Emily Chen’s Post

Reposting for visibility, for all the job seekers. This appears to be a company with a commitment to cyber security, a technology based culture, and a ton of security challenges. Given all the available talented people who are looking, it will be interesting to see how quickly these roles are filled. Given we are at roughly September 1- anyone want to venture a guess how quickly these roles are filled- and what the candidate experience will be? I am interested in how this plays out and what the outcome is.

What was I, a software focused Engineer/PO doing at a CISO event this week? I was trying to learn a bit more about how software and security teams can work hand in hand. That and - because I was presented the opportunity by Pippa Bindin + Ashley Mackens over at GBI Impact, and then my supportive manager Dipen Rana made it possible. How did I maximize my experience? Mostly thanks to the many kind folks who shared their perspectives and knowledge: - I got to learn a bit more about JNJ's own broader security initiatives thanks to Oluwadamilola O. - Have a discussion over lunch about security, AI, regulation, large teams and work culture with a whole group including Scott Aaron (didn't connect with the the rest over linked in- which may be something I need to work on) - Talk shop about emerging software tech with respect to security concerns with Zach Wasserman and his team - Learn about purely security perspectives on several technical challenges thanks to guidance from experts like Elton Fontaine I also got a condensed view into several security products including what they do, and how they do it. Finally there were amazing panels + roundtables where I got to better understand current events, concerns, and measures in security. Learning about different aspects to the entire product building process was such an energizing way to expand my own perspective. I guess that's the point I am trying to get out of this post. If there's an opportunity and you have folks supporting your growth, take it.

I have sympathy towards the guys from #crowdstrike. There’s a lot of speculation as to the #bug that actually caused this #outage. But in my mind that doesn’t really matter. What matters are the processes behind this issue. Any bug boils down to #testing. Or should I say the lack of it. Now why I have sympathy towards the CrowdStrike team is that I’ve been in those shoes multiple times. It’s easy to judge and say “oh haha the devs or the QA team didn’t do that and that and that’s why it failed”. But it’s never that simple. Ultimately I believe it’s the failure of the management. Why? Because CrowdStrike isn’t some garage start-up that launched yesterday. There are thousands of super-smart tech people working there. And I don’t believe that not one of them voiced their concerns ever about their testing and deployment process. “bUt dEvS SHoUldn’t aSk FoR pErMisSion tO BuILd bETtter tECh pRoCEsseS!” someone might say. Yes they do. Better testing, better deployment, better infrastructure takes time. Devoting resources and time to that means allocating less towards features. And the management in many many companies sees value only in features. So all of those voiced concerns fall on deaf ears. “Don’t fix it if it’s not broken” - you’ve all heard that. Now you know what it costs. I don’t know how much damage was done by this bug, but I guess it’s in the billions of $, not counting the human lives lost allegedly by failed 911 services. So what do I smarty-pants propose as the solution? To be honest, I don’t think it’s possible to avoid such situations completely. But that doesn’t mean we shouldn’t try. I can only judge from my side of the fence and I think the problem lies in the lack of communication. It’s important to deliver your concerns very clearly and for management it’s crucial to actually listen. When you tech team says something needs to be done usually it’s for a good reason.

Beginning my journey on this module about Jr. Analyst from TryHackMe

Major #hugops to all of the folks at Crowdstrike and all of the folks dealing with the fallout around the world. Today's going to be frustrating and hard if you're buried in it. Remember: People make mistakes; no one is infallible. Yes, this sucks, but don't forget that everyone can read your posts, including whoever made the mistake and whoever built the guardrails that failed to prevent the mistake from affecting others. Psychological safety, automated guardrails to prevent failures, and blameless postmortems are part of #DevOps culture, even when it's not your company.

Blooper: "That's actually wrong, can you restart please" 🤣 Having a little fun here and sharing some behind the scenes work recording Albert Heinle's new video series of short clips on important topics for improving DevOps practices and infrastructure security. 🙌 Please support us in following CoGuard's YouTube channel: https://lnkd.in/g8U3qS7J #DevOps #DevSecOps #developer #cybersecurity #technology #infrastructuresecurity #datasecurity #cto #ciso #databreach #devopstips #CoGuard #tech https://lnkd.in/gunXwHnH?

