Navigating Career Choices
Fernando Montenegro
@fsmontenegro
2017-05-13 Career-BSidesDetroit 1
About me
@fsmontenegro
• Independent Consultant
– Sales Engineer (NetSec,AntiFraud)
– Previous PS, Ops, Arch roles…
• CompSci ’94
• Greying hair
• Curious
– Finance (DIY)
– Economics (EMH, Behaviour)
– Data Science (Coursera)
2017-05-13
Source:memegenerator.net
Career-BSidesDetroit 2
About this presentation…
Career-BSidesDetroit 32017-05-13
2017-05-13 Career-BSidesDetroit 4
STRATEGY
2017-05-13 Career-BSidesDetroit 5
Strategy Cycle (S.Wardley)
6
PURPOSE
Strategic Objectives
2017-05-13 Career-BSidesDetroit 7
LANDSCAPE
Understanding the Terrain
Career-BSidesDetroit 82017-05-13
You are a business [PersonalMBA]
“Every successful business:
(1) creates or provides something of value that
(2) other people want or need
(3) at a price they’re willing to pay, in a way that
(4) satisfies the purchaser’s needs and expectations and
(5) provides the business sufficient revenue to make it
worthwhile for the owners to continue operation”
2017-05-13
Value Creation
Customer Demand
Transactions
Value Delivery
Profit Sufficiency
Career-BSidesDetroit 9
Who Are You?
Robert Cringely, 1993
• Pioneers
• Settlers
• Town Planners
2017-05-13 Career-BSidesDetroit 10
2017-05-13 Career-BSidesDetroit 11
Now discover your strengths
2017-05-13 Career-BSidesDetroit 12
CLIMATE
Trends affecting scenario
2017-05-13 Career-BSidesDetroit 13
2017-05-13 Career-BSidesDetroit 14
src:Howard Rees
2017-05-13 Career-BSidesDetroit 15
Plan Create Verify Package Release Configure Monitor
Shift Left
Tidal Forces [Rich Mogull]
• Endpoints are More Secure but Less Open
• SaaS is the new Back Office
• IaaS is the new Data Centre
2017-05-13 Career-BSidesDetroit 16
DOCTRINE
General, recommended practices
2017-05-13 Career-BSidesDetroit 17
2017-05-13 Career-BSidesDetroit 18
Opportunity Evaluation
2017-05-13 Career-BSidesDetroit 19
Career Fit
• Aligned with Plan
• Opportunistic
Technology
• Impact/Future
• Belief/Behind
Projects/Customers
• Vertical, Size
• Aptitude
People
• Teamwork
• Culture
• Mentorship
Everything Else
• Work-Life
Balance
• Compensation
• Learning
Lessons Learned
• Know Thyself
• Deep Focus is Valuable
• Commute is hardest
• Travel is fun (to a point)
– Delivery/Sales
• Organizations are Courts
– “Laws of Power”
• Career has 10,000 days
• “This tall to ride” exists
– Startups
2017-05-13 Career-BSidesDetroit 20
LEADERSHIP
Context-specific gameplay
2017-05-13 Career-BSidesDetroit 21
Choices have to be made
• Understand strategy
• Iterative Process / Every single day
– 1-2 off for a while, might be ok
– Chronic/hopeless? -> consider moving
Career-BSidesDetroit 222017-05-13
Additional Topics
• Develop and maintain a craftsman mindset
• Develop and grow career capital
• Deep work!
• Reduce Information Asymmetry:
– community participation, networking
– Certification, degree
2017-05-13 Career-BSidesDetroit 23
WRAP UP
Career-BSidesDetroit 242017-05-13
25
Value Creation
Customer Demand
Transactions
Value Delivery
Profit Sufficiency
2017-05-13 Career-BSidesDetroit
Further Resources
• Personal MBA
• So Good They Can't Ignore
You
• How To Fail At Almost
Everything and Still Win Big
• The Obstacle Is The Way
• Simon Wardley /
WardleyMaps
• Securosis Tidal Forces
Career-BSidesDetroit 262017-05-13
@fsmontenegro
2017-05-13 Career-BSidesDetroit 27
Other Resources
• https://danielmiessler.com/blog/build-successful-infosec-career/
• https://www.slideshare.net/kshortridge/diy-education-in-cyber-security
• https://tisiphone.net/2015/10/12/starting-an-infosec-career-the-megamix-
chapters-1-3/
• http://www.tandfonline.com/doi/full/10.1080/13598139.2017.1302874
2017-05-13 Career-BSidesDetroit 28

Navigating Career Choices in InfoSec - BSides Detroit 2017