Hiring A Cybersecurity Pro? Consider These Six Do's And Don'ts
The need for cybersecurity professionals is high with very limited supply. These roles are vital to your business, and you may want to fill them quickly -- but with a candidate who meets your requirements. Here are a few thoughts based on experience that might help you uncover a great fit despite the slim odds.
Don’t Be Arrogant
Listen to your interviewee. Many who work in cybersecurity say unemployment in the industry is at ground zero. The person you're interviewing likely has a job. That means they don’t need yours. It can be tempting to talk about your company’s success, and while that’s important, you’ll win with your candidate if you put their thoughts and needs first. Ask their opinion on the security challenges your company faces.
You are an extension of how the candidate perceives your company culture. Create an interview environment where the candidate feels wanted and valued. Appreciate their opinions and ideas. Show them that you care not only about company goals, but also about the people that work for the company.
Do Give Them A Compelling Reason To Leave Their Current Position
Most cybersecurity professionals are happy in their current jobs. It could take a serious carrot to overcome inertia and give them a reason to make a move. A 2018 (ISC)2 report found that only 14% of respondents in the cybersecurity industry were actively looking for a new job.
With a bounty of options available to the average cybersecurity professional, you’ll need to listen carefully to individual goals. Are they money motivated? Is working with the latest tech their biggest priority? Is it the possibility of relocating? Put yourself in their shoes, then be flexible and creative to find what it is that would equate to an opportunity they can’t refuse.
Don’t Reject Someone Because They Don't Look Like The Perfect Fit At First
Be open to less experienced, smart candidates. My biggest pet peeve in the industry is when hiring managers don't see the full potential of strong candidates.
Is it routinely taking you more than a few months to fill positions? Raise your hand. Maybe you're suffering from hiring perfectionism. What if you hired someone who was a little below the desired experience level? Look for candidates that ask great questions and are smart and curious. Invest in them, and over time they will likely get up to speed and become a loyal employee.
If you are at the low- to mid-range level of compensation, consider extending an offer to someone who will view your position as a step up in their career. Their gratitude could pay off in the long run.
Do Research What Other Companies Are Doing
Those 498,000 are tipping the scales of supply and demand. You’ll need to analyze what other companies in your geography and industry are doing to attract cyber professionals. Make sure you're competitive. Do you allow remote work? Do you allow for a flexible schedule? Do you offer extra paid time off? These are just a few of the less-costly perks that can make a huge difference in your hiring power. Find the benefits within your own culture. Ask what makes working at your company more interesting and rewarding than working with other companies. Think about how you show people that you care about their quality of life.
Don’t Search For Clones
Sometimes people look to fill a position with a person just like the one who recently departed. They might say: “We need another person like Joe.” Instead, look to implement good onboarding and training approaches for your new employee.
It can be hard to remember that Joe was not always experienced. If you are holding out for a clone of the person who just left, there is a high probability that you're spending valuable time looking for someone who doesn't exist.
When an experienced person leaves, so does the “glue” of the institutional knowledge they carried with them. That means someone will have to invest time into the new hire. Be realistic and pragmatic. Find ways to help the new candidate get up to speed. In my experience, the best thing you can do is fill the position as quickly as possible with someone who is capable of learning -- and surround them with mentoring opportunities.
Do Speed Up Your Hiring Process
Hiring can be a slow process for many reasons. People take time to decide in part because they're afraid of making a mistake.
Wasted time can be the biggest mistake. Today’s competitive market demands agility, especially with regards to cybersecurity.
You can increase your odds of landing that highly sought-after and hard-to-find candidate by making them an offer before anyone else does. Being the first one to ask is like being first to market. It can be a big advantage. Make it so that you are your candidate’s only offer.
source forbesIndustry: Cyber Security News
- Penetration Tester, UK based. Ability to achieve SC clearance
- United Kingdom
Experienced Penetration tester- UK based with the ability to achieve SC clearance. On-going training and development and paid certifications / renewals. Interested to hear from all areas of penetration testing, web app, infrastructure, mobile, etc. MUST have current hands on experience delivering penetration testing. Ideally from a consultancy background with experience working with multiple clients. OSCP / CREST / CHECK / Tigerscheme penetration testing experience / certifications desirable. Apply today for more details. All information kept in the strictest of confidence.
- Senior Data Privacy Specialist, London. CIPT
REF CH7875 £60,000 Senior Data Privacy Specialist, London. CIPT Senior Data Privacy Specialist needed to help advise client on project and programmes relating to Data Privacy and compliance. UK based role. Ideally looking for someone that has a strong appreciation of technology and Data Privacy that can work with clients to develop or enhance their strategies, policies, processes and techniques to manage cybersecurity risks while enabling business driven data. Certified Information Privacy Technologists (CIPT), Certified Information Privacy Professional/Europe CIPP/E experience and or certification highly desirable. Specific experience within the healthcare industry is of particular interest. All details kept in confidence Apply today for more information
- Cyber Security lead Managing Consultant, Healthcare
REF CH7874 £120,000 Cyber Security lead Managing Consultant, Healthcare, Public Sector. UK Cyber Security lead Managing Consultant with a specialisation in healthcare needed. The Cyber Security lead Managing Consultant will identify, engage with, consult and deliver key and critical cyber focused programmes and projects into healthcare clients. To be a success in the role you will be able to identify and engage with clients building pipelines of new business opportunities. A key part of your role will be to engage with new and existing clients to win new business opportunities- this role is revenue generating. Consulting experience around digital cyber transformations, Governance, Risk & Compliance, Critical National Infrastructure programmes, Managed Detection and Response etc are key. NIST, ISO27001, etc Team management, , identifying Cyber Risk, UK based, Permanent position. The ability to achieve UK security clearance is a perquisite. All details held in confidence. Apply today for more information.
- CONTRACT outside IR35 - SENIOR Security Analyst level 3.
- United Kingdom
- competitive day rates
REF CH7873 CONTRACT 3 month rolling outside ir35 SENIOR Security Analyst level 3. London ideally- but flexible SOC SIEM experience essential. Broad cyber hands on experience should include Threat hunting, Detection, Phishing, Malware etc Scope of engagement · Managing / running BAU tasks (Organising and assigning workloads to the Tier 2 analysts) · Working with the various security tools (Creating documentation to support the use of these tools) · Support Incident Management activities (Work with the incident managers when an incident is identified) · Support Incident Response activities (Recommendations and support remediation activities without completing these activities) · Be technical point of contact to the wider business on security related issues (SME within the team on security related issues) · Train the SOC Analysts (Continuity of service - knowledge transfer to the T2 analysts ) · Working with the Security Engineers on: (Use Case Development Identifying scenarios and developing the use case for the engineering team to deploy Identifying rules and alerts triggered to be fine-tuned by the engineering team) · Recommendations for dashboard creation (Working with the engineering team to identify potential dashboards to create) · Creating, maintaining and uplifting documentation (Playbooks, Process Documentation) · Drive improvement across the estate (Support Vulnerability Management activities and provide enrichment where possible) Any of the following certifications are desirable Splunk Phantom certified admin, Splunk Core Certified Power User / Advanced, Splunk Certified Enterprise Security Admin, etc The individual MUST currently be living in the UK and be able to achieve UK security clearance. (SC) Looking to interview immediately. Arrange a call https://calendly.com/chris-holt/arranged-call-with-chris-holt-soc-role- Chris.Holt@dclsearch.com