Derek Fisher -- Hiring in Cyber/AppSec

Derek Fisher, an expert in hardware, software, and cybersecurity with over 25 years of experience is back on the podcast. Derek shares his advice on cybersecurity hiring, specifically in application security, and dives into the challenges of entry-level roles in the industry. We discuss the value of certifications, the necessity of lifelong learning, and the importance of networking. Listen along for good advice on getting noticed in cybersecurity, resume tips, and the evolving landscape of AppSec careers. Mentioned in this episode: The Application Security Handbook by Derek Fisher Derek Fisher brings over 25 years of hardware, software, and cybersecurity expertise across multiple industries, including healthcare and finance.The Application Security Podcast is brought to you by Security Journey.About Security JourneyWe provide application security training for not just your developers, but for all roles in your SDLC.→ Learn more about Security JourneyConnect with Derek Fisher:→ The Application Security Handbook by Derek Fisher→ Cyber for Builders by Ross HaleliukMentioned in this episode:→ The Application Security Handbook by Derek Fisher→ Cyber for Builders by Ross Haleliuk→ Effective Vulnerability Management by Chris Hughes→ With the Old Breed by E.B. Sledge→ Derek Fisher – The Application Security Handbook→ WiCyS (Women in Cybersecurity)→ CISSP→ BSidesFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Derek Fisher: Hiring in Cyber/AppSec01:35 Yeah, we're joined by someone who's been on the podcast before03:48 What's your favorite thing to grow06:21 It's the, as you said, it's the therapeutic value of getting11:05 Which to your point, mid to senior level people are 100%13:15 With that in mind, I mean, how are people getting into17:32 I mean, if anything, it's the patterns, kind of the try20:03 Reminds me of something about Billy the Kid. Like, do you21:58 You mentioned resume reviews. I'm always curious. I've never participated in26:18 The last, you know, 5, 7 years, all the hiring I've33:16 I would say, you know, that's one way to stand out35:43 One of the we got to blame the hiring companies though37:00 You can apply something, yourself to something. And so that, I39:57 That, that I look back and say, I didn't necessarily use47:59 By doing a pen testing class and doing a forensics class52:17 All right. So yeah, 3 questions that we have. First of55:34 Makes sense. So number 3, what's your Top book recommendation and57:24 Yeah, he just wrote a new book on, yeah, it's the58:49 Excellent. Derek, what about a key takeaway or a call to