electricfork.com: infosec interview questions part III

infosec interview questions part III

Posted Nov 17, 02:19 PM by ben

I’ve had two other posts relating to questions to ask a candidate during an interview (here and here). It’s a tough economy out there, lets reverse roles and ask questions to the interviewer. I’ll still sort by Bloom’s Taxonomy, however most questions are focused on understanding your potential environment and it’s priorities.

Remember/Knowledge

What tools do you or your team rely on?
How big is the team, what are the hours expected?

Understand/Comprehension

What is the goal of infosec within a company such as this?
What kind of constraints does your department have?
What regulations or mandates are you with-held to?

Apply

What’s the largest threat to your business? What countermeasures did you apply to mitigate?

Analyze

Do you put more emphasis on protecting, responding, or staying in compliance?

Evaluate

What is the biggest concern, security or otherwise, you would see me as addressing within your organization?

Create

Where do you think security will be in 5 years as a [practice|industry|concept]?

I’ll add more to this as I come up with ideas.

// :: resources/ brainstorming

Comment

Commenting is closed for this article.

This work by http://electricfork.com is licensed under a Creative Commons Attribution-Noncommercial-Share Alike 3.0 United States License.

about

charmsec

I lead an information security ops and response team. This site is a collection of interesting notes and brainstorms on the protecting from, detecting of, and responding to badness. You can read more about me or my site here.

You can subscribe to my blog via rss , or if you're looking for older items check out my archive of previous posts.

I organize a small infosec meetup in baltimore called charmsec. If you are looking for charmsec details you probably want to go here.

RSS