7MS #343: Interview with Dan DeCloss




7 Minute Security show

Summary: <p>Psssst! Wanna come to the first ever 7MS User Group meeting? It's coming up on January 14th. You can join in person or virtually! Head <a href="https://7ms.us/ug" rel="nofollow noreferrer noopener" target="_blank">here</a> for more information!</p> <p>Dan DeCloss (a.k.a. wh33lhouse on <a href="https://7ms.us/slack" rel="nofollow noreferrer noopener" target="_blank">Slack</a> and <a href="https://twitter.com/plextracftw" rel="nofollow noreferrer noopener" target="_blank">@PlexTracFTW</a> aon Twitter) joined me virtually in the studio to talk about his passion project, <a href="https://plextrac.com" rel="nofollow noreferrer noopener" target="_blank">PlexTrac</a>. Dan also shared his insight on all sorts of great topics, including:</p> <ul> <li> <p>How to bleed "purple" and get comfortable playing on both the attacking and defending side of the house</p> </li> <li> <p>What areas are we failing in defending our networks - and what kind of things can we do make our networks more resilient?!</p> </li> <li> <p>What's the biggest challenge you see on both the blue and red team side (spoiler alert: communication is super important!)?</p> </li> <li> <p>How do you break into a cyber security position that requires X years of experience when you have <em>zero</em> experience (Dan offers a great tip: <em>don't</em> be intimidated by requirements on job postings...they're often excessive/unreasonable)</p> </li> <li> <p>Ways to show security aptitude on your resume without necessarily having a bunch of experience:</p> <ul> <li>Build a home lab</li> <li>Create a blog</li> <li>Bug bounties</li> <li>Make a podcast</li> <li>Get certs (or at least get enrolled in them)</li> </ul> </li> <li> <p>Some history on <a href="https://plextrac.com" rel="nofollow noreferrer noopener" target="_blank">PlexTrac</a> and what inspired Dan to create it</p> </li> </ul>