We're proud to announce that our exceptional #Jamf engineering team recently showcased their prowess at the Vista Equity Partners Partner’s Hackathon and won in the ‘Best Engineering Award’ category! With dozens of Vista companies competing, this event provides an opportunity for developers and engineers to connect with peers from around the world to compete in AIgenerative software solutions. In a world buzzing with AI's potential, our team knows how to make a meaningful impact with this cutting-edge technology to empower IT and security teams to more effectively detect malicious events across Apple and mobile devices. Driven by a passion for relentless self-improvement, we are ready to face any challenge that comes our (and our customer’s) way as #OneJamf! Learn more about our Jamf Engineering methodologies, tech stack, and how we solve complex problems every day for customers in education, healthcare, and business. https://lnkd.in/g4Qq5rdp #tech #technology #software #cybersecurity #SoftwareEngineer #SoftwareDeveloper #hackathon #securitymanagement #threatprevention

<Application Built for Resillient Systems: Lessons from Catastrophic Events> In an effort to be helpful, admist a catastrophic event, this app could help guide someone in the future. Ideal to heed the advice before such an event, but still useful for perhaps new businesses to understand during and after. Simply plug in whatever the software or system issue maybe, as a bit of a guide: Examples, Patch Mangement, QA, DDOS, Ransomeware, etc., then hit Play. https://lnkd.in/gMC7asrX Its just going to be par for the course, that we're all going to experience software issues. Its inevitable. Defects are part of the software world. There are no Silver Bullets in Cybersecurity, and it only takes one defect or vulnerability to be exploited by an Attacker, to have issues. Folks rushing to market, to develop software too fast, are bound to make mistakes. They are smart if they are catching defects while they are developing code. We need more of these solution providers. In DevSecOps mentalities, "a blameless culture" refers to an environment where individuals are not blamed for failures or mistakes. Instead, the focus is on understanding and learning from incidents to improve processes and systems. This approach encourages transparency, collaboration, and continuous improvement. By avoiding blame, teams can more openly discuss issues, leading to better problem solving and innovation. This culture is essential for fostering trust and enabling rapid experimentation and iteration, which are key components of SuccessfulDevSecOps practices. I'm wondering if we humans can borrow this approach that is similar, as we respond to all the future attacks, breaches, and catastophes too. Emotions and angers are inevitable to surface in our future, but how we react to them is up to us. Can we be mindful and present? We have to pass our wisdom, ambitions, and coping skills to future generations in Crisis. Here's what I liked about the Cybersecurity Community that impressed me so. 1. Many came forward with a FAST WORKAROUND, showing team spirit 2. Many pointed to root ISSUES OF CONCERN like Quality Assurance Testing. 3. Many simply created AWARENESS to the Issue and acted like an informant 4. Some came to be DEFENDANTS and asked for grace in the ecosystem 5. Some debated without being rude or threatening, which allowed better opportunities for hearing the LEARNINGS thru the anger. 6. Some gave INSIGHTS ON WHAT TO EXPECT NEXT 7. Some emphasized the basics of SHIFTING LEFT , which is ideally for companies to catch issues early on in Development, as you are writing code. 8. Some cite a HOLISTIC approach, looking across the lifecycle of software. Many social medialites, showed Partnership in the Ecosystem to help aid, some resorted to anger, and lost their sense of empathy. We're all being tested! #Bettertogether

In the world 🌍 of technology, there is this growing phenomenal of cyber and phishing attack which is affecting not only business operations but also people's safety. This article reminds me of the recent story I saw of an influencer who nearly fall victim to human trafficking sydicate when she thought she was hired for a job as an influencer for a particular hotel. After being flown miles into another country, she was lucky to escape the trap of human trafficking. The operations of these syndicate is sophisticated and their intentions when steal business profile is both sinister and malicious. Warning: anyone looking for a job, please don't fall victim. If you get an email for a job opportunity or interview it is always safe to double check your source, call the company or organisation through a neutral line to confirm who you spoke to and if they are definitely conducting interviews at the said time, place, etc, check address and website authenticity before trusting anything. Do you own due diligence even in recruitment and in desperate time, scammers prey on desperate people so don't be a victim!. Good luck to all if you trying to find employment out there. #recruitment #jobseekersupport #businesscrimes #phishingscams