
BishopFox.com

21. I HAVE ANSWERS
ANY
QUESTIONS