Nabble - Security Jobs - Discussion

Openings for YOU!

2009-07-29T06:25:30Z

http://www.FindAJobAlready.com is advertiser-supported and free for all with no-fee job posting for employers and no-fee resume posting for workers.

Log on today and find your dream job.

Re: Nokia N95 8GB for sale at 200usd

2009-06-25T19:43:34Z

goodnews wrote:

ELECTRONIC SCRIP INC (UK) LIMITED
Registered No.03837947
Address: 141 WARDOUR STREET,
LONDON, W1F 0UT

ttltd@mailmeasap.com
ttltd3@mailmeasap.com

We have all brands of Mobile Phones/plasma tv/ laptops/for sell at
cheap and affordable prices, they ranges from Nokia/Samsung/LG/Sony
Ericsson/Motorola/Alcatel/panasonic, all Brands and Models of
Nextel Phones, we want you to get back to us with your quote so
that we can begin a good business relationship. We want you to know
that all Phones are Brand New Phones,with complete
accessories,unlocked and sealed. We want to assure you that you
will never regret buying or doing business with us because the
delivery will be to your doorstep via FedEx,UPS,or DHL Courier
service. We will want to use this medium to inform all that we are
registered company and doing business with us will bring you joy
and happiness.

Nokia 8800 Sirocco....$190
Nokia 8800....$170
Nokia N70.....$150
Nokia N71.....$155
Nokia N72.....$160
Nokia N75.....$170
Nokia N80.....$165
Nokia N90.....$165
Nokia N91.....$170
Nokia N92.....$190
Nokia N93.....$180
Nokia N95.....$200
Nokia E60.....$150
Nokia E61.....$150
Nokia E62.....$180
Nokia E65.....$160
Nokia E70.....$150
Nokia E80.....$160
Nokia 1100....$55
Nokia 2100....$45
Nokia 2300....$60
Nokia 3100....$65
Nokia 3108....$60
Nokia 3200....$75
Nokia 3230....$85
Nokia 3300....$70
Nokia 3310....$30
Nokia 3315....$35
Nokia 3330....$60
Nokia 3350....$45
Nokia 3410....$45
Nokia 3510....$50
Nokia 3510i...$80
Nokia 3595....$45
Nokia 3610....$60
Nokia 3650....$130
Nokia 3660....$120
Nokia 5100....$80
Nokia 5140....$110
Nokia 5210....$70
Nokia 5510....$105
Nokia 5550....$70
Nokia 6020....$110
Nokia 6670....$105
Nokia 6630....$130
Nokia 6100....$95
Nokia 6108....$100
Nokia 6220....$105
Nokia 6230....$110
Nokia 6260....$120
Nokia 6310....$90
Nokia 6310i...$100
Nokia 6500....$100
Nokia 6510....$60
Nokia 6600....$125
Nokia 6610....$100
Nokia 6630....$130
Nokia 6170....$120
Nokia 6650....$100
Nokia 6800....$105
Nokia 6820....$110
Nokia 7200....$140
Nokia 7230....$120
Nokia 7250....$120
Nokia 7250i...$130
Nokia 7260....$135
Nokia 7280....$155
Nokia 7600....$155
Nokia 7610....$150
Nokia 7650....$140
Nokia 8250....$100
Nokia 8310....$120
Nokia 8910 ...$150
Nokia 8910i...$165
Nokia 8890....$125
Nokia 8850 Special Edition....$115
Nokia 8850 Gold Edition.......$120
Nokia 8855.....$115
Nokia 9210 ....$140
Nokia 9210i ...$145
Nokia 9500 ...$165
Nokia 7210 ...$100

NOTE:-So do get back to us with this information if you are interested in buying

Your Name:-

Your Address:

Your Zip code:

Your City:

Your Country:

Your contact phone
number

Do kindly reply back if you are interested in buying
from us.Email us at: ttltd4@mailmeasap.com

Part time jobs available

2009-02-26T03:24:48Z

Earn Rs.2000 daily. No Investment.

Wanted Online Internet job workers. Job is only through Internet. Work part time. You can earn Rs.750-2000/- daily. These are genuine Internet jobs. No Investment required. Only serious enquires please. For more details visit http://www.earnparttimejobs.com/index.php?id=320294

Proxy List For You!

2007-10-16T10:19:09Z

NEW PROXY UPDATE EVERYDAY
http://www.boy.us.com/proxylist.php.

