Belgium
would make no less than 180k if he got a remote US based job. Systems Security Engineer w cissp, rmf/dod stig jobs, pen testing, all just based off what we know of you from this thread
My resume isn't all that impressive at this point. I don't have any internationally recognized certificates besides my ISTQB certification.
As far as pen testing goes, what I put on my resume is that I taught myself to work with Burp Suite Pro and used it to
steal years-long inactive social media accounts to then sell the usernames find and report vulnerabilities. The main thing I list is that Twitch 0day I uncovered that gave me full control over all their services, because my exploit allowed me to log in on site admins' accounts without requiring their email or password. That's the one that seemed to really impress every company I had interviews with when I explained how it worked and how I figured it out.
That's why I highly recommend to anyone looking to get into IT, it helps a ton if you have some sort of relevant side project(s)/hobbies that show off relevant skills for whatever you're going for.
I just hope I'm never asked to prove the Twitch 0day thing with communications or anything
My communications with Twitch are them threatening prosecution, then 2 of their admins (Hassan Bokhari and their at the time head of security Xangold) offering to bribe me with the offer of removing my existing Twitch permban (which was for repeated account theft/selling) and letting me keep a stolen username of my choice with no further bans for ban evasion. The only condition was to refrain from any further account theft/account selling and to never tell anyone, especially the media, that the exploit I reported ever existed.
Normally Twitch has a security hall of fame list for people who report serious vulnerabilities but mine isn't on there for obvious reasons.
Just recently, I randomly checked the Twitch profile of the head of security at the time, Xangold, who had an active part in the bribe offer. Unsurprisingly, Xangold got fired at some point and his own Twitch is permbanned for unspecified TOS violations
I know it's not defensible but I did clean up my act afterwards and found non-intrusive ways ("autoclaimers" for example) of getting high value social media usernames to sell as a sidehustle.
I can at least say I only used exploits to take accounts that'd been inactive for many years.
Parking is paid for, environment isn’t stressful (yet?), good looking coworkers, early schedule, company events.
