- UID
- 47404
- 热情
- 675
- 人气
- 2469
- 主题
- 11
- 帖子
- 1577
- 精华
- 0
- 积分
- 2422
- 分享
- 0
- 记录
- 0
- 相册
- 0
- 好友
- 16
- 日志
- 0
- 在线时间
- 5637 小时
- 注册时间
- 2005-8-23
- 阅读权限
- 30
- 最后登录
- 2023-9-29
  
升级   28.13% - UID
- 47404
- 热情
- 675
- 人气
- 2469
- 主题
- 11
- 帖子
- 1577
- 精华
- 0
- 积分
- 2422
- 阅读权限
- 30
- 注册时间
- 2005-8-23
|
https://www.linkedin.com/pulse/d ... ulse_spock-articles
Dear applicants, this is why you are not shortlisted
Three days ago I put out an ad looking for "Security engineer – Graduate/Junior x 2". The response has been overwhelming. In less than 3 days, I have received close to 150 applications.
Out of the 150 applications so far:
- 4 candidates have been added to the short list (that I will invite to come in for a face to face interview)
- 24 candidates have been added to the long list (which basically means someone from my team will give the candidate a quick 5 minute call, and decide whether to put them forward to the short list or not).
While sitting here going through the sheer volume of applications, and rejecting the majority of them, I started to wonder, it would actually be quite nice to provide some general feedback, in terms of how a hiring manager like myself typically does the initial assessment, as well as some of the “do’s” and “don’ts” in their CV (which will hopefully help candidates increase their chance of getting shortlisted for a role in the future).
When I assess an application, the following typically result in a straight rejection:
- Applicant is not entitled to work in NZ (e.g. currently on student visa, currently overseas).
- Applicant’s stated salary expectation well exceed what’s right for the role (yup I will pay you $80k for a graduate role – NOT!!!).
- Applicant has a criminal offence of some sort (it’s glad to see that some applicants are up front about past offences, however due to the nature of our job and type of customers we support, we typically will only consider candidates that have a clean record).
- Applicant that’s overqualified. We are typically reluctant to put a candidate into role that he/she is overqualified for, as we know he/she will get bored very quickly, and there’s a higher chance that they will jump ship to the next opportunity that pays more within a short time frame.
- Applicant that doesn’t put any effort into his/her CV. You will be surprised at the number of applicants that send me a one pager CV, that tells me nothing about the candidate, other than some really basic information.
- Applicants that just re-use the same CV for every single application. It doesn’t look good when the stated career goal in your CV says you want to be a successful software developer, when applying for a Security engineer role.
- Applicant that doesn’t put any effort into selling him/herself. We are looking for someone that is passionate about network security, just spamming your CV everywhere, and showing no evidence on your CV that you have done anything in this space isn’t going to get you very far.
Taking into account that, in average, I spend only about 2 minutes assessing a candidate, if you are serious about getting into network security, and are pursuing your first role, ideally:
- You would have done a degree that’s semi relevant (or have done some network security related papers).
- Your CV touches on some of the security tools or concepts that you are familiar with.
- You have some security related certifications under your belt (or are studying towards it)
Something to note is that, you are competing against a large number of applicants, if your CV doesn’t stand out (within the 2 minutes I spend time on it), you are unlikely to catch my attention and get added to either my short or long list.
I do also want to offer some word of encouragement that, if you are passionate about this field, I suggest that you:
- Walk the talk. Don’t just verbally tell me you are into security, actually get your hands dirty. Good thing about the internet and google is that, even without working full time in security, there are a lot of things about security you can actually learn or get into by just setting up a home lab (how bout taking a challenge on https://alexnisnevich.github.io/untrusted/, or setup an instance of snort IDS sensor at home?)
- Connect to people already in the Security industry (such as myself), quite often it helps to talk to people that are already working in the real world, as they can guide you in many ways, which will hopefully increase your chance of landing a job.
- Keep up with the latest news, keep up with what’s going on around the world. How bout spend 10 minutes each day, on https://isc.sans.edu/ as well as https://www.reddit.com/r/netsec/.
- Last but not least, be persistent, as long as you are willing to put in the time and effort, eventually you will get there. If you don’t make my short/long list this time round, try harder, the overall security industry is booming, and it’s just a matter of time before mine (or other) teams are looking to hire security engineers again.
I hope this gives some of you looking to land your first job some insight into a hiring security manager’s mind. Best of luck with your job hunting journey.
|
-
2
查看全部评分
-
|