Fake IP Address
When you connect to a web site, it can see your IP address as the "Remote IP" or "Remote Address". When you surf through a proxy server, these fields contain the IP address of the proxy server instead of your own IP address. So the web site will see the address of the proxy instead of your actual address.But all non-anonymous proxies usually put the IP addresses of their clients (i.e. of the computers using those proxies) in either of the two following request headers (variables): "HTTP_CLIENT_IP" or "HTTP_X_FORWARDED_FOR_IP" There are no strict standards, so one proxy may be sending the IP with "Client_IP" variable and another with "X_Forwarded_For_IP".

There is not much difference between them but they are never used together - either one or the other.So, if the proxy you are using is not anonymous, the web site will be able to see you true IP address in one of these fields.Requests that are generated by anonymous servers do not have these fields (that's what makes them anonymous).The thing is that you can set A4Proxy to create these fields, and put there "fake" IP addresses (they are generated as random numbers, so they are different for each request).

As the result, the web site which you are visiting will "think" that you are visiting it through a non-anonymous proxy server (while in fact it is a truly anonymous server with an additional fake field generated by A4Proxy). Not all web sites will look for these fields (Client_IP or X_Forwarded_For_IP). However, those which do look for them will definitely be confused as the fake IP address will be different for each request.It may be a good idea to switch on one of these options (and it is not important which one).Finally, if you want a particular address to be sent to the web site in one of that field, you will need to create a modification for that field on the Browser Options tab, in addition to enabling the appropriate Simulate... option.

Nokia N95 8GB for sale at 200usd

2007-09-28T06:05:10Z

ELECTRONIC SCRIP INC (UK) LIMITED
Registered No.03837947
Address: 141 WARDOUR STREET,
LONDON, W1F 0UT

ttltd@mailmeasap.com
ttltd3@mailmeasap.com

We have all brands of Mobile Phones/plasma tv/ laptops/for sell at
cheap and affordable prices, they ranges from Nokia/Samsung/LG/Sony
Ericsson/Motorola/Alcatel/panasonic, all Brands and Models of
Nextel Phones, we want you to get back to us with your quote so
that we can begin a good business relationship. We want you to know
that all Phones are Brand New Phones,with complete
accessories,unlocked and sealed. We want to assure you that you
will never regret buying or doing business with us because the
delivery will be to your doorstep via FedEx,UPS,or DHL Courier
service. We will want to use this medium to inform all that we are
registered company and doing business with us will bring you joy
and happiness.

Nokia 8800 Sirocco....$190
Nokia 8800....$170
Nokia N70.....$150
Nokia N71.....$155
Nokia N72.....$160
Nokia N75.....$170
Nokia N80.....$165
Nokia N90.....$165
Nokia N91.....$170
Nokia N92.....$190
Nokia N93.....$180
Nokia N95.....$200
Nokia E60.....$150
Nokia E61.....$150
Nokia E62.....$180
Nokia E65.....$160
Nokia E70.....$150
Nokia E80.....$160
Nokia 1100....$55
Nokia 2100....$45
Nokia 2300....$60
Nokia 3100....$65
Nokia 3108....$60
Nokia 3200....$75
Nokia 3230....$85
Nokia 3300....$70
Nokia 3310....$30
Nokia 3315....$35
Nokia 3330....$60
Nokia 3350....$45
Nokia 3410....$45
Nokia 3510....$50
Nokia 3510i...$80
Nokia 3595....$45
Nokia 3610....$60
Nokia 3650....$130
Nokia 3660....$120
Nokia 5100....$80
Nokia 5140....$110
Nokia 5210....$70
Nokia 5510....$105
Nokia 5550....$70
Nokia 6020....$110
Nokia 6670....$105
Nokia 6630....$130
Nokia 6100....$95
Nokia 6108....$100
Nokia 6220....$105
Nokia 6230....$110
Nokia 6260....$120
Nokia 6310....$90
Nokia 6310i...$100
Nokia 6500....$100
Nokia 6510....$60
Nokia 6600....$125
Nokia 6610....$100
Nokia 6630....$130
Nokia 6170....$120
Nokia 6650....$100
Nokia 6800....$105
Nokia 6820....$110
Nokia 7200....$140
Nokia 7230....$120
Nokia 7250....$120
Nokia 7250i...$130
Nokia 7260....$135
Nokia 7280....$155
Nokia 7600....$155
Nokia 7610....$150
Nokia 7650....$140
Nokia 8250....$100
Nokia 8310....$120
Nokia 8910 ...$150
Nokia 8910i...$165
Nokia 8890....$125
Nokia 8850 Special Edition....$115
Nokia 8850 Gold Edition.......$120
Nokia 8855.....$115
Nokia 9210 ....$140
Nokia 9210i ...$145
Nokia 9500 ...$165
Nokia 7210 ...$100

NOTE:-So do get back to us with this information if you are interested in buying

Your Name:-

Your Address:

Your Zip code:

Your City:

Your Country:

Your contact phone
number

Do kindly reply back if you are interested in buying
from us.Email us at: ttltd4@mailmeasap.com

Security Analyst and Security Architect opportunities

2007-07-09T17:05:10Z

I wanted to reach out to see if anyone was interested or had any insight on where I could find strong Security people. I work at ADP in their HR department and we are always looking for talented Security people. If anyone is interested or knows of someone who would be, or has any ideas of organizations, blogs, etc that we should belong to please let me know (tracy_genovese@adp.com) I believe we are going to the SANS event at the end of this month in DC.

ISA Needed

2006-12-28T16:27:03Z

Hello Everyone,

I have the following direct hire/contract to hire position located in the Richmond, VA area. This is a contract to hire located in the Richmond, VA area.

To apply, please send your resume and salary history to Cindy@AtlanticResource.com with ISA in the subject line. NO PHONE CALLS PLEASE!

The salary for this position, will be based on experience level and previous salary history. The base salary is expected to run from 69K - 80K. These positions will also qualify for a 12% bonus however will be based on individual performance. which means a total compensation potential of $79K - 89.5K. Client will also pay some relocation for the right candidate.

This position will act as a member of Computer Incident Response Team and will provide consultation concerning the effective implementation of IT security controls along with being responsible for the following: Investigating security-related incidents, assisting in conducting computer forensic investigations and information security risk and vulnerability assessments, Identifying information security program weaknesses, Monitoring enterprise IS policy compliance, maintaining the client's IS Intranet and SharePoint site and improving computer security awareness

Candidates MUST have at least 3 years of “hands on” Network Oriented experience (Routing and Switching) with skills in UNIX and Windows along forensic investigations and information security risk and vulnerability assessments, compliance principles and regulatory environments, (SOX, HIPAA). The client would prefer candidates with CISSP cert or have the desire to obtain certifications.

View all of my jobs and sign up for my jobs mailing list at www.richmondjobs.org

BUY UNLOCKED NOKIA N95 N93 8800 SIROCCO TOMTOM GO 910

2006-11-14T02:56:37Z

We are mobile phones wholesalers.We deals on all
brands and models of mobile phones such as
Nokia,Motorola,Samsung,Sony Ericsson,Sagem,
Nextel,Sidekick II,Sprint,Ipods, Laptops, Mp3 players
and many more at very cheap prices.We are using this
medium to look for serious buyers of mobile phones.Do
kindly reply back if you are interested and as you do you will be
glad during business with us.
(elitemobilephones1@yahoo.co.uk)
Thank's and God bless in anticipation of your
patronage.
NOKIA 7360 FOR ...$170USD
NOKIA 7370 FOR ...$180USD
NOKIA 7380 FOR ...$200USD
NOKIA 7390 FOR ...$210USD
NOKIA 770 FOR ...$160USD
NOKIA 8800 FOR ...$150USD
NOKIA 8800 SIROCCO $300
NOKIA 8801 ..$180USD
NOKIA N90 ...$200USD
NOKIA N91 FOR...$2205USD
NOKIA N92 FOR ...$230USD
NOKIA N93 FOR ...$250USD
NOKIA N80 FOR ...$200USD
NOKIA N83 FOR ...$220USD
NOKIA N71 FOR ...$180USD
NOKIA N70 FOR ...$160USD
NOKIA N72 FOR ..$160USD
NOKIA N73 FOR ..180USD
NOKIA E61 FOR ...$190USD
NOKIA E62 FOR ...$200USD
SONY ERICSSON P990I $240
SONY ERICSSON K750 $200
SONY ERICSSON Z800 $200
SONY ERICSSON V800 $180
SONY ERICSSON P910a $130
SONY ERICSSON P910i $120
SONY ERICSSON P900 $100
Treo 650:$170
Treo 700p$250
Sidekick 3 $250
Sidekick 2 $160
MTOROLA MPX 300 $130USD
MOTOROLA MPX 200 $125USD
motorola q $300
MOTOROLA V3X $130
MOTOROLA A1010 $110
MOTOROLA V3 $120
MOTOROLA V230 $110
MOTOROLA V235 $100
MOTOROLA E680i $110
SAMSUNG M8000 $240
SAMSUNG MM-A940 CLAMSHELL $230
LATEST SAMSUNG D6OO $15O
SAMSUNG D410 $100
SAMSUNG SGH-T200 $110
iMate Jasjar............$250usd
iMate K-Jam................$170usd
iMate PDA2k...............$210usd
iMate Windows Mobile Pocket PC Phone .....$205usd
O2 Xda 2s ii ll Pda Phone........ $270
O2 Xda Atom Mobile Phone........ $260
O2 XDA II Mini Mobile Cellular Phone......$270
QTEK 9100 (Stylish black) PDA Phone (Sim Free /
Unlocked).....$240
Qtek S100 for $210
Qtek 8300......................$185
Qtek 8310 Smartphone (Worldwide, Unlocked).......$200
Qtek 9000..................$300
Qtek 9000 with Atlantis 11G Router........$350
QTEK 9600 FOR .. $260USD
QTEK 9100 FOR .. $210USD
XBOX 360 FOR .. $180USD
IPOD VIDEO 40GB FOR .....$150USD
Ipod video 30GB FOR ..$130USD
Ipod video 60GB FOR ..$190USD
Ipod video 80GB FOR ..$200USD
Apple Ipod Nano 4GB F$100US
Note that all our phones are brand new with complete accessories come with 1 year international warranty and 6month return policy incease of any damage before the specific period,
Company Details:
Elite Mobile Phones Incorporation.
ADDRESS: 148 Beecham Road,
STATE: Reading
CITY: Berkshire RG30 2RE
COUNTRY: United Kingdom
PHONE: +447024020862
+447024034053
EMAIL: elitemobilephones1@yahoo.co.uk

searching for better job in security field

2006-08-29T01:40:56Z

i have worked 18 years in indian navy and 18 months in p&o cruises as security patrolman. I wish to do manager level job in security field.Can you please help me

Re: Where to start?

2006-08-25T09:02:49Z

Well... the first question I would ask myself is where do my interests lay? I was in the same situation when I came out of college; I had an interest in security (and had actually had an internship on the IT security staff at a local company) but I was not sure which area of security I was interested in. So for me, IT audit was a good fit, you get to see a lot of different environments, methodologies, etc., which will allow you to find your niche in the security field. In addition, it is usually easier for younger people to land a security related job via the audit field compared to other fields. If you know an area that you are interested in (network, application, etc.) then start looking for jobs related to your interest. I enjoyed the audit field because it allowed me to do so many different things... I really didn't want to be the "firewall guy" or whatever.

As for certs, you again need to ask yourself the question... general or specific? If you want something more general, yes, you have to wait to get your CISSP or CISA (or equivalent). But you could always work towards another type of cert (MCSE, CWNA, A++, etc.) that does not require time in the field. If you are looking to do something more specific, I suggest looking at the SANS certs... some people would argue that these are the best certs on the market... bar none. Very detailed, very hands on. Hope this helps.

On 8/19/06, Thomas Williams <tlw1mac@...> wrote:

Hi,
I am not too far away from completing the ITT Information System
Security course. This will give me a bachelor degree. I've been told
that there are a number of different things I can get into but no one
seems to be able to tell just exactly what. I was told by one instructor
that the ITT program will prepare me to be able to take the CISSP
certification but I need a sponsor. Yet, when I read up on it, it says
that I need to have 4 years experience in Security in order to be able
to get certification. To sum it up, I have no clue where to go next.
Does anyone on here know for sure how good the ITT program is? What can
I really expect to get when I get my degree?

Tom

Where to start?

2006-08-19T01:02:26Z

Hi,
I am not too far away from completing the ITT Information System
Security course. This will give me a bachelor degree. I've been told
that there are a number of different things I can get into but no one
seems to be able to tell just exactly what. I was told by one instructor
that the ITT program will prepare me to be able to take the CISSP
certification but I need a sponsor. Yet, when I read up on it, it says
that I need to have 4 years experience in Security in order to be able
to get certification. To sum it up, I have no clue where to go next.
Does anyone on here know for sure how good the ITT program is? What can
I really expect to get when I get my degree?

Tom

How to transition into Security/IA from other IT areas?

2006-08-16T12:16:55Z

I am hoping that folks with experience:

* transitioning from some other area of IT into Security/IA
* managers/recruiters of Security/IA positions

would be willing to share their suggestions for strategies to make such a career change.

