RE: Interview Questions

[tony.dimichele () americas bnpparibas com]

Thought process is one of the most important qualities on my list, but to
really find out if they  "know" a technology , I ask them to explain
it,...but rather than naming the exact technology give an industry standard
TLA for it.  With no descriptive words, they either know the technology or
not.


just in case,...TLA is Three Letter Acronym










                                                                                                                        
  
           Extranet                                                                                                     
  
           Jeffrey_Camiel@jeffersonwells.                                                                               
  
           com                                                                                                         
To 
                                                 security-basics                                                        
  
           08/23/2006 01:57 PM                                                                                         
cc 
                                                                                                                        
  
                                                                                                                  
Subject 
                                                 RE: Interview Questions                                                
  
                                                                                                                        
  
                                                                                                                        
  
                                                                                                                        
  
                                                                                                                        
  
                                                                                                                        
  
                                                                                                                        
  
                                                                                                                        
  




Agreed!

Some thoughts.

Normally for a position you will go through a number of interviews which
fall into three types.

1. Technical
2. Operational
3. Culture fit

On the technical, I have found the best way to really determine if
someone knows there stuff is through real world problem solving. (i.e.
something doesn't work, walk me through fix it). The interesting thing
is the individual may not know the technology which is okay.  What I am
looking for is the thought process and the experience brought to
answering the question.


Jeffrey Camiel
Director, Technology Risk Management
Jefferson Wells International
San Jose, Ca.
408.454.2459 (of)


-----Original Message-----
From: BARRETT,WILL [mailto:BARRETW () airproducts com]
Sent: Wednesday, August 23, 2006 2:15 AM
To: revnic () gmail com; security-basics () securityfocus com
Subject: RE: Interview Questions

If you are going to do that why bother?  Chances are pretty good that
the person you are interviewing has already passed certification so why
ask them again?  Personally I find this kind of interview insulting and
it definitely indicates that the company either doesn't know about
security, or more likely doesn't care enough about it to make it worth
my while to work there.  Bad interview techniques = bad hire = bad
security.

A better solution in my opinion is to ask questions based on a real
world scenario, such as, "recently a wireless initiative was passed down
by management and we are going to roll out global wireless access to our
company in the next year.  What would you suggest as some things that we
would want to do in order to keep our network secure as we deploy this
technology?"   The is no "right" answer that would apply to every
company.  However the guy you want to hire will ask some more questions
about what you want to accomplish with this deployment before offering
his suggestion.  Also, even from the candidates you do not hire, you may
get some ideas that you hadn't considered.

Just my opinion

-Will Barrett

-----Original Message-----
From: revnic () gmail com [mailto:revnic () gmail com]
Sent: Tuesday, August 22, 2006 2:45 PM
To: security-basics () securityfocus com
Subject: Re: Interview Questions

get some tests from TestKing and compile a list of questions.


regards,

Revnic Vasile

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has
designated Norwich University a center of Academic Excellence in
Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience.
Using interactive e-Learning technology, you can earn this esteemed
degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence
in Information Security. Our program offers unparalleled Infosec
management
education and the case study affords you unmatched consulting
experience.
Using interactive e-Learning technology, you can earn this esteemed
degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---



-----------------------------------------
******* Internet Email Confidentiality ******* The information
contained in this message may be privileged and confidential and
protected from disclosure. If the reader of this message is not the
intended recipient, or an employee or agent responsible for
delivering this message to the intended recipient, you are hereby
notified that it is strictly prohibited (a) to disseminate,
distribute or copy this communication or any of the information
contained in it, or (b) to take any action based on the information
in it. If you have received this communication in error, please
notify us immediately by replying to the message and deleting it
from your computer.


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
 ---------------------------------------------------------------------------



This message and any attachments (the "message") is
intended solely for the addressees and is confidential. 
If you receive this message in error, please delete it and 
immediately notify the sender. Any use not in accord with 
its purpose, any dissemination or disclosure, either whole 
or partial, is prohibited except formal approval. The internet
can not guarantee the integrity of this message. 
BNP PARIBAS (and its subsidiaries) shall (will) not 
therefore be liable for the message if modified.


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------