Blog
The CyberHire journal.
Writing for security leaders, hiring managers, and the people who actually do the work. No thought-leadership fluff. Opinions welcome.
-
Cyber Security Aptitude Test vs Skills Test for Hiring
What a cyber security aptitude test measures, how it differs from a skills test, and when to use each for apprentices, career changers and experienced hires.
-
25 Application Security Interview Questions and Answers
25 application security interview questions with what each one tests and what a strong answer includes, from secure code review to threat modelling and CI/CD.
-
25 Cloud Security Interview Questions and Answers
25 cloud security interview questions across AWS, Azure and GCP, with what each one tests and what a strong answer includes, grouped by area of responsibility.
-
25 Detection Engineer Interview Questions and Answers
25 detection engineer interview questions with what each one tests and what a strong answer includes, from Sigma and KQL to tuning, testing and coverage.
-
25 GRC Analyst Interview Questions and Answers
25 GRC analyst interview questions with what each one tests and what a strong answer includes, from risk registers and ISO 27001 to SOC 2 and vendor risk.
-
How to Assess Cloud Security Skills Before You Hire
How to assess cloud security skills across AWS, Azure and GCP: four skills, a task for each, what strong and weak attempts look like, and how to calibrate.
-
How to Assess a Detection Engineer Before You Hire
How to assess a detection engineer: four skills that matter, a task for each, what strong and weak attempts look like, and how to test tuning, not just writing.
-
How to Assess Incident Response Skills Before You Hire
How to assess incident response skills: the four skills that matter, a task for each, what strong and weak attempts look like, and how to calibrate by level.
-
How to Hire a Cyber Security Analyst (Step by Step)
How to hire a cyber security analyst: define the work, write an advert for it, test before you shortlist, and interview to confirm what the test showed.
-
How to Assess AppSec Skills Before You Hire
How to assess AppSec skills: four skills, a code review task for each, what strong and weak attempts look like, and how to judge code you cannot read.
-
How to Hire a SOC Analyst for Tier 1, 2 or 3
How to hire a SOC analyst at the right tier: what Tier 1, 2 and 3 analysts must do on day one, how to test each, and the mistakes that empty the pipeline.