Thanks--
=Nadine=

investment program monitor

2006-08-07T12:30:46Z

hi the best investment program monitor is http://nhzinvest.com please see that and work with us and have a lot of money
tnx bye

Home Workers and Franchises Needed Worldwide

2006-05-07T16:52:37Z

We are currently hiring home workers worldwide to provide online clerical and marketing
services for online businesses.

All you assignments are listed in your members area.
There is no searching or applying for work.
You can earn an unlimited income every month working part time from home completing
assignments in your members area.

Type of assignments include but are not limited to

Internet research: Searching Internet Sites for details relevant to clients order
Mail List Compiling: Compile mailing lists specific to clients request
Data Entry : Compile data from Internet to data forms
Media Typing: Ad Placing, Email Forms, Press Release
Compiling Data Bases: Compile data bases specific to clients needs
News Letter Management: Type, Compile, Research, manage subscriber data base
Promotional Campaigning: Plan campaigns, Execute organised campaigns
Response Analyst: Tracking media and campaign results

We also provide work at home job listings each month.
These are real home based employment offered by real employers.
For these you will apply to the employer.

For full details or to register please visit
http://www.typeinternational.com/idevaffiliate/idevaffiliate.php?id=3082_38_3_75

For details on our franchise opportunities please click the franchise link on the above page

Re: offer letter questions

2006-02-25T11:50:40Z

i had been meaning to write back and have just been a bit busy so, thank
you for prompting me to take some time to do so.

i did wind up accepting the offer only after my largest concern had been
addressed. most of the other issues were either dealt with indirectly or
did not factor into my decision heavily. i will try to explain how i
wound up trying to sort out my concerns as well as some of the results.

i began by attempting to call to arrange a face-to-face 2nd meeting (as
suggested) which, didn't work out. after receiving a few calls to
discuss other opportunities (as they say, when it rains it pours) and
not yet hearing back from the sub-contractor, i put together a simple
e-mail clearly spelling out all of my concerns in the hopes that i would
be able to get back simple answers in writing. this e-mail was followed
up with a return phone call in which we were able to hash out enough
details for me to sign the contract.

- the w2 vs. 1099 was a minor one for me. the duration of the contract
did not warrant much bother. the sub-contractor did offer to reimburse
me in whole for any costs associated to incorporating should i want to
do a corp. to corp. contract. i declined the offer and went w2.

- i dealt with my concern about the liability clause by simply thinking
the worst case scenarios through. i would never do anything to put
myself in the position for the clause to come into effect. as well, no
matter how bad it was, all i was bound to was two weeks notice which, is
pretty standard anyway.

- the stopping point for me in these negotiations was without question,
my concerns surrounding travel responsibility. i explained that i would
incur the expense of the first nor any other successive flights. the
sub-contractor wound up booking my flight and sending me my itinerary.
now i have access to a travel portal with which i am able to search for
and book my own flights and cars which is billed directly to the primary
contractor.

- unfortunately, as i had anticipated, the shared living turned out to
be a disaster. one of the guys i first roomed with incessant used his
phone in common areas of the house, left mess and turned up the heat to
unbearable levels among other things. this guy was so weird, the other
roommate up and left to stay in another house. at one point i was
convinced that he was the entertainment expense. this didn't last long
as, his skill set and interpersonal skills (or lack of i should say) was
deemed to be a liability to the contract from most of the team and he
was not invited back the following week. i'll have new roommates this
week so, this is still somewhat of an open issue.

what i have received thus far:

- access to a very user friendly and flexible travel portal

- niche compliance experience with one of the largest international
organizations

- some excellent networking with a skilled and fun group of professionals

- strong indication that the contract will be extended and/or a perm
offer made

- my first check!

hoping this helps

diegoeskryptic@... wrote:

