Friday, December 13, 2024 — Meeting Recap

AI Recording and Team Introductions

Shawn initiated the meeting by discussing the use of AI recording and the posting of meeting notes on the website. He encouraged new members to introduce themselves and participate in discussions. Sean Yarger, the leader of the Southwest SE team at Whiz, introduced himself. Ian McQueen, the Cloud Community Leader for the Azure Community at the Center for Internet Security, also joined the meeting. Shawn expressed his intention to involve Ian in future presentations. The meeting was characterized by open discussions and the sharing of experiences.

Security Updates and Professional Headshots

Jay discussed the company's security updates, revealing that they release all security patches on the second Tuesday of each month. Jeff asked about the number of in-house security researchers, to which Jay clarified that most submissions come from external sources like bug bounty programs and security partners. D asked for tips on getting a professional headshot, and the team suggested using a photographer or a passport photo service. Obi asked about the difference between AWS and Forward Cloud Tech, and Jay recommended Forward Cloud Tech for its focus on practitioners and real-world cloud security practices. The team also discussed the relevance of AWS for security, with Jim noting that while it's not security-focused, it does have security features and advice for securing AWS.

Cybersecurity Certifications: Value and Necessity

The team discussed the value and necessity of certifications in the field of cybersecurity. Ken expressed his skepticism about the need for certifications, while Shawn and Matt Alvarez argued that they can be useful for learning and breaking through barriers to talk to employers. Steve recommended the Cloud Security Lab a Week (S.L.A.W) resource for practical learning. Jay shared his experience of not needing certifications to get a job, while Afrida asked for advice on which certifications to pursue. Matt Alvarez suggested starting with an intro-level cloud certification like the Az 900 or an associate AWS certificate. Nathaneal recommended setting up a home lab for hands-on experience before pursuing certifications. The team agreed to share these resources and suggestions with others.

Computer Stores, Home Labs, and Security

In the meeting, Matt Alvarez discussed the availability of computer stores in major cities like the US, and the potential for home labs in IT. Jay suggested the use of Raspberry Pi's for Kubernetes clusters, and Matt agreed, but noted the potential issues with ARM architecture. Matt Currie shared his experience of replacing servers with Intel Mac Minis, which he found more efficient. The team also discussed the use of breach and attack simulation software, with Jason Newman inquiring about its use. Chris from Mandiant shared his experience with the security validation product. The team also discussed the potential of home labs for learning and the availability of lab resources on their site.

Certifications, Experience, and Hiring Challenges

In the meeting, Matt Alvarez discussed concerns about a potential private equity firm purchasing a company that provides the OSCP certification, fearing price hikes and a decline in quality. Jay and Shawn agreed that experience as practitioners is more valuable than certifications, and that certifications should be seen as a confirmation of reasonable intelligence rather than a definitive measure. Matt Currie noted that certifications like CISA are losing their shine due to the ease of obtaining them without practical experience. The team also discussed the challenges of maintaining certifications like CPES and the potential for internal referrals in the hiring process.

Networking for Career Success

In the meeting, Shawn emphasized the importance of networking and building connections for career success. Richard shared his experience of getting a job offer through a connection, highlighting the value of having a champion or sponsor. Matt Currie discussed the competitive job market and the need to stand out, while Matt Alvarez agreed. Sean shared his experience of not actively applying for jobs but having them come to him through networking. The team also discussed the importance of showcasing one's work and skills, and being helpful to others as a way to build a strong network.

Exploring Automation and Cloud Security

Aashay discussed his understanding of automation and cloud security, and sought suggestions for additional use cases to showcase his automation efforts. Matt Currie shared his approach to automation, focusing on process automation and removing manual effort. He emphasized the importance of identifying tasks that are a pain to do manually and automating them. Don added that automation can eliminate errors, save time, and increase efficiency. He also recommended the book "Automate the Boring Stuff" for further learning. The team also discussed the potential of integrating IPD and the value of automation in reducing manual effort and increasing efficiency.

Automation, Processes, and Team Updates

In the meeting, Matt Currie emphasized the importance of understanding processes rather than just coding, using Chat GPT as an example. He also highlighted the value of automation in streamlining tasks. Paul recommended Bash scripting for cloud security tasks, citing its simplicity and efficiency. San shared his experience as a keynote speaker on elevator pitches and offered help to those needing assistance in self-introduction. The group also discussed the upcoming 2,000 member milestone for their group and Matt Currie's upcoming move to Australia. Lastly, Shawn announced his upcoming surgery for prostate cancer and his temporary absence from the group, with Jay and others offering support.