CyberSecurity: Trends, Careers, & the Next Generation

Transcription

1 CyberSecurity: Trends, Careers, & the Next Generation Ludwig Goon March 2-4, 2016

2 Disclaimer: The view and opinions expressed in the presentation are that of the presenter and is not affiliated with employers. Data presented is open sourced and publicly available.

3 Evolution of Information Technology

4 cybersecurity ˌsībərsiˈkyo orədē/ noun The practice of the protection of information Systems and the services provided. Adding to that, Cybersecurity is a growing sector including many related advanced technologies, the Internet of Things, that now includes education and governance.

5 1. Network Attacks 2. Intellectual Property & Data 3. Financial & Identity Data 4. Social Engineering 5. ICS, SCADA, Autonomous systems What s todays #1 computer crime target?

6 It s ALL about that Data!

7 It s ALL about that Data! The Industry and Government are ALWAYS prime targets!

8 Types of Cyber Attacks

9 About: Mississippi Native Mississippi Educated 20 years in I.T. & CyberSecurity Data Visualizer Software Engineer Systems Administrator CyberSecurity Engineer

10 Information Technology & Cybersecurity Careers I.T. Careers Software/Hardware Engineer Web/Mobile Application Programmer Computer Programmer I.T. Analyst Business Systems Analyst Database Administrator Network Engineer Web Developer Help Desk/ Tech /Customer Support Systems Engineer or Integrator Systems Administrator Chief Information Technology Officer Cyber Security Careers Security Analyst Security Engineer or Architect Security/IT Director or Manager Systems Administrator Vulnerability/Threat Analyst Forensics Investigator Malware Analyst or Engineer Information Assurance Systems Engineer or Integrator Penetration Tester or Engineer Chief Information Security Officer Chief Security Officer

11 Cybersecurity Skill Sets Needed: Cyber Software Engineer 1 Experienced Location(s): United States-Maryland-Millersville US Citizenship Required for this Position: Yes Relocation Assistance: No relocation assistance available Description Northrop Grumman Mission Systems sector is seeking a Cyber Software Engineer 1 to join our team of qualified, diverse individuals. This position will be located in Millersville, MD. Roles and Responsibilities: Ensures software standards are met. Designs, develops, documents, tests and debugs software applications and systems that contain logical and mathematical solutions. Performs advance research on cutting edge technologies and programming techniques to develop unique and innovative software prototypes. Work independently and collaboratively to develop complex solutions involving advanced cyber technologies, network communications and collaborative software systems. Qualifications Basic Qualifications: To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below: 0 Years experience with a Bachelors degree in Computer Science, or related discipline from an accredited college or university. Working knowledge with C or C++ Strong background in software engineering, scientific computing, web technologies and/or embedded systems. Active Top Secret clearance, eligible for SCI. Requires 0-10% travel within the state. Preferred Qualifications: Knowledge of Malware and Operating Systems Experience with Reverse Engineering and Service Oriented Architecture (SOA) Active TS/SCI preferred

12 Cyber Intel Analyst Associate Job Code/Title: Cyber Intel Analyst Associate Job Description Cybersecurity Skill Sets Needed: Key aspects of this dynamic position include the following: Development on automated software testing frameworks for large scale security-critical software testing Low-level firmware/software development pushing the bounds of the originally specified intent of the hardware/software OS/Network/Application security and evaluation improvements OS/Network/Application secure design principles and development techniques OS/Network/Application vulnerability assessments Information operations - Tactics and Technologies Reverse engineering techniques and tools. Basic Qualifications Platforms: Windows, Linux, Mac, Mobile (ios, Android) Programming languages: Python, C, C++, or Assembly Desired skills Experience with the kernel debugger and internal data structures. Reverse engineering of operating system components Knowledge of and ability to navigate and manipulate the Windows registry Ability to navigate and control networking stack Knowledge of the operating system security protections Understanding how operating systems manage physical and virtual memory Familiarization with troubleshooting file-system access problems Understanding of encryption methods Job Location(s): Herndon Virginia Security Clearance: TS/SCI Program: NVA Cyber Research Job Class: Software Engineering Job Category: 4 yr and up College City: Herndon State :VA

13 Cybersecurity Skill Sets Needed: Cyber Analyst Location: Charlotte, NC US Citizenship Required: Yes Shift: 1st Shift Required Security Clearance: Eligible - Secret Job Description: BAE Systems has a job opening for a Cyber Security Analyst in Charlotte, NC. Function as a Cyber SecurityDevOps professional for the BAE Global Security Operations Center. Work with Security Analysts and Engineers to develop and enhance cyber security solutions to support a global security operations capability. Technical Functions: Developing or enhancing existing full suites of custom cyber security toolsets. Setting up and deploying servers and operating systems to host critical cyber security tools. Developing tools to integrate open source applications with widely used commercial security tools. Monitor SIEM (ArcSight and Splunk) and other network security devices for alerts Investigating alerts using any and all available tools and data resources. Required Skills and Education: Required education: Associates. Basic Requirements: 2+ yrs programming experience to include scripting languages such as Python, Perl, and bash. 2+ yrs experience and knowledge of Linux operating systems. 2+ yrs experience with system administration at hardware, software, as well as OS levels. 2+ yrs experience and knowledge of high and low level network protocols such as TCP, UDP, HTTP, SMTP,etc. 2+ yrs experience administering databases and developing database applications in traditional relational databases as well as NoSQL ones. Preferred Skills and Education: Other Requirements: Eligibility to obtain a security clearance Shift flexibility, including the ability to provide on call support when needed Ability to work greater than 40 hours per week as needed

14 Cybersecurity by the Numbers! 49% increase in IT jobs to USDL 37% increase for Security Analysts to USDL 74% increase in Cyber jobs since glassdoor.com 2 Million Cyber jobs available in UK Source $88,000 - Average Salary for Analysts - USDL 64% High Schools DO NOT have access to Computer Science classes or related resources - Raytheon & National Cyber Security Alliance

15 STEM Pipeline? Graduates Yes - Diversity NO - Hadi Partovi Mississippi Graduated 145 graduates in IT jobs in Mississippi available in code.org

16 TP: Technical Education in 71,000+ Students enrolled at MSCC 2014 >1000 Students in technical programs MSCCs have Computer Programing/Networking studies Some MSCCs have Information Technology Programs

17 Cybersecurity Education in NOVA

18 Talking Points Is Mississippi Interested in the CyberSecurity sector? What role should MSCC play in preparing Students? What Resources are needed at MSCC schools for Cybersecurity?

19 Closing Remarks Next Steps Cybersecurity is important, needed, & valued! Cybersecurity needs the next generation! I. T. & Cybersecurity will drive innovation! Next Generation Technologies will be based on I.T. and Cybersecurity!

20 Thank You!! Please keep in contact! facebook.com/lu.goon