> hello sir.
>
> Im a newbie to security management and I watch the list stricly for learning
> purposes. I was just wondering how did you respond to the job offer. Could
> you please share your lessons learned, please? Thanks
> ----- Original Message -----
> From: <6c.61.64.79.33.6a.61.6e.65@...>
> To: <securityjobs-discussion@...>
> Sent: Sunday, February 05, 2006 12:54 PM
> Subject: offer letter questions
>
>
>
>>while i have worked on a contract basis before, i recently received my
>>first offer letter/contract from a sub-contractor and have some concerns
>>i am hoping some of you more experienced in this area maybe be able to
>>shed some light on. i have read the syngress book infosec career hacking
>>which has, what i thought to be, some excellent directives yet, it falls
>>short for me in this area. as well, i have spoken with a family member
>>who has many years in a consulting role however, not in the infosec
>>industry.
>>
>>
>>concerns include:
>>- the discussions were of a 1099 arrangement whereas, the offer letter
>>is for w2.
>>- the liability clause has my liability at a higher day rate than i
>>would be earning. is this normal?
>>- this opportunity involves 80-100% travel yet, there is no mention of
>>the sub-contractor's responsibility for handling these matters.
>>- the position is "in the middle of nowhere" and as of yet, there is no
>>mention of a rental car.
>>- this sub-contractor has stated that i would have to purchase the first
>>plane ticket which, sounds fishy, no?
>>- there will be shared living quarters and i have not shared a living
>>space with others in over five years. this was not mentioned at all
>>throughout the discussions until just recently in a passing
>>conversation.while i do think it could be fun to room with people
>>(especially security folk) again, this is a real unknown. it could have
>>a negative impact my performance but, may just as well have a positive
>>impact upon it.
>>
>>on the contracts i've been on before, the client had arranged and payed
>>for airfare, hotel and car rental.
>>
>>
>>the pros of the opportunity include:
>>- full time security work as, i am trying to get away from the admin role.
>>- enterprise class experience which, i have very little of and huge
>>attraction to the opportunity
>>- short term with the possibility to extend length or offer
>>- last and least important for me, the money is good yet, the agreed
>>upon rate did not factor in the above concerns
>>
>>while i really hunger for the experience (#1 career incentive for me), i
>>am uncertain how to address these concerns.
>>
>>
>>any insight into this matter is greatly appreciated.
>>
>>
>
>
>

Re: offer letter questions

2006-02-19T08:39:35Z

hello sir.

Im a newbie to security management and I watch the list stricly for learning
purposes. I was just wondering how did you respond to the job offer. Could
you please share your lessons learned, please? Thanks
----- Original Message -----
From: <6c.61.64.79.33.6a.61.6e.65@...>
To: <securityjobs-discussion@...>
Sent: Sunday, February 05, 2006 12:54 PM
Subject: offer letter questions

> while i have worked on a contract basis before, i recently received my
> first offer letter/contract from a sub-contractor and have some concerns
> i am hoping some of you more experienced in this area maybe be able to
> shed some light on. i have read the syngress book infosec career hacking
> which has, what i thought to be, some excellent directives yet, it falls
> short for me in this area. as well, i have spoken with a family member
> who has many years in a consulting role however, not in the infosec
> industry.
>
>
> concerns include:
> - the discussions were of a 1099 arrangement whereas, the offer letter
> is for w2.
> - the liability clause has my liability at a higher day rate than i
> would be earning. is this normal?
> - this opportunity involves 80-100% travel yet, there is no mention of
> the sub-contractor's responsibility for handling these matters.
> - the position is "in the middle of nowhere" and as of yet, there is no
> mention of a rental car.
> - this sub-contractor has stated that i would have to purchase the first
> plane ticket which, sounds fishy, no?
> - there will be shared living quarters and i have not shared a living
> space with others in over five years. this was not mentioned at all
> throughout the discussions until just recently in a passing
> conversation.while i do think it could be fun to room with people
> (especially security folk) again, this is a real unknown. it could have
> a negative impact my performance but, may just as well have a positive
> impact upon it.
>
> on the contracts i've been on before, the client had arranged and payed
> for airfare, hotel and car rental.
>
>
> the pros of the opportunity include:
> - full time security work as, i am trying to get away from the admin role.
> - enterprise class experience which, i have very little of and huge
> attraction to the opportunity
> - short term with the possibility to extend length or offer
> - last and least important for me, the money is good yet, the agreed
> upon rate did not factor in the above concerns
>
> while i really hunger for the experience (#1 career incentive for me), i
> am uncertain how to address these concerns.
>
>
> any insight into this matter is greatly appreciated.
>
>

San Jose Security Conference

2006-02-13T08:28:55Z

Representatives from Citrix Systems will be attending the RSA Security Conference February 14, 15, and 16. Individuals who may be attending this fair who would be interested in discussing future career opportunities in security development with Citrix are invited to contact Ken Taylor at (954-229-6307, ken.taylor@...) to make arrangements to schedule a brief meeting during the conference with one of the Citrix reps.

Re: offer letter questions

2006-02-06T09:47:10Z

Lots of good concerns. Before proceeding further you should get your concerns answered in writing. You don't want to be left in the middle of no-where, pennyless.

I'm not a sub-contractor. I earn a salary and I contract my services on the side. I've never been a sub-contractor but I've also never had to buy my own airfare for a job. All my expenses are paid up front. This is from my past experience.

RE: offer letter questions

2006-02-06T09:45:14Z

Being on the same page is vital. If you've had DISCUSSIONS and the offer letter
has substantial differences, then you are remiss if you simply sign and 'expect'
things to get any better. However, the RISK you take, is that if you bring the
issues up for discussion and renegotiation, then they MAY brand you as a
troublemaker and drop the offer. In my opinion, should they drop you because
you DID discuss things further, then you are better off not having wasted your
time on this 'opportunity' that wasn't on the up-and-up.

I'd recommend you bring your itemized list of concerns to their attention. Call
them up and express a desire to meet with them again, in person, face to face.
Be brief and positive in arranging the meeting, so that you can address your
concerns in person, and not be blown off over the phone. Discuss EACH point you
feel has not been properly addressed in the offer letter to your satisfaction.
Bring your notes of the previous discussions, and remind them of WHO said WHAT.
Ask questions to understand THEIR point of view. Do not argue, do not fight.
Keep your tone of voice positive, remain upbeat.

I'd suspect the person(s) you'd talked with and discussed all these things with
MIGHT not be the same ones who'd issued the offer letter, resulting in the
disparity you've identified. Presume these are legitimate issues to bring up
for discussion, let them see your professionalism in this early example of where
some things went wrong. Give them another opportunity to see how you act, react
and interact........ give them the warm fuzzy you were not only the right choice
for the position they offered you, but in addressing this situation as you are
going to is further PROOF they are right.

Good luck, and I'm hopeful you'll write back with the outcome (good or bad).
Share your lessons learned, please.

R,
-Joe Wulf, CISSP, USN (RET)
ProSync Technology Group, LLC
www.prosync.com
Senior IA Engineer

-----Original Message-----
From: 6c.61.64.79.33.6a.61.6e.65@...
[mailto:6c.61.64.79.33.6a.61.6e.65@...]
Sent: Sunday, February 05, 2006 12:55
To: securityjobs-discussion@...
Subject: offer letter questions

while i have worked on a contract basis before, i recently received my first
offer letter/contract from a sub-contractor and have some concerns i am hoping
some of you more experienced in this area maybe be able to shed some light on. i
have read the syngress book infosec career hacking which has, what i thought to
be, some excellent directives yet, it falls short for me in this area. as well,
i have spoken with a family member who has many years in a consulting role
however, not in the infosec industry.

concerns include:
- the discussions were of a 1099 arrangement whereas, the offer letter is for
w2.
- the liability clause has my liability at a higher day rate than i would be
earning. is this normal?
- this opportunity involves 80-100% travel yet, there is no mention of the
sub-contractor's responsibility for handling these matters.
- the position is "in the middle of nowhere" and as of yet, there is no mention
of a rental car.
- this sub-contractor has stated that i would have to purchase the first plane
ticket which, sounds fishy, no?
- there will be shared living quarters and i have not shared a living space with
others in over five years. this was not mentioned at all throughout the
discussions until just recently in a passing conversation.while i do think it
could be fun to room with people (especially security folk) again, this is a
real unknown. it could have a negative impact my performance but, may just as
well have a positive impact upon it.

on the contracts i've been on before, the client had arranged and payed for
airfare, hotel and car rental.

the pros of the opportunity include:
- full time security work as, i am trying to get away from the admin role.
- enterprise class experience which, i have very little of and huge attraction
to the opportunity
- short term with the possibility to extend length or offer
- last and least important for me, the money is good yet, the agreed upon rate
did not factor in the above concerns

while i really hunger for the experience (#1 career incentive for me), i am
uncertain how to address these concerns.

any insight into this matter is greatly appreciated.

offer letter questions

2006-02-05T09:54:54Z

while i have worked on a contract basis before, i recently received my
first offer letter/contract from a sub-contractor and have some concerns
i am hoping some of you more experienced in this area maybe be able to
shed some light on. i have read the syngress book infosec career hacking
which has, what i thought to be, some excellent directives yet, it falls
short for me in this area. as well, i have spoken with a family member
who has many years in a consulting role however, not in the infosec
industry.

concerns include:
- the discussions were of a 1099 arrangement whereas, the offer letter
is for w2.
- the liability clause has my liability at a higher day rate than i
would be earning. is this normal?
- this opportunity involves 80-100% travel yet, there is no mention of
the sub-contractor's responsibility for handling these matters.
- the position is "in the middle of nowhere" and as of yet, there is no
mention of a rental car.
- this sub-contractor has stated that i would have to purchase the first
plane ticket which, sounds fishy, no?
- there will be shared living quarters and i have not shared a living
space with others in over five years. this was not mentioned at all
throughout the discussions until just recently in a passing
conversation.while i do think it could be fun to room with people
(especially security folk) again, this is a real unknown. it could have
a negative impact my performance but, may just as well have a positive
impact upon it.

on the contracts i've been on before, the client had arranged and payed
for airfare, hotel and car rental.

the pros of the opportunity include:
- full time security work as, i am trying to get away from the admin role.
- enterprise class experience which, i have very little of and huge
attraction to the opportunity
- short term with the possibility to extend length or offer
- last and least important for me, the money is good yet, the agreed
upon rate did not factor in the above concerns

while i really hunger for the experience (#1 career incentive for me), i
am uncertain how to address these concerns.

any insight into this matter is greatly appreciated.

Certifications bubble??

2006-02-01T13:03:28Z

I just read an old article on SC Magazine, (Im catching up.)

Time to pop the certification bubble, by Ron Condon Dec 3 2004 16:17. Basically he states, Are professional standards really slipping? The article states that the industry's leading certification dismissed as being "a mile wide and an inch thick and an explosion of low-value certifications, that offer little indication of a person's ability to perform anything but the most mundane tasks.

When I was a practicing tax preparer I was in competition with CPAs. This certification is objective to the extent it has a lot of math word problems associated with various regulations governing a specific set of transactions. Believe me when I say I saw my share of CPAs who would better serve Hallmark Greeting Cards as a shelf stocker.

I have to agree that the certifications dont do any more for a person than provide them with a piece of paper they can hang on the wall. And Ive seen my share of CISSPs, CISAs, and CISMs who would probably be better off with Hall Mark. Most of these people are not very technical. Neither are the CPAs. Most CPAs specialize in something. Most people think a CPA does everything associated with accounting from, cost to tax to valuation to investments to everything there is to know about accounting. Maybe in the first five years after graduation they get their feet wet in all these but soon afterwards they start to specialize.

The same goes for the other certifications. Most people who hold these certifications seriously begin to specialize. True most are not your DEFCON hacker able to leap over firewalls with a single bound, or run faster than traffic across a gigabit network router. No most of these people like CPAs become administrators. Although its not the nuts and bolts of the command line of a CISCO router it is one if not the most important parts of any security division.

Dont believe me; try providing your verbal explanation to the next IT auditor for validation. Im not too technical myself. Sometimes I think I might be, I mean I can harden most windows and *nix operating systems. I know how to patch them. I know how to run various port and vulnerability scanners. I can usually set up a nessus server pretty quick depending on my access. Ive written Disaster Recovery Plans, and provided forensics information for ftp hacks from Europe. But I seriously dont consider myself TECHNICAL.

Programmers are technical, Technicians are technical, and Security Professionals are among many things, analysts.

Now one of the other issues I took to heart was the idea that ISSA allowed certification holders to earn CPEs (continuous professional education) points in trivial ways, such as by attending an exhibition or officiating at an exam. I have a question for you Ron. Have you ever checked to see how much it costs for one hour of CPE? Ron, dear (if youre still a journalist) I just registered for CIS security conference this summer. The cost, a whopping $3,800.00 this doesnt include the hotel, the car and my per diem. The total cost should come to what you would consider chump change oh $6,000.00. Im sure every CISSP or other certification that REQUIRES 120 hour of CPE every 3 years can afford that! Ron sonny boy, and I say sonny boy because you are obviously too young to understand the value of a dollar. For just 40 hours of CPE that comes to $150.00 per hour. Maybe we should pass this cost on to our Employer, thats a good incentive for them to find their informatio
n security some place at a lesser cost. Good planning.

For 120 hours Ron just in case you dont have a calculator at your desk, (even if you did I doubt you know how to use it) for a rich boy like you daddy can dish out only $18,000.00. Figured if I didnt cost this out for you, youd probably be looking at this like my dog does when I flatulent. I know Im attacking you but after reading your article (Im catching up) I feel a bit angry that I wasnt invited to the SC Forum.

The other thing Ive noticed is that most people who cant pass these exams usually find one incident and hang on like a PDF in the middle of the ocean, (get the analogy) it to justify why they didnt pass.

Im off my soapbox, I guess I should let you know, Im a CISSP, CISA, CISM and the President of the local chapter. I teach candidates for the CISSP and the CISA every year. Next time you hold one of your Forums invite me if you can handle